- JWT (access vs refresh tokens)
- Sessions vs s
- OAuth basics (Google login flow)
- Role-based access control (RBAC)
- Password hashing (bcrypt)
3. Databases (VERY IMPORTANT)
- SQL vs NoSQL (when to use what)
- Joins, indexing, normalization
- Transactions & ACID properties
- Query optimization (avoid N+1 queries)
- Schema design & relationships
4. Caching & Performance
- Why caching is used
- Redis basics (key-value, TTL)
- CDN concept
- Cache invalidation strategies
- Reducing DB calls
5. System Design Basics
- How to design scalable systems
- Load balancing (horizontal vs vertical scaling)
- Rate limiting
- CAP theorem basics
- High availability vs consistency
6. Server & Runtime Concepts
- How backend actually works (request → server → DB → response)
- Node.js event loop (callbacks, promises, async/await)
- Blocking vs non-blocking I/O
- Thread vs process basics
7. Error Handling & Logging
- Try/catch, global error handlers
- Logging levels (info, warn, error)
- Debugging production issues
- Monitoring basics