Networking, Security and Team Development cross interview #7
Networking:
- What is HTTP, and how does the HTTP request-response cycle work?
- Compare and contrast HTTP/1, HTTP/2, and HTTP/3.
- What is REST, and what are its key principles?
- What are HTTP status codes? Provide examples of a success, client error, and server error status code.
- What is the role of HTTPS in ensuring secure communication, and how does the SSL/TLS handshake work?
- What are the main differences between GET, POST, PUT, PATCH, and DELETE HTTP methods?
- How does HTTP header information affect web communication and security?
- What is HTTP caching, and how can it improve web application performance?
Security:
- What is CORS, and how does it relate to the Same-Origin Policy?
- What are the OWASP Top 10 vulnerabilities, and why are they important?
- What is XSS (Cross-Site Scripting), and how can it be prevented?
- What is CSRF (Cross-Site Request Forgery), and how does it differ from XSS?
- What is a “Man-in-the-Middle” (MITM) attack, and how can HTTPS protect against it?
- Explain how you would secure sensitive environment variables in a Node.js application.
- What is Content Security Policy (CSP), and how does it help prevent web vulnerabilities?
- What are some common protections against OWASP Top 10 vulnerabilities?
Team Development:
- What is the main difference between Agile, Scrum and traditional methodologies like Waterfall?
- What are the main roles or responsibilities in Scrum? Briefly describe their duties.
- What are the key artifacts and events in Scrum (e.g., sprints, retrospectives)?
- How does Kanban work? How is it different from Scrum?
- What branching strategies in Git do you know?
- What is the difference between Git Flow and Feature Branch?
- What is Continuous Integration?
- What is Continuous Delivery/Deployment?
- Provide examples of following the KISS principle.
- Provide examples of following the DRY principle.
- Provide examples of following the YAGNI principle.
- Why is it important to follow foundational software development principles in your daily coding practice?
- What are the common mistakes to avoid during a Code Review?
- How can Code Reviews contribute to team knowledge sharing and code quality improvement?