Advanced Java Backend Developer Interview Prep

Define request and response DTOs that prevent persistence entities from leaking across an API boundary.

Apply Jakarta Bean Validation and map validation failures to a consistent field-level error contract.

Map business, not-found, and conflict exceptions to appropriate HTTP responses with @RestControllerAdvice.

Demarcate a service operation with @Transactional and predict rollback behavior for checked and unchecked exceptions.

Implement a paginated repository query and eliminate an N+1 problem using an entity graph or appropriate fetch strategy.

Write an isolated service test with JUnit 5 and Mockito that verifies results, failures, and collaborator interactions.

Threat-model a REST endpoint and propose mitigations for SQL injection, insecure object access, excessive data exposure, and unsafe error disclosure.

Differentiate authentication, authorization, encoding, encryption, hashing, and digital signatures in backend interview scenarios.

Trace an HTTP request through Spring Security’s filter chain, AuthenticationManager, and SecurityContext.

Configure a SecurityFilterChain with public, authenticated, and role-restricted endpoints.

Store and verify passwords with BCrypt and explain why passwords must not be reversibly encrypted.

Configure CSRF, CORS, and security response headers appropriately for cookie-based and bearer-token clients.

Decode a JWT’s header, claims, and signature while explaining why its payload is not encrypted by default.

Validate a JWT’s signature, issuer, audience, expiration, not-before time, and permitted clock skew.

Configure Spring Security as a stateless OAuth 2.0 resource server that accepts bearer JWTs.

Map token claims to authorities and enforce authorization with request rules and method security.

Distinguish access tokens, refresh tokens, ID tokens, and authorization codes, and select an OAuth 2.0 flow for browser and service clients.

Design expiration, refresh, revocation, signing-key rotation, and gateway rate-limiting policies for a token-protected API.

Derive a bucket index from a key’s hash and trace HashMap put and get operations through bucket lookup and key comparison.

Analyze how violations of the equals and hashCode contracts cause failed lookups, duplicate logical keys, or poor distribution.

Trace collision handling and explain when a Java 8+ bucket changes between a linked list and a red-black tree.

Predict how load factor, threshold, capacity growth, and resizing affect HashMap performance and memory use.

Choose among HashMap, Hashtable, synchronizedMap, and ConcurrentHashMap while explaining the dangers of mutable keys and concurrent writes.

Solve and explain an interview problem using a map for frequency counting, deduplication, or constant-time lookup.

Trace Java thread states and distinguish start(), run(), sleep(), wait(), notify(), and join().

Demonstrate a race condition and compare fixes using synchronized, ReentrantLock, and atomic classes.

Explain visibility, ordering, atomicity, happens-before relationships, and the limitations of volatile.

Execute bounded tasks with ExecutorService and select a pool strategy for CPU-bound and I/O-bound workloads.

Compose asynchronous operations and recover from failures with CompletableFuture.

Diagnose a deadlock from lock ordering or a thread dump and apply a prevention strategy.

Trace class loading, linking, initialization, and parent delegation for a Java class.

Distinguish stack frames, heap, metaspace, program counters, native stacks, and the string pool.

Explain object allocation, reachability, reference strength, and eligibility for garbage collection.

Compare young- and old-generation collection, stop-the-world behavior, compaction, and the goals of Serial, Parallel, G1, and low-pause collectors.

Explain how bytecode interpretation, JIT compilation, inlining, and escape analysis affect program execution.

Diagnose stack overflow, heap exhaustion, metaspace exhaustion, direct-memory failures, and deadlocks by selecting appropriate dumps, logs, and JDK tools.

Decide whether a scenario warrants a modular monolith or microservices using deployment, ownership, scaling, and operational criteria.

Define service boundaries around business capabilities and assign independent data ownership without creating a distributed monolith.

Choose synchronous HTTP or asynchronous messaging for an interaction based on consistency, latency, coupling, and failure requirements.

Trace a microservice request through an API gateway, load balancer, service discovery, and centralized configuration components.

Design an idempotency mechanism for a retried create or payment-like operation.

Model an eventually consistent workflow and justify choreography or orchestration for its Saga.

Bootstrap two provided Spring Boot service skeletons with independently owned PostgreSQL schemas and configurations.

Implement a typed service-to-service call with RestClient and configure connection and read timeouts.

Configure Resilience4j retry only for idempotent transient failures and explain retry amplification.

Configure a circuit breaker and a fallback that preserves correctness across closed, open, and half-open states.

Propagate a correlation identifier and use structured logs to trace one request across both services.

Expose Actuator health and metrics and classify useful logs, metrics, and traces for latency, traffic, errors, and saturation.

Explain the relationships among images, containers, registries, layers, volumes, networks, and build contexts.

Write a cache-efficient multi-stage Dockerfile that builds a Spring Boot JAR, uses .dockerignore, and runs as a non-root user.

Pass profile and database settings through environment variables without baking secrets into an image.

Build, tag, run, inspect, stop, and remove a microservice image with Docker commands.

Connect a Spring Boot service and PostgreSQL with Docker Compose service discovery, health checks, and a persistent volume.

Diagnose container startup, port mapping, DNS, memory, and application-log failures.

Explain how the control plane, nodes, namespaces, Pods, ReplicaSets, Deployments, and Services relate.

Author a Deployment and ClusterIP Service for a Spring Boot container and verify in-cluster service DNS.

Inject non-sensitive settings through a ConfigMap and credentials through a Secret.

Configure startup, readiness, and liveness probes against appropriate Spring Boot Actuator endpoints.

Set CPU and memory requests and limits and predict their effects on scheduling, throttling, and out-of-memory termination.

Execute a rolling update and rollback, then diagnose a failed rollout using kubectl logs, describe, events, and endpoint inspection.

Complete one end-to-end business workflow across the two starter services with validated DTOs, separate data ownership, and consistent error responses.

Protect the workflow with JWT validation and role-based authorization, and demonstrate expected 401 and 403 responses.

Add outbound timeouts, safe retry behavior, a circuit breaker, and a correctness-preserving fallback to the inter-service call.

Add correlation-aware structured logging and health, readiness, and liveness endpoints to the capstone.

Write focused unit tests and a @SpringBootTest integration test for one critical path using a test database profile.

Package both services with secure multi-stage Dockerfiles and run the complete system locally with Docker Compose.

Deploy both services and their configuration to local Kubernetes, verify connectivity, and perform a rolling update.

Complete a 45-minute mock interview, including a capstone architecture defense, and score each answer for correctness, depth, clarity, and practical evidence.