Roadmap › 7. Interview Questions & Career › Step 57
FS
.NET Full Stack Developer Interview — End to End
How .NET full stack interviews run, the end-to-end request flow (Angular/React → ASP.NET Core → EF Core → SQL Server), authentication, a feature built across every layer, performance, deployment, architecture and system design — with the questions interviewers ask most.
Quick revision for interview day. Print it or save it as a PDF.
End-to-end request path
UI service → interceptor (JWT) → CORS preflight → Kestrel → exception handler → routing → CORS → authN → authZ → endpoint → validation → service → EF Core / Dapper → SQL Server → DTO → JSON → UI state → render.
Status codes to quote
| Code | Use |
|---|---|
| 200 / 201 / 204 | OK / Created (+ Location) / No content (delete, update) |
| 202 | Accepted — background job started |
| 400 | Validation failed (ProblemDetails with errors) |
| 401 / 403 | Not authenticated / authenticated but not allowed |
| 404 / 409 | Not found / conflict (concurrency, duplicate) |
| 429 | Rate limited |
| 500 | Unhandled error — log with correlation id |
Performance checklist
- Server-side paging, projection to DTOs,
AsNoTrackingfor reads - Index for every important
WHERE+ORDER BY; read the execution plan - No N+1, no query inside a loop, no
.Result/.Wait() - Cache reference data (
IMemoryCache/HybridCache/Redis) - UI: lazy routes, debounce + cancel, virtual scrolling,
OnPush/signals ormemo
Security checklist
- HTTPS + HSTS; JWT from a trusted IdP; policies, not only roles
- Ownership checks on every resource (no IDOR)
- Parameterised SQL only; validate all input
- CORS limited to known origins; rate limiting
- Secrets in Key Vault with Managed Identity; nothing sensitive in logs or JWT payload
Project answer skeleton
Business → Frontend → API layers → Data → Security → CI/CD & hosting → My contribution + one number.
Words that show seniority
Idempotency key · outbox pattern · correlation id · ProblemDetails · optimistic concurrency (ROWVERSION) · covering index · keyset paging · modular monolith · Managed Identity · deployment slots · feature flags · health checks.