Pick a focused question that fits your time, stack, and interview goal.
How much time do you have?
Show one-drill sessions you can finish now.
1225 drills fit a 20-minute session. Closest fits first.
Page 43 of 52
Explains Redis-backed rate-limit counters, atomic increments, windows, identity keys, and fallback behavior.
Explains HTTPS, HSTS, secure cookies, HttpOnly, SameSite, no-store, and practical API/browser security hardening.
Explains structured logging fields, safe context, redaction, event naming, and avoiding secret or personal-data leaks.
Makes business uniqueness race-safe with the exact database key, while handling normalization, tenant scope, nulls, soft deletion, rollout cleanup, and stable API conflicts.
Explains why external data needs runtime validation even when the application uses TypeScript.
Uses ROW_NUMBER with deterministic partition ordering to return one complete latest row per group, then evaluates index support, tie semantics, scale, and read-model alternatives.
Use SemaphoreSlim to bound concurrent asynchronous work without blocking threads unnecessarily.
Use Task.WhenAll to run independent asynchronous I/O operations concurrently while handling exceptions, cancellation, and dependency limits.
Explains JWT validation, trusted issuers, audiences, expiration, signing keys, claims, and server-side authorization boundaries.
Chooses code organization from change locality, shared policy, and cross-cutting needs rather than adopting one folder structure universally.
Compares App Service WebJobs and Azure Functions for queue processing, scheduled tasks, scaling, deployment ownership, and operational isolation.
Explains the request identity model, principal and authorities, default thread-local storage, cleanup, and asynchronous boundaries.
Covers configuration that must stay with a slot, such as connection strings, secrets, callback URLs, and staging-only settings.
Connects transient, managed, detached, and removed states to persist, merge, dirty checking, and safe update workflows.
Covers symptom-based alerting for latency, error rate, availability, dependency failures, queue length, and resource pressure.
Explains singleton, prototype, request, session, application, and WebSocket scopes as container lifecycle policies.
Separates deterministic request-shape validation from authorization, I/O, workflows, and durable business invariants.
Defines races through timing-dependent shared-state operations and evaluates confinement, immutability, synchronization, and atomic tools.
Covers Promise-based params and search parameters, async request APIs, generated route types, and runtime validation.
Explains runtime output validation, filtering, serialization, and the security value of an explicit response contract.
Defines encapsulation as control over state and valid transitions, then connects it to defensive copying and persistence boundaries.
Separates final assignment, method overriding, and class inheritance while making clear that a final reference does not make an object immutable.
Explains which side writes a foreign key or join table and why both sides of an in-memory bidirectional relationship must remain consistent.
Explains RAG as a runtime retrieval boundary that supplies relevant, current, and governed evidence without changing model weights.