Interview Q&A

Short answer: to the action you're performing.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: ttacks like SQL injection, XSS, and DDoS.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: cross multiple regions or clouds. These services can handle regional failover nd direct traffic to the closest healthy instance. Microservices Security

Real-world example (ShopNest)

ShopNest’s API Gateway routes /orders to the Order service and /payments to Payment—clients talk to one entry point.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: uthentication service, and to the database query, allowing you to spot any delays in the flow.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: vailable during deployments. Example: In a Kubernetes environment, you can perform a rolling update by gradually updating pod replicas to ensure availability.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: cross services. A User Service might emit an event every time a user's profile is updated, and other services (e.g., Order Service) subscribe to these events to replicate the change in their own database.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: pplication/vnd.orders.v1+json Best Practice: It’s important to maintain backward compatibility in old versions and deprecate versions in a controlled manner.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Implement leader election and consensus mechanisms to ensure the service registry is synchronized.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: API Gateways can offer load balancing and efficient traffic distribution across services to handle high traffic loads. Example: Incoming traffic can be intelligently routed and distributed to ensure no single service is overwhelmed.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Configure timeouts, use retry patterns with exponential backoff, and implement rate limiting to handle transient failures.

Real-world example (ShopNest)

If Payment is down, the Order service fails fast with a circuit breaker instead of hanging every checkout thread.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: services and serve data from cache if the service is down.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: results) in case of failure, allowing users to continue their tasks with reduced functionality.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: service types, ensuring that failure in one area doesn’t impact the whole system.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Cloudflare, AWS WAF, Akamai Kona Site Defender to protect against attacks like SQL injection, XSS, and DDoS.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Leverage cloud-based DDoS protection services (e.g., AWS Shield, Cloudflare DDoS protection) to detect and mitigate attacks automatically.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: leveraging tools like Service Mesh (e.g., Istio) for deep visibility and policy enforcement.

Explain a bit more

How it applies to microservices: Authentication and authorization are performed on every request, regardless of its origin. mTLS is enforced between microservices to ensure both client and server are authenticated before communication happens. Service Meshes (like Istio) can help implement Zero Trust by automating identity verification, traffic encryption, and access policies across microservices.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Ensure all requests to the microservice include a custom header (e.g., X-CSRF-Token), which prevents unauthorized cross-origin requests from being executed.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Store JWT tokens in secure cookie storage or encrypted storage, and ensure tokens are signed with a secret key.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: You can implement RBAC at the API Gateway level to filter requests based on the role associated with the incoming token.

Real-world example (ShopNest)

ShopNest’s API Gateway routes /orders to the Order service and /payments to Payment—clients talk to one entry point.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: The API Gateway can validate incoming requests (e.g., check for valid API keys, ensure data formats are correct).

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Client Credentials Flow for service-to-service authentication, where services authenticate using their client ID and secret to obtain an access token.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: the application code.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Deploy a Service Mesh (e.g., Istio, Linkerd) to handle secure communication between microservices. It automates mTLS (mutual TLS) encryption, and centralizes security, monitoring, and traffic management.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Deploy edge services (e.g., API Gateway, NGINX, Kong) to manage routing across multiple regions or clouds. These services can handle regional failover and direct traffic to the closest healthy instance. Microservices Security

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: For services that need to be exposed outside the cluster, external load balancers (e.g., AWS ELB or Azure Load Balancer) can balance traffic to the Kubernetes ingress or service endpoints.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.