HTTPS, JWT/session auth, validate input, rate limit, hash passwords (bcrypt), least-privilege DB user. ShopNest rejects unsigned tokens and sanitizes search queries.
Oracle rounds often probe: SQL depth.
Themes commonly reported in public MNC interview experiences (AmbitionBox / LinkedIn / Glassdoor-style). Practice aloud; keep answers this short in the real round.