Anti-Forgery Tokens ● Protects against CSRF attacks ● In Razor: <form method="post"> @Html.AntiForgeryToken() </form> ● In API: use services.AddAntiforgery(), validate via [ValidateAntiForgeryToken]. 1⃣

Short answer: Anti-Forgery Tokens Protects against CSRF attacks In Razor: <form method="post"> @Html.AntiForgeryToken() </form> In API: use services.AddAntiforgery(), validate via [ValidateAntiForgeryToken]. 1⃣

Real-world example (ShopNest)

ShopNest’s product edit form posts to an MVC action. Model binding fills a ProductEditVm; the action validates and redisplay the view on errors.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.