Interview Q&A

Short answer: Users authenticate via OAuth 2.0 / OpenID Connect. Azure AD issues tokens (ID token, access token, refresh token). Tokens are validated by the app to authorize access.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Microsoft.Identity.Web for ASP.NET Core. Configure authentication in Program.cs: builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationS cheme) .AddMicrosoftIdentityWebApi(builder.Configuration.GetSection("AzureA d")); app.UseAuthentication(); app.UseAuthorization(); Tokens from Azure AD validate API requests.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Enable App Service Authentication / “Easy Auth”. Connect to Azure AD under Authentication settings. App Service validates tokens before reaching the app.

Real-world example (ShopNest)

ShopNest’s API runs on Azure App Service with staging slots—swap staging to production after smoke tests.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: App Registration represents a client app in Azure AD. Defines Application ID, redirect URIs, API permissions, secrets/certificates.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Managed Identity allows apps to access Azure resources without storing credentials. System-assigned or user-assigned identity is granted access to resources like Key Vault or SQL Database.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Go to App Registration → API permissions Add delegated or application permissions Admin consent may be required

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: API validates incoming JWT bearer token from Azure AD. Configure authentication in ASP.NET Core: builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationS cheme) .AddJwtBearer(options => { options.Authority = $" options.Audience = clientId; });

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Register app with multi-tenant support in Azure AD. Use common or organizations endpoint for authentication: Validate tenant ID in API to ensure authorized access.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Import via OpenAPI/Swagger, WSDL (SOAP), or Azure Functions. Example in Azure Portal: Go to APIM → APIs → Add API → OpenAPI Upload your .json or .yaml API specification Configure backend URL and endpoints

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: API Keys: Generated per subscription, required in request headers or query parameters. OAuth 2.0: APIM can validate bearer tokens issued by Azure AD or external IdP. Example – API key header: GET Header: Ocp-Apim-Subscription-Key: <your-subscription-key>

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use the <rate-limit> or <quota> policy in APIM. Controls max requests per minute/hour to prevent abuse.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Create API versions via URL path, query string, or header. Example: URL versioning: /v1/products Header versioning: api-version: 1.0

Example code

Create API versions via URL path, query string, or header. Example: URL versioning: /v1/products Header versioning: api-version: 1.0

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Enable Azure Monitor, Application Insights, or built-in logging. Track requests, response times, errors, and throttling events.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use policies like <set-body>, <set-header>, <rewrite-uri>

Example code

Add a custom response header: <set-header name="X-Custom-Header" exists-action="override"> <value>API Managed</value> </set-header>

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Developer portal allows you to: Browse APIs View documentation Generate code snippets Test endpoints using “Try It” button

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use API gateway policies to enforce: Authentication/authorization IP filtering TLS/HTTPS Keeps backend services hidden from direct internet access

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Application Insights – Application performance, exceptions, telemetry Azure Monitor – Metrics, alerts, dashboards Log Analytics – Query logs across resources Azure Diagnostics – Collect runtime logs from App Services, VMs Network Watcher – Monitor networking issues

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use TrackMetric API in Application Insights. Example: var telemetry = new TelemetryClient(); telemetry.TrackMetric("ItemsProcessed", 100);

Example code

Use TrackMetric API in Application Insights. Example: var telemetry = new TelemetryClient(); telemetry.TrackMetric("ItemsProcessed", 100);

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Azure Monitor Alerts on metrics or log queries. Example: Alert when HTTP request failures exceed threshold: Metric: ServerResponseTime Condition: > 1000ms Action: Email, Webhook, Logic App

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Enable Application Insights in Function App. Monitor exceptions, failed invocations, and retries. Example: Check telemetry via FunctionInvocationException.

Real-world example (ShopNest)

Order-paid events go to Service Bus; an Azure Function sends the confirmation email asynchronously.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Query Performance Insight in Azure SQL portal Monitor DTU consumption, long-running queries, blocking sessions Enable Query Store for historical analysis

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Deployment Center in App Service Enable App Service logs (Application, HTTP, Web server logs) Access logs via Kudu Console or FTP

Real-world example (ShopNest)

ShopNest’s API runs on Azure App Service with staging slots—swap staging to production after smoke tests.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use modular architecture with microservices or layered design. Host APIs in Azure App Services or Azure Functions. Store data in Azure SQL, Cosmos DB, or Blob Storage. Implement CI/CD with Azure DevOps or GitHub Actions. Apply monitoring with Application Insights and security with Azure AD.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use deployment slots in Azure App Services. Deploy new version to staging slot, test it, then swap with production. Rollback is possible by swapping back.

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.

Short answer: Use Azure App Configuration or Feature Management library. Enables dynamic feature enable/disable without redeploying. Example in .NET: if (_featureManager.IsEnabledAsync("NewCheckout")) { // Execute new feature code }

Real-world example (ShopNest)

ShopNest on Azure typically uses App Service + SQL Database + Blob Storage + Application Insights for monitoring.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.