Drills

Pick a focused question that fits your time, stack, and interview goal.

How much time do you have?

Show one-drill sessions you can finish now.

Track

Practice style

Level

More filters1

Topic

Technology

Tech stack

Skill area

7 results across 1 active filter

Page 1 of 1

Concept questionMedium~7 min

Authenticate service-to-service API calls

Explains API keys, client credentials, managed identity, mTLS, scopes, rotation, and per-client observability.

.NETASP.NET CoreAzureJWTOAuth2+1

Practice drill

Comparison question

Easy

~5 min

Authentication vs authorization in ASP.NET Core APIs

Separates identity establishment from permission decisions and applies ASP.NET Core schemes, policies, tenant boundaries, ownership checks, and correct challenge or forbid behavior.

.NETASP.NET CoreC#JWTOAuth2+1

Practice drill

Comparison questionMedium~7 min

Compare access tokens and refresh tokens

Explains short-lived access tokens, refresh-token rotation, revocation, storage choices, and replay detection.

.NETASP.NET CoreJWTOAuth2OpenID Connect

Practice drill

Debugging scenarioMedium~10 min

Debug 401 vs 403 failures in ASP.NET Core APIs

Debugs ASP.NET Core authentication challenges and authorization forbids across schemes, token validation, policies, claims, tenants, and resource checks.

.NETASP.NET CoreC#JWTOAuth2+1

Practice drill

Comparison questionMedium~7 min

OAuth 2.0, OpenID Connect, and authorization code with PKCE

Separates OAuth authorization from OpenID Connect authentication and explains why modern interactive clients use authorization code with PKCE.

.NETASP.NET CoreOAuth2OpenID Connect

Practice drill

System designHard~20 min

Security boundaries between client, API, and identity provider

Separates identity issuance, untrusted client behavior, API authorization, tenant isolation, resource checks, and token-handling responsibilities.

.NETASP.NET CoreC#JWTOAuth2+1

Practice drill

Concept questionMedium~7 min

Use an external identity provider without losing app authorization

Explains the boundary between OAuth/OIDC identity, application users, claims mapping, roles, and app-specific permissions.

.NETASP.NET CoreJWTOAuth2OpenID Connect

Practice drill