HTTPS, WAF, private subnets for DB, managed identity, least privilege IAM, rate limits. ShopNest DB has no public IP.
CGI rounds often probe: Government/enterprise delivery.
Themes commonly reported in public MNC interview experiences (AmbitionBox / LinkedIn / Glassdoor-style). Practice aloud; keep answers this short in the real round.