NET Core Code Security, Authorization/Authentication, and code architecture

Complex NET Core interview questions (Code Security, Authorization/Authentication, and code architecture) 

____________________________________________________________________________

1. Design and architecture using .net core
   
   The software needs the architectural design to represent the design of the software.
   

   
   Architectural styles. Each style will describe a system category that consists of : 
   

   • A set of components(eg: a database, computational modules) that will perform a function required by the system.
   • The connectors will help coordinate, communicate, and cooperate between the components.
   • Conditions that how components can be integrated to form the system.
   • Semantic models help the designer understand the system's overall properties.
   Data-centered architectures: 
   Data flow architectures: 
   Call and Return architectures
   Layered architecture
   
   
   
2. Microservices and communication patterns

   RESTful APIs
   

   gRPC
   

   Message Queues (e.g., RabbitMQ)
   

   Apache Kafka
   

   GraphQL

   
   
   
3. Web API authentication, authorization concepts
   
   
   
4. Broken access control 
   Broken Access Control is a type of application security vulnerability that enables users to access data and functionalities that they should not have access to. In most cases of Broken Access Control attacks, a malicious user takes advantage of weak or non-implementation of access control in the target application
   
   
5. Insecure hash
   A common application of SHA is to encrypt passwords, as the server side only needs to keep track of a specific user's hash value, rather than the actual password.
   
   
6. Cross-site scripting (XSS)
   Cross-site scripting (XSS) is an attack in which an attacker injects malicious executable scripts into the code of a trusted application or website. Attackers often initiate an XSS attack by sending a malicious link to a user and enticing the user to click it.
   
   
7. Code injection
   Code injection is the term used to describe attacks that inject code into an application. That injected code is then interpreted by the application, changing the way a program executes. Code injection attacks typically exploit an application vulnerability that allows the processing of invalid data.
   
   
8. Cross-site request forgery (CSRF)
   What is CSRF. Cross site request forgery (CSRF), also known as XSRF, Sea Surf or Session Riding, is an attack vector that tricks a web browser into executing an unwanted action in an application to which a user is logged in. A successful CSRF attack can be devastating for both the business and user.
   
   
9. NoSQL injection attack
   Cyber-attacks where malicious payload is injected into non-SQL databases, such as MongoDB, are called NoSQL
   
   
10. SQL injection (SQLi)
    SQL injection, also known as SQLI, is a common attack vector that uses malicious SQL code for backend database manipulation to access information that was not intended to be displayed. This information may include any number of items, including sensitive company data, user lists or private customer details.
    
    
11. XML external entity injection (XXE)
    XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data.
    
    
12. Logging vulnerabilities 
    1. Publicly exposed log files.
    2. Logging of sensitive information.
    3. Insufficient logging.
    4. Ability to poison log entries.
    5. Blocking (or overloading) logging systems
    
    
13. Server-side request forgery (SSRF)
    Server-side request forgery is a web security vulnerability that allows an attacker to cause the server-side application to make requests to an unintended location. In a typical SSRF attack, the attacker might cause the server to make a connection to internal-only services within the organization's infrastructure.

Practical EXAM TASC-HackerRank

 

• Candidates
• Tests
• Interviews
• Library
• Insights

All TestsDotNet Developer TASConnectQuestionsBinary PasswordsTry

A company wants all of its employees to focus on cyber security and hence regularly change their passwords. Given two binary string passwords s and t of equal length. Each string represents a binary integer where the first character represents the most significant bit of the number. You can rearrange the characters of t in any order you want.

 

The task is to maximize the value of bitwise XOR of s and t. Return this maximum possible XOR as a binary string of length the same as the input strings.

 

For example,

s = "0011110", t = "1111000",

It is optimal to rearrange the characters of t to "1100011".

The bitwise XOR of s and t would be "1111101".

Hence the answer is "1111101". It can be shown that this is the maximum possible answer.

 

Function Description

Complete the function getMaximumXor in the editor below. The function must return a binary string denoting the maximum possible value of bitwise XOR.

getMaximumXor has the following parameters:

    s: a binary string

    t: a binary string

 

Constraints

• 1 ≤ |s|, |t| ≤ 106, |s| denotes the length of string s.
• |s| = |t|
• It is guaranteed that s and t contain characters '0' and '1' only.

 

Input Format For Custom Testing

Sample Case 0

Sample Case 1

C#

1

using System.CodeDom.Compiler;

2

using System.Collections.Generic;

3

using System.Collections;

4

using System.ComponentModel;

5

using System.Diagnostics.CodeAnalysis;

6

using System.Globalization;

7

using System.IO;

8

using System.Linq;

9

using System.Reflection;

10

using System.Runtime.Serialization;

11

using System.Text.RegularExpressions;

12

using System.Text;

13

using System;

14

​

15

​

16

class Result

17

{

18

​

19

    /*

20

     * Complete the 'getMaximumXor' function below.

21

     *

22

     * The function is expected to return a STRING.

23

     * The function accepts following parameters:

24

     *  1. STRING s

25

     *  2. STRING t

26

     */

27

​

28

    public static string getMaximumXor(string s, string t)

29

    {

30

​

31

    }

32

​

33

}

34

​

35

​

36

class Solution

37

{

38

    public static void Main(string[] args)

39

    {

40

        TextWriter textWriter = new StreamWriter(@System.Environment.GetEnvironmentVariable("OUTPUT_PATH"), true);

41

​

42

        string s = Console.ReadLine();

43

​

44

        string t = Console.ReadLine();

45

​

46

        string result = Result.getMaximumXor(s, t);

47

​

48

        textWriter.WriteLine(result);

49

​

50

        textWriter.Flush();

51

        textWriter.Close();

52

    }

53

}

54

​

Line: 54 Col: 1

Test against custom input

Privacy policy Terms of Service API Quick Tour Support