HTTPS, WAF, private subnets for DB, managed identity, least privilege IAM, rate limits. ShopNest DB has no public IP.
Coforge rounds often probe: Travel/BFSI stacks.
Themes commonly reported in public MNC interview experiences (AmbitionBox / LinkedIn / Glassdoor-style). Practice aloud; keep answers this short in the real round.