Interview Q&A

Short answer: Machines managed by you to run CI/CD pipelines. Useful for custom software, large builds, or on-prem resources.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Key-value pairs used in pipelines for configuration, secrets, or dynamic values. Can be set at pipeline, stage, or runtime.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Define stages in YAML for Dev, QA, Staging, and Production. Example: stages: stage: Build jobs: job: BuildJob steps: script: dotnet build stage: Deploy dependsOn: Build jobs: deployment: DeployJob environment: 'Production' strategy: runOnce: deploy: steps: script: echo Deploying to Production

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use deployment slots in Azure App Service. Configure previous successful release as rollback target in pipeline. Example: swap staging → production if failure occurs.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Azure Active Directory (Azure AD) is a cloud-based identity and access management service. Provides authentication, single sign-on (SSO), multi-factor authentication (MFA), and identity protection for apps and services.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Users authenticate via OAuth 2.0 / OpenID Connect. Azure AD issues tokens (ID token, access token, refresh token). Tokens are validated by the app to authorize access.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Feature Azure AD Azure AD B2C Target Employees/internal Customers/external Features SSO, MFA, RBAC Customizable login, social logins Protocol OAuth, SAML, OpenID OAuth, OpenID, social authentication

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: RBAC restricts access to resources based on roles assigned to users/groups. Example: Reader, Contributor, Owner roles in Azure.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Microsoft.Identity.Web for ASP.NET Core. Configure authentication in Program.cs: builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationS cheme) .AddMicrosoftIdentityWebApi(builder.Configuration.GetSection("AzureA d")); app.UseAuthentication(); app.UseAuthorization(); Tokens from Azure AD validate API requests.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: MSAL (Microsoft Authentication Library) enables apps to authenticate users and acquire tokens. Supports .NET, JavaScript, Python, Java.

Example code

acquiring token in .NET: var app = ConfidentialClientApplicationBuilder.Create(clientId) .WithClientSecret(clientSecret) .WithAuthority(new Uri($" .Build(); string[] scopes = { " }; var result = await app.AcquireTokenForClient(scopes).ExecuteAsync(); Console.WriteLine(result.AccessToken);

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: OpenID Connect (OIDC) is an identity layer on top of OAuth 2.0. Provides authentication and ID tokens for apps. Ensures SSO and identity validation in modern applications.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Enable App Service Authentication / “Easy Auth”. Connect to Azure AD under Authentication settings. App Service validates tokens before reaching the app.

Real-world example (ShopNest)

ShopNest’s API runs on Azure App Service with staging slots—swap staging to production after smoke tests.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: App Registration represents a client app in Azure AD. Defines Application ID, redirect URIs, API permissions, secrets/certificates.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Managed Identity allows apps to access Azure resources without storing credentials. System-assigned or user-assigned identity is granted access to resources like Key Vault or SQL Database.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Feature System-assigne User-assigned Lifecycle Tied to resource Independent Reusabl No Yes Example App Service Shared across multiple resources

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Go to App Registration → API permissions Add delegated or application permissions Admin consent may be required

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: API validates incoming JWT bearer token from Azure AD. Configure authentication in ASP.NET Core: builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationS cheme) .AddJwtBearer(options => { options.Authority = $" options.Audience = clientId; });

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Register app with multi-tenant support in Azure AD. Use common or organizations endpoint for authentication: Validate tenant ID in API to ensure authorized access.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: APIM is a full-featured API gateway for publishing, securing, monitoring, and analyzing APIs. Helps abstract backend services, provide security, and manage consumption by developers.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Import via OpenAPI/Swagger, WSDL (SOAP), or Azure Functions. Example in Azure Portal: Go to APIM → APIs → Add API → OpenAPI Upload your .json or .yaml API specification Configure backend URL and endpoints

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: API Keys: Generated per subscription, required in request headers or query parameters. OAuth 2.0: APIM can validate bearer tokens issued by Azure AD or external IdP. Example – API key header: GET Header: Ocp-Apim-Subscription-Key: <your-subscription-key>

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Policies are configuration statements to modify API behavior. Can be applied at global, API, or operation level. Examples: rate limit, caching, authentication, request/response transformation Example – Rate limit policy: <rate-limit calls="10" renewal-period="60" />

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use the <rate-limit> or <quota> policy in APIM. Controls max requests per minute/hour to prevent abuse.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Create API versions via URL path, query string, or header. Example: URL versioning: /v1/products Header versioning: api-version: 1.0

Example code

Create API versions via URL path, query string, or header. Example: URL versioning: /v1/products Header versioning: api-version: 1.0

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Enable Azure Monitor, Application Insights, or built-in logging. Track requests, response times, errors, and throttling events.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.