Interview Q&A

Short answer: Restricts database access to specific IP ranges or VNets. Ensures only authorized clients can connect.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Provisioned throughput: Fixed Request Units (RUs) per second. Serverless: Automatically scales and billed per request. Use serverless for low or intermittent traffic.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: SQL (Core) API MongoDB API Cassandra API Gremlin (Graph) API Table API

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Azure.Cosmos NuGet package (v3+) is preferred. Example: var cosmosClient = new CosmosClient(endpointUri, primaryKey); var container = cosmosClient.GetContainer("DatabaseId", "ContainerId");

Example code

Azure.Cosmos NuGet package (v3+) is preferred. Example: var cosmosClient = new CosmosClient(endpointUri, primaryKey);
var container = cosmosClient.GetContainer("DatabaseId", "ContainerId");

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use QueryDefinition and FeedIterator with MaxItemCount. var query = new QueryDefinition("SELECT * FROM c"); var iterator = container.GetItemQueryIterator<MyItem>(query, requestOptions: new QueryRequestOptions { MaxItemCount = 10 }); while (iterator.HasMoreResults) { foreach (var item in await iterator.ReadNextAsync()) { Console.WriteLine(item.Id); } }

Example code

Use QueryDefinition and FeedIterator with MaxItemCount. var query = new QueryDefinition("SELECT * FROM c");
var iterator = container.GetItemQueryIterator<MyItem>(query,
requestOptions: new QueryRequestOptions { MaxItemCount = 10 }); while (iterator.HasMoreResults) {
foreach (var item in await iterator.ReadNextAsync())
{ Console.WriteLine(item.Id); }
}

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Cosmos DB supports Strong, Bounded Staleness, Session, Consistent Prefix, Eventual. Set consistency when creating CosmosClient: var clientOptions = new CosmosClientOptions

Example code

{ ConsistencyLevel = ConsistencyLevel.Session }; var cosmosClient = new CosmosClient(endpointUri, primaryKey, clientOptions);

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Cosmos DB automatically indexes all properties by default. You can customize index paths for performance. { "indexingMode": "consistent", "includedPaths": [ {"path": "/name/?"}, {"path": "/age/?"} }

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Automatic backups every 4 hours (retention 7–30 days depending on config). Restore using point-in-time restore in Azure Portal or via CLI.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Azure Key Vault is a cloud service for securely storing and managing secrets, keys, and certificates. Helps protect sensitive information like connection strings, passwords, API keys, and encryption keys.

Real-world example (ShopNest)

Connection strings and payment keys live in Key Vault—not in source control or plain appsettings on disk.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Secrets: Strings, passwords, API keys, connection strings Keys: Cryptographic keys for encryption/decryption (RSA, EC) Certificates: SSL/TLS or client certificates

Real-world example (ShopNest)

Connection strings and payment keys live in Key Vault—not in source control or plain appsettings on disk.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Azure.Extensions.AspNetCore.Configuration.Secrets package to load secrets into IConfiguration. var builder = new ConfigurationBuilder() .AddAzureKeyVault(new Uri(" new DefaultAzureCredential()); var configuration = builder.Build();

Example code

var secretValue = configuration["MySecret"];

Real-world example (ShopNest)

Connection strings and payment keys live in Key Vault—not in source control or plain appsettings on disk.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Configure Access Policies in Azure Portal or via Azure CLI. Assign roles: Get → read secrets List → enumerate secrets Set → update secrets Use Managed Identity for apps instead of storing credentials.

Real-world example (ShopNest)

Connection strings and payment keys live in Key Vault—not in source control or plain appsettings on disk.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Feature Secret Key Certificate Data type Any string Cryptographic key X.509 certificate Use case Passwords, connection strings Encryption, signing SSL/TLS or client auth Managed by Secret store Key store Certificate store

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Enable Managed Identity on your App Service or Function App. Grant Key Vault access policy to the identity. Access secrets without storing credentials: var client = new SecretClient(new Uri(" new DefaultAzureCredential()); KeyVaultSecret secret = client.GetSecret("MySecret");

Example code

string value = secret.Value;

Real-world example (ShopNest)

Connection strings and payment keys live in Key Vault—not in source control or plain appsettings on disk.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Enable diagnostic logging in Azure Key Vault. Logs include secret reads, updates, deletions, and authentication attempts. Can be sent to Log Analytics, Event Hub, or Storage Account.

Real-world example (ShopNest)

Connection strings and payment keys live in Key Vault—not in source control or plain appsettings on disk.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Update via Azure Portal, Azure CLI, PowerShell, or SDK. Example using SDK: var client = new SecretClient(new Uri(" new DefaultAzureCredential()); client.SetSecret("MySecret", "NewValue");

Example code

Update via Azure Portal, Azure CLI, PowerShell, or SDK. Example using SDK: var client = new SecretClient(new Uri(" new DefaultAzureCredential()); client.SetSecret("MySecret", "NewValue");

Real-world example (ShopNest)

Connection strings and payment keys live in Key Vault—not in source control or plain appsettings on disk.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Store connection strings as secrets in Key Vault. Load them in ASP.NET Core via IConfiguration. Avoid storing secrets in appsettings.json or code.

Real-world example (ShopNest)

Connection strings and payment keys live in Key Vault—not in source control or plain appsettings on disk.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Yes, using in-memory caching or Azure App Configuration with Key Vault integration. Improves performance and reduces frequent Key Vault calls.

Real-world example (ShopNest)

Connection strings and payment keys live in Key Vault—not in source control or plain appsettings on disk.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Managed Identity instead of app credentials. Enable soft-delete and purge protection. Rotate secrets regularly. Restrict access using RBAC or access policies. Enable logging and monitoring for audit purposes.

Real-world example (ShopNest)

Connection strings and payment keys live in Key Vault—not in source control or plain appsettings on disk.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: An Azure Storage Account is a container for all storage services in Azure. Provides Blob, Queue, Table, and File storage. Offers scalable, durable, and highly available storage.

Real-world example (ShopNest)

Product images upload to Azure Blob Storage; the DB only stores the blob URL.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Containers are logical groups of blobs within a storage account. Like folders in a file system. Each blob must belong to one container.

Real-world example (ShopNest)

Product images upload to Azure Blob Storage; the DB only stores the blob URL.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Azure.Storage.Blobs NuGet package. Upload example: var blobServiceClient = new BlobServiceClient(connectionString); var containerClient = blobServiceClient.GetBlobContainerClient("mycontainer"); var blobClient = containerClient.GetBlobClient("file.txt"); using var fileStream = File.OpenRead("localfile.txt"); await blobClient.UploadAsync(fileStream, overwrite: true); Download example: var downloadPath =…

Explain a bit more

"downloaded.txt"; await blobClient.DownloadToAsync(downloadPath);

Example code

Use Azure.Storage.Blobs NuGet package. Upload example: var blobServiceClient = new BlobServiceClient(connectionString);
var containerClient = blobServiceClient.GetBlobContainerClient("mycontainer"); var blobClient = containerClient.GetBlobClient("file.txt");
using var fileStream = File.OpenRead("localfile.txt");
await blobClient.UploadAsync(fileStream, overwrite: true); Download example: var downloadPath = "downloaded.txt";
await blobClient.DownloadToAsync(downloadPath);

Real-world example (ShopNest)

Product images upload to Azure Blob Storage; the DB only stores the blob URL.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Blob tier determines cost and access latency. Can be set during upload or later: await blobClient.SetAccessTierAsync(AccessTier.Cool); Hot: Frequently accessed Cool: Infrequent access Archive: Rarely accessed

Real-world example (ShopNest)

Product images upload to Azure Blob Storage; the DB only stores the blob URL.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: A message queuing service for decoupled communication between applications. Supports FIFO processing, retries, and message TTL.

Real-world example (ShopNest)

Product images upload to Azure Blob Storage; the DB only stores the blob URL.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Azure.Storage.Queues package. Send message: var queueClient = new QueueClient(connectionString, "myqueue"); await queueClient.CreateIfNotExistsAsync(); await queueClient.SendMessageAsync("Hello, Azure Queue!"); Receive message: var message = await queueClient.ReceiveMessageAsync(); Console.WriteLine(message.Value.MessageText); await queueClient.DeleteMessageAsync(message.Value.MessageId,…

Example code

Use Azure.Storage.Queues package. Send message: var queueClient = new QueueClient(connectionString, "myqueue");
await queueClient.CreateIfNotExistsAsync();
await queueClient.SendMessageAsync("Hello, Azure Queue!"); Receive message: var message = await queueClient.ReceiveMessageAsync(); Console.WriteLine(message.Value.MessageText); await queueClient.DeleteMessageAsync(message.Value.MessageId, message.Value.PopReceipt);

Real-world example (ShopNest)

Order-paid events go to Service Bus; an Azure Function sends the confirmation email asynchronously.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.