HTTPS, WAF, private subnets for DB, managed identity, least privilege IAM, rate limits. ShopNest DB has no public IP.
Hexaware rounds often probe: Automation + full-stack.
Themes commonly reported in public MNC interview experiences (AmbitionBox / LinkedIn / Glassdoor-style). Practice aloud; keep answers this short in the real round.