🔗

REST APIs

HTTP verbs, status codes, idempotency, versioning.

24 questions
HTTP MethodsStatus CodesIdempotencyAuthVersioningHATEOAS

Sample Questions (24 live)

IdempotencyMedium

Which HTTP methods are idempotent and why does it matter?

AmazonDeloitteAccentureRead →
Status CodesEasy

Explain the main HTTP status code families.

InfosysTCSAccentureRead →
AuthMedium

What is a JWT and how does it work?

AmazonDeloitteRead →
HTTP MethodsEasy

Explain REST and the main HTTP verbs.

AmazonInfosysTCSRead →
HTTP MethodsEasy

PUT vs PATCH — which do you use to update a resource, and why does it matter?

InfosysTCSCognizantRead →
HTTP MethodsEasy

When do you use path params vs query params vs the request body?

TCSInfosysWiproRead →
AuthEasy

What does 'stateless' mean in REST, and how does it enable horizontal scaling?

AmazonInfosysCognizantRead →
HTTP MethodsEasy

How does HTTP content negotiation work (Accept vs Content-Type)?

InfosysAccentureDeloitteRead →
VersioningMedium

What are the API versioning strategies, and which do you choose for a public API?

AmazonMicrosoftDeloitteRead →
VersioningMedium

How do you design pagination, filtering and sorting for a list endpoint?

AmazonGoogleMicrosoftRead →
IdempotencyMedium

How do you make a POST safe to retry using idempotency keys?

AmazonMicrosoftbankingRead →
AuthMedium

API keys vs OAuth2 vs JWT — when do you use each for API auth?

AmazonMicrosoftGoogleRead →
AuthMedium

How do you design API rate limiting, and what do you return when a client exceeds it?

AmazonGoogleMicrosoftRead →
Status CodesMedium

How do you design consistent, useful API error responses?

AmazonMicrosoftDeloitteRead →
HATEOASMedium

What is the Richardson Maturity Model, and is HATEOAS worth implementing?

AmazonDeloitteMicrosoftRead →
Status CodesMedium

How do ETags and Cache-Control make APIs faster and prevent lost updates?

AmazonGoogleMicrosoftRead →
AuthMedium

What is CORS, why does the browser block requests, and how do you fix it correctly?

AmazonCognizantAccentureRead →
HATEOASMedium

REST vs GraphQL vs gRPC — when would you choose each?

AmazonGoogleMicrosoftRead →
AuthHard

What are the top API security risks (OWASP API), and how do you prevent BOLA?

AmazonMicrosoftGoogleRead →
VersioningHard

How do you evolve a public API without breaking existing clients?

AmazonMicrosoftGoogleRead →
IdempotencyHard

How do you design a REST API for a long-running operation (can't finish in one request)?

AmazonMicrosoftGoogleRead →
Status CodesHard

How do you design a bulk/batch API and handle partial failures?

AmazonMicrosoftDeloitteRead →
AuthHard

What does an API gateway do, and why put one in front of your services?

AmazonMicrosoftGoogleRead →
IdempotencyHard

How do you design reliable, secure webhooks for event delivery?

AmazonMicrosoftStripe-likeRead →

Advertisement

Google AdSense slot