Always use parameters or EF Core LINQ — never concatenate user text into SQL. Example: WHERE Id = @id with orderId from the request. ShopNest search box never builds SQL with string + userInput.
Hexaware rounds often probe: Automation + full-stack.
Themes commonly reported in public MNC interview experiences (AmbitionBox / LinkedIn / Glassdoor-style). Practice aloud; keep answers this short in the real round.