Authentication answers “who are you?” (login / JWT). Authorization answers “what can you do?” (roles/policies). ShopNest checkout: JWT proves you are the customer; only Admin role can refund orders.
CGI rounds often probe: Government/enterprise delivery.
Themes commonly reported in public MNC interview experiences (AmbitionBox / LinkedIn / Glassdoor-style). Practice aloud; keep answers this short in the real round.