Interview Q&A

Answer: Key-value pairs used in pipelines for configuration, secrets, or dynamic values. Can be set at pipeline, stage, or runtime.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

• Define stages in YAML for Dev, QA, Staging, and Production.
• Example:

stages:

• stage: Build

jobs:

• job: BuildJob

steps:

• script: dotnet build
• stage: Deploy

dependsOn: Build

jobs:

• deployment: DeployJob

environment: 'Production'

strategy:

runOnce:

deploy:

steps:

• script: echo Deploying to Production

Answer: Use deployment slots in Azure App Service. Configure previous successful release as rollback target in pipeline. Example: swap staging → production if failure occurs.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: Azure Active Directory (Azure AD) is a cloud-based identity and access management service. Provides authentication, single sign-on (SSO), multi-factor authentication (MFA), and identity protection for apps and services.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: Users authenticate via OAuth 2.0 / OpenID Connect. Azure AD issues tokens (ID token, access token, refresh token). Tokens are validated by the app to authorize access.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: Feature Azure AD Azure AD B2C Target Employees/internal Customers/external Features SSO, MFA, RBAC Customizable login, social logins Protocol OAuth, SAML, OpenID OAuth, OpenID, social authentication

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: RBAC restricts access to resources based on roles assigned to users/groups. Example: Reader, Contributor, Owner roles in Azure.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

• Use Microsoft.Identity.Web for ASP.NET Core.
• Configure authentication in Program.cs:

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationS

cheme)

.AddMicrosoftIdentityWebApi(builder.Configuration.GetSection("AzureA

d"));

pp.UseAuthentication();

pp.UseAuthorization();

• Tokens from Azure AD validate API requests.

• MSAL (Microsoft Authentication Library) enables apps to authenticate users and

cquire tokens.

• Supports .NET, JavaScript, Python, Java.

Example: acquiring token in .NET:

var app = ConfidentialClientApplicationBuilder.Create(clientId)

.WithClientSecret(clientSecret)

.WithAuthority(new

Uri($"

.Build();

string[] scopes = { "

};

var result = await app.AcquireTokenForClient(scopes).ExecuteAsync();

Console.WriteLine(result.AccessToken);

Answer: OpenID Connect (OIDC) is an identity layer on top of OAuth 2.0. Provides authentication and ID tokens for apps. Ensures SSO and identity validation in modern applications.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: Enable App Service Authentication / “Easy Auth”. Connect to Azure AD under Authentication settings. App Service validates tokens before reaching the app.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: App Registration represents a client app in Azure AD. Defines Application ID, redirect URIs, API permissions, secrets/certificates.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: Managed Identity allows apps to access Azure resources without storing credentials. System-assigned or user-assigned identity is granted access to resources like Key Vault or SQL Database.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: Feature System-assigne User-assigned Lifecycle Tied to resource Independent Reusabl No Yes Example App Service Shared across multiple resources

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: Go to App Registration → API permissions Add delegated or application permissions Admin consent may be required

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

• API validates incoming JWT bearer token from Azure AD.
• Configure authentication in ASP.NET Core:

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationS

cheme)

.AddJwtBearer(options =>

{

options.Authority =

$"

options.Audience = clientId;

});

Answer: Register app with multi-tenant support in Azure AD. Use common or organizations endpoint for authentication: Validate tenant ID in API to ensure authorized access.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: APIM is a full-featured API gateway for publishing, securing, monitoring, and nalyzing APIs. Helps abstract backend services, provide security, and manage consumption by developers.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: Import via OpenAPI/Swagger, WSDL (SOAP), or Azure Functions. Example in Azure Portal: Go to APIM → APIs → Add API → OpenAPI Upload your .json or .yaml API specification Configure backend URL and endpoints

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

• API Keys: Generated per subscription, required in request headers or query

parameters.

• OAuth 2.0: APIM can validate bearer tokens issued by Azure AD or external IdP.

Example – API key header:

GET

Header: Ocp-Apim-Subscription-Key: <your-subscription-key>

• Policies are configuration statements to modify API behavior.
• Can be applied at global, API, or operation level.
• Examples: rate limit, caching, authentication, request/response transformation

Example – Rate limit policy:

<rate-limit calls="10" renewal-period="60" />

Answer: Use the &lt;rate-limit&gt; or &lt;quota&gt; policy in APIM. Controls max requests per minute/hour to prevent abuse.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: Create API versions via URL path, query string, or header. Example: URL versioning: /v1/products Header versioning: api-version: 1.0

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

Answer: Enable Azure Monitor, Application Insights, or built-in logging. Track requests, response times, errors, and throttling events.

What interviewers expect

• A clear definition tied to Azure in Microsoft Azure projects
• Trade-offs (performance, maintainability, security, cost)
• When you would and would not use it in production

Real-world example

In a production Microsoft Azure application, teams apply this when handling user-facing features or integration boundaries. For example, you might use it during a sprint where reliability and observability matter—logging metrics, validating edge cases, and documenting the decision in an ADR so future developers understand why the approach was chosen.

How to explain in the interview

1. Define the concept in one or two sentences.
2. Context — where it fits in Microsoft Azure architecture.
3. Example — a specific project, bug, or performance win.
4. Trade-off — what you gain vs what you sacrifice.

Tip: Practice aloud on Toolliyo mock interview or the Interview Q&A section before your real interview.

• Use policies like <set-body>, <set-header>, <rewrite-uri>
• Example: Add a custom response header:

<set-header name="X-Custom-Header" exists-action="override">

<value>API Managed</value>

</set-header>