FREE!! Open Source - A Technical Recruiter's Daily Wiki
← Back to dashboard Login
Technical Recruiter Reference · 2025 / 2026 Edition

The Microsoft Stack
Full-Stack Web Development Guide

A plain-English explainer for every Microsoft technology, language, and tool that appears on a .NET full-stack developer's résumé — written for recruiters, not engineers.

20Skills Covered
5Stack Layers
45+Interview Questions
40+Curated Links
🗺️

How the Microsoft Stack Fits Together

The big picture before diving into individual technologies

The Microsoft Full-Stack Architecture at a Glance

LAYER 1 — FRONT-END (what users see) Browser / Web UI Blazor (C#) React / Angular HTML / CSS / TS Razor Pages/MVC HTTP / REST API calls (JSON) LAYER 2 — BACK-END (business logic & APIs) ASP.NET Core Server (C#) ASP.NET Core Web API C# / .NET 8+ SignalR EF Core / SQL queries LAYER 3 — DATA & STORAGE Microsoft SQL Server / Azure Data SQL Server Azure Cosmos DB EF Core / Dapper Deploy via CI/CD pipeline LAYER 4 — CLOUD & DEVOPS (Microsoft Azure) Azure App Service Azure DevOps Docker / Kubernetes GitHub Actions

Every Microsoft full-stack app flows through these four layers. Each tab explores one area in depth.

What is the "Microsoft Stack"?
Recruiter Primer
🗣️ In plain EnglishThe Microsoft Stack is a family of programming tools, languages, and cloud services — all made by Microsoft — that work seamlessly together. Instead of mixing technologies from many vendors, a developer using the Microsoft Stack can build an entire application — front-end, back-end, database, and cloud hosting — using a single, consistent set of tools they learn once and apply everywhere.

The core of the Microsoft Stack is C# (the primary programming language), .NET (the framework that runs C# code), ASP.NET Core (for web APIs and websites), and Microsoft Azure (for cloud hosting). These tools are enterprise-grade, backed by Microsoft's full support, and used by hundreds of Fortune 500 companies. The Microsoft Stack was historically Windows-only but is now fully cross-platform — it runs on Windows, Mac, and Linux servers alike.

🖥️

Front-End Technologies

What users see and interact with — Microsoft's web UI toolkit

C# (C-Sharp) Core Language
Primary Microsoft Programming Language
🗣️ In plain EnglishC# (pronounced "see-sharp") is Microsoft's flagship programming language — the equivalent of Java in the Java stack. Everything in the Microsoft world — websites, desktop apps, games, cloud services, mobile apps — can be built with C#. It's modern, readable, and one of the most in-demand languages in enterprise software today.

C# was created by Microsoft in 2000 and has evolved dramatically. C# 12 / .NET 8+ is the current standard. It is strongly typed (catches errors early), object-oriented, and backed by the entire .NET ecosystem. Seeing "C#" on a résumé is the Microsoft equivalent of seeing "Java" — it's the bedrock skill on which everything else is built.

C# powers every layer of the Microsoft stack
C# is the one language that does it all: Web (Blazor) APIs (ASP.NET) Desktop (WinForms) Mobile (.NET MAUI) Games (Unity) Cloud (Azure)
Blazor Framework
Microsoft Web UI Framework (C# in the browser)
🗣️ In plain EnglishBlazor is Microsoft's answer to React and Angular — but instead of writing JavaScript, developers write C# to build interactive web pages. This is a game-changer for teams that already know C#: one language works on both the front-end and back-end. Think of it as React, but written entirely in C#.

Blazor comes in two flavors: Blazor Server (logic runs on the server, updates pushed to the browser) and Blazor WebAssembly (C# code runs directly in the browser, no server needed for UI). .NET 8 unified these as Blazor United. Blazor is increasingly common in enterprise .NET shops and signals a Microsoft-first team. A candidate listing "Blazor" is rare and very valuable for Microsoft-stack roles.

Blazor vs React: Same job, different language
React / Angular → uses JavaScript / TS → different language from back-end vs Blazor (Microsoft) → uses C# everywhere → one language, full stack ✓
Razor Pages / ASP.NET MVC Framework
Server-Side Web Page Generation
🗣️ In plain EnglishRazor Pages and ASP.NET MVC are the traditional Microsoft way to build web pages. The server generates the complete HTML page on each request and sends it to the browser — like a restaurant that prepares every dish from scratch per order. Blazor is the newer approach; Razor Pages/MVC is the battle-tested, widely deployed approach.

Razor is the template language mixing C# and HTML. MVC (Model-View-Controller) is an organizing pattern: Model=data, View=what the user sees, Controller=logic connecting them. Most legacy and enterprise .NET web apps use MVC. A candidate listing "ASP.NET MVC" likely has experience with large, established enterprise systems. Razor Pages is a simpler, more modern alternative for smaller apps.

TypeScript / JavaScript Core
Microsoft's TypeScript + Web Standards
🗣️ In plain EnglishTypeScript is Microsoft's own invention — it's JavaScript with a safety net that catches errors before they run. Microsoft created TypeScript and uses it extensively. Even Microsoft-stack developers who use Blazor still need TypeScript/JavaScript for browser interactions, third-party integrations, and when pairing with React or Angular on the front-end.

TypeScript is the standard for professional JavaScript development and is required for React and Angular front-ends. Many .NET teams build the back-end in C#/ASP.NET Core and the front-end in React/TypeScript. Angular (Google's framework, but extremely popular in enterprise .NET shops) is entirely TypeScript-based. A full-stack .NET developer who also knows TypeScript + React or Angular is the most versatile hire.

SignalR Framework
Real-Time Web Communications (Microsoft)
🗣️ In plain EnglishNormally, your browser has to constantly ask the server "anything new?" — like refreshing a page repeatedly. SignalR flips this model: the server pushes updates to your browser the moment they happen. Think of live sports scores, stock tickers, chat messages, or collaborative editing (like Google Docs) — that's SignalR territory.

SignalR is a Microsoft library built on top of WebSockets. It's used for chat apps, real-time dashboards, live notifications, and multiplayer features. Seeing "SignalR" on a résumé indicates experience with real-time, event-driven application features — a meaningful specialization that signals experience with complex, interactive .NET web apps.

⚙️

Back-End Technologies

The server-side Microsoft tools that process requests, enforce business rules, and serve data

.NET (dotnet) Core Platform
Microsoft's Application Development Platform
🗣️ In plain English.NET is the engine that makes C# code run — like the engine under a car's hood. You write C# code, .NET runs it. It provides thousands of pre-built functions so developers don't have to reinvent the wheel. .NET 8 (current LTS) and .NET 9 run on any operating system — Windows, Mac, or Linux.

There is important version history here: the old .NET Framework (Windows-only, versions 1–4.8) vs. the modern .NET (cross-platform, versions 5, 6, 7, 8, 9+). .NET 8 is the current Long-Term Support (LTS) version and what most teams target today. If a résumé says ".NET Framework 4.x," the candidate may only have legacy experience. ".NET 6+", ".NET 8", or ".NET Core" signals current, modern expertise.

The .NET version history — what to look for
OLD: .NET Framework versions 1.0 – 4.8.x Windows-only ⚠ Legacy — not preferred MODERN: .NET versions 5, 6, 7, 8, 9+ Cross-platform ✓ ✅ Current — what to hire for
ASP.NET Core Framework
Microsoft's Web Application Framework
🗣️ In plain EnglishASP.NET Core is the Microsoft equivalent of Spring Boot for Java — it's the framework that turns C# code into a fully functioning web server. It handles everything from routing web requests to your code, to securing your app, to returning data to browsers. It's the backbone of virtually every modern .NET web application.

ASP.NET Core is the #1 most important back-end skill to identify on a Microsoft-stack résumé. It powers REST APIs, web pages (via MVC/Razor), and real-time features (via SignalR). "Minimal APIs" is a newer, lightweight way to build APIs with ASP.NET Core — seeing it on a résumé signals familiarity with modern .NET development patterns. ASP.NET Core is consistently ranked among the fastest web frameworks in the world.

How an ASP.NET Core request is processed
Browser Request Middleware auth, logging compression Controller routes URL Service / Logic DB Data
ASP.NET Core Web API Core
RESTful API Development
🗣️ In plain EnglishA Web API is a set of rules that lets different applications talk to each other over the internet. ASP.NET Core Web API is Microsoft's toolkit for building these "connectors." When a mobile app fetches your account balance, or a website loads your product catalog, it's calling a Web API behind the scenes.

Web API development is the most common use of ASP.NET Core in enterprise settings. Candidates should understand REST conventions, HTTP verbs (GET/POST/PUT/DELETE), JSON data formats, and proper response codes. Also look for Swagger/OpenAPI (auto-generates API documentation), JWT authentication, and versioning strategies. "Minimal APIs" (introduced in .NET 6) is a lighter-weight style growing in popularity.

ASP.NET Identity / Azure AD Security
Authentication & Authorization (Login/Permissions)
🗣️ In plain EnglishAuthentication is "who are you?" (login). Authorization is "what are you allowed to do?" (permissions). ASP.NET Identity handles user accounts, passwords, and roles within an app. Azure Active Directory (now called Microsoft Entra ID) is Microsoft's enterprise login system — it's what lets employees sign in to company apps using their corporate credentials.

Security is non-negotiable in enterprise applications. Look for: ASP.NET Core Identity (user management), JWT tokens (secure API authentication), OAuth2/OpenID Connect (single sign-on standards), and Azure AD / Microsoft Entra ID (enterprise identity). Role-based access control (RBAC) — restricting who can access what — is a critical enterprise security concept. A developer who can't implement authentication is not production-ready.

NuGet Package Manager Core Tool
Microsoft's Dependency / Library Manager
🗣️ In plain EnglishNuGet is the "app store" for .NET code libraries. Instead of writing every feature from scratch, developers use NuGet to download and install pre-built packages — like a PDF generator, an email sender, or a logging system. It's the Microsoft equivalent of npm (JavaScript) or Maven (Java).

NuGet is used in every single .NET project — its absence from a résumé is not unusual (it's assumed), but a candidate who doesn't know what it is raises concern. Popular NuGet packages include Newtonsoft.Json (JSON processing), Serilog (logging), AutoMapper (object mapping), and MediatR (messaging pattern). NuGet.org is the central package repository with over 300,000 packages.

LINQ Core
Language Integrated Query (C# Data Query Tool)
🗣️ In plain EnglishLINQ (pronounced "link") lets C# developers query and manipulate data collections using plain-English-style code. Instead of writing complex loops to find items, you write something like: "from all orders, give me those over $100, sorted by date." LINQ works on databases, lists, XML, and more — all using the same syntax.

LINQ is a core C# skill that every competent .NET developer must know. It's used constantly when working with data — filtering lists, sorting results, transforming collections. When integrated with Entity Framework Core, LINQ queries are automatically translated to SQL. Inability to write basic LINQ queries is a significant gap in any mid-to-senior .NET candidate.

🗄️

Data & Database Technologies

How Microsoft-stack applications store, retrieve, and manage data

Microsoft SQL Server Database
Microsoft's Enterprise Relational Database
🗣️ In plain EnglishSQL Server is Microsoft's database — the place where all the application's data is stored. Think of it as an enormous, perfectly organized filing cabinet that the application can query at lightning speed. It's used by more Fortune 500 companies than almost any other database in existence.

SQL Server is the most common database in the Microsoft stack. The query language is T-SQL (Transact-SQL) — a Microsoft extension of standard SQL with extra features. SQL Server comes in free (Express, Developer) and paid (Standard, Enterprise) editions. "Azure SQL Database" is the cloud-hosted version. Key skills: writing T-SQL queries, stored procedures, indexing, and performance tuning. SQL Server Management Studio (SSMS) is the tool for managing it.

SQL Server editions — which to expect on a résumé
Express Free edition small apps Standard Paid edition mid-size biz Enterprise Full-featured large orgs
Entity Framework Core (EF Core) ORM
Microsoft's Official Object-Relational Mapper
🗣️ In plain EnglishEF Core is a translator between C# objects and database tables. Without it, developers must write raw SQL by hand for every database operation. EF Core does this automatically — you describe your data in C# classes, and EF Core handles all the SQL behind the scenes. It also manages database structure changes over time (called "migrations").

Entity Framework Core is the standard data access technology in the .NET ecosystem. "Code-First" approach (the most common): developers define data models in C#, and EF Core generates the database tables. "Database-First": existing database generates the C# models. Migrations are versioned database schema changes — critical for safe production deployments. Dapper is a lighter-weight alternative used when maximum SQL performance is needed.

EF Core: C# classes ↔ Database tables
C# Class (code) class Product { int Id; string Name; EF Core translates DB Table (SQL) Products | Id | Name | | 1 | Widget |
Azure SQL & Cosmos DB Cloud DB
Microsoft Azure Managed Database Services
🗣️ In plain EnglishAzure SQL Database is SQL Server in the cloud — Microsoft manages the server, backups, and scaling for you. Cosmos DB is Microsoft's planet-scale NoSQL database, like MongoDB but hosted on Azure. Both databases require zero server management and can auto-scale to serve millions of users worldwide.

Azure SQL Database is the most common choice for cloud-hosted Microsoft applications. Cosmos DB is chosen when data is global, unstructured, or requires extreme speed at massive scale. "Managed database" means Microsoft handles patching, backups, and high availability — developers just use the database. Azure SQL skills are increasingly expected alongside on-premises SQL Server knowledge for mid/senior candidates.

SSMS / Azure Data Studio Tool
Database Management & Query Tools
🗣️ In plain EnglishSQL Server Management Studio (SSMS) is the control panel for SQL Server. It lets developers browse database tables, write and run SQL queries, create stored procedures, and manage performance. Azure Data Studio is the modern, cross-platform alternative. Every SQL Server developer uses one of these daily — they're the primary "workbench" for database work.

SSMS is Windows-only and has been the standard database tool for SQL Server for 20+ years. Azure Data Studio is newer, runs on all platforms, and is increasingly preferred. Both are free. A candidate claiming SQL Server expertise should be completely fluent in at least one of these tools.

🚀

DevOps, Tooling & Microsoft Azure

How Microsoft-stack applications are built, tested, deployed, and hosted in the cloud

Visual Studio / VS Code IDE / Editor
Microsoft Development Environment
🗣️ In plain EnglishVisual Studio (VS) is the full-featured Microsoft workshop where developers write, test, and debug C# code. Visual Studio Code (VS Code) is a lighter-weight editor that works with almost any language. Think of VS as a full professional kitchen and VS Code as a portable cooking station. Both are Microsoft products; VS is the primary IDE for .NET development.

Visual Studio is available in three tiers: Community (free for individuals), Professional (paid), and Enterprise (paid, adds team tools). VS 2022 is the current version. VS Code has become the world's most popular code editor (used by 73%+ of developers). It's highly extensible with thousands of plugins. A .NET developer should know Visual Studio; knowing VS Code is a bonus showing cross-language versatility.

Azure DevOps DevOps
Microsoft's End-to-End DevOps Platform
🗣️ In plain EnglishAzure DevOps is Microsoft's all-in-one project management + deployment platform. It combines a code repository (like GitHub), a task board (like Jira), an automated testing and deployment pipeline (CI/CD), and artifact storage — all in one Microsoft-managed service. Many enterprise Microsoft shops use Azure DevOps instead of GitHub or Jira.

Key Azure DevOps components: Repos (Git code hosting), Boards (Agile sprint planning), Pipelines (automated build + deploy), Artifacts (package hosting), and Test Plans (QA management). Pipelines is the most critical skill — it automates the process of building, testing, and deploying code. A candidate listing "Azure DevOps Pipelines" demonstrates professional-grade CI/CD experience in the Microsoft ecosystem.

Microsoft Azure Cloud Platform
Microsoft's Cloud Computing Platform
🗣️ In plain EnglishAzure is Microsoft's cloud platform — like renting computing power, storage, and services from Microsoft instead of buying physical servers. Azure hosts the web app, the database, the files, and runs background jobs. It's the direct Microsoft competitor to Amazon AWS and Google Cloud, and the natural home for Microsoft-stack applications.

Key Azure services for .NET developers: App Service (hosts web apps — the most common), Azure Functions (runs small code snippets on-demand — serverless), Azure SQL Database (managed SQL Server), Azure Blob Storage (file/image storage), Azure Service Bus (messaging), and Azure Container Instances/AKS (Docker/Kubernetes hosting). Microsoft certifications (AZ-900, AZ-204) on a résumé are strong positive signals.

Most common Azure services in .NET web apps
Microsoft Azure Services (most used) App Service Azure Functions Azure SQL Database Blob Storage Service Bus Active Directory / Entra
Docker & AKS (Kubernetes) DevOps
Container & Orchestration — Azure Container Services
🗣️ In plain EnglishDocker packages an entire .NET application into a portable "container" that runs identically on any computer — developer laptop, test server, or Azure cloud. AKS (Azure Kubernetes Service) is Microsoft Azure's managed platform for running and scaling many containers at once. AKS is "Docker at scale, managed by Microsoft."

Docker is becoming standard at mid/senior level in Microsoft-stack roles. AKS is an advanced skill for DevOps-oriented roles or microservices architectures. Azure has excellent built-in tooling for containerized .NET apps, including Azure Container Registry (storing Docker images) and Azure Container Apps (a simpler alternative to AKS for smaller deployments). Container experience signals modern, cloud-native development practices.

xUnit / NUnit / MSTest Testing
.NET Unit Testing Frameworks
🗣️ In plain EnglishThese are automated testing frameworks — programs that run hundreds of quality checks on the code automatically, every time a change is made. Like a car's pre-flight checklist, they catch problems before the app reaches real users. xUnit is the community favorite; NUnit is widely used in legacy systems; MSTest is Microsoft's own built-in option.

Professional .NET development teams test rigorously. xUnit is the most popular for modern .NET projects. Moq is a companion library for creating "mock" (fake) objects to simulate external dependencies in tests. A candidate who mentions test-driven development (TDD), code coverage metrics, or integration testing signals engineering maturity. The absence of any testing knowledge is a red flag for mid/senior roles.

GitHub / GitHub Actions DevOps
Source Control & Automated CI/CD (Microsoft)
🗣️ In plain EnglishGitHub is where code lives — it's the online "version history" that every developer uses. GitHub was acquired by Microsoft in 2018 and is now tightly integrated with the Microsoft stack. GitHub Actions is an automation engine: when a developer merges code, Actions automatically runs tests and deploys the application — no human involvement needed.

Git and GitHub are non-negotiable skills at every level. GitHub Actions is the modern CI/CD choice for teams that prefer GitHub over Azure DevOps Pipelines. Both GitHub Actions and Azure DevOps Pipelines accomplish the same goal (automated deployment); knowing one makes learning the other easy. GitHub Copilot (AI code assistant) is increasingly mentioned on résumés and signals AI-augmented productivity.

🖥️

Non-Web Microsoft Application Types

Microsoft technologies for desktop, mobile, games, services, and enterprise integration

WPF / Windows Forms Desktop
Windows Desktop Application Frameworks
🗣️ In plain EnglishWPF (Windows Presentation Foundation) and Windows Forms are used to build traditional Windows desktop apps — think the kind of software with menus, buttons, and windows that runs on a PC rather than in a browser. WPF produces visually rich apps; Windows Forms is simpler and older but still widely used in business software.

WPF and WinForms are the two main frameworks for Windows-only desktop applications. WPF uses XAML (a layout language, similar to HTML but for desktop UIs) and supports animations, data binding, and complex visuals. WinForms is simpler and faster to build. Many internal enterprise tools, point-of-sale systems, and industrial applications are built with these. They will not be replaced anytime soon in corporate environments.

.NET MAUI Mobile/Desktop
Cross-Platform Mobile & Desktop (Microsoft)
🗣️ In plain English.NET MAUI (Multi-platform App UI) lets a developer write C# code once and deploy it as a native app on iPhone, Android, Windows, and Mac. It's Microsoft's answer to React Native (JavaScript) or Flutter (Dart). Instead of learning four different platforms, developers use one C# codebase and MAUI handles the platform differences.

.NET MAUI replaced Xamarin Forms in 2022. It's the modern choice for cross-platform mobile/desktop development in the Microsoft ecosystem. Seeing ".NET MAUI" on a résumé signals up-to-date knowledge; "Xamarin" indicates experience with the predecessor (still valuable but being phased out). MAUI apps can also use Blazor for the UI layer, creating "Blazor Hybrid" apps that share web code with mobile apps.

Azure Functions Serverless
Event-Driven Serverless Computing (Microsoft)
🗣️ In plain EnglishAzure Functions lets developers run small snippets of C# code in response to events — without managing any server at all. "Serverless" means Microsoft handles all the infrastructure. A function might run when a new file is uploaded, when a schedule triggers it (like a cron job), or when a message arrives in a queue. You only pay when the code actually runs.

Azure Functions are ideal for background jobs, scheduled tasks, event processing, and lightweight APIs. They're a cost-effective way to run periodic or triggered work. Seeing "Azure Functions" or "serverless" on a résumé indicates experience with event-driven architecture, cloud-native thinking, and Microsoft's serverless platform. Common triggers: HTTP, Timer, Queue, Blob Storage, and Service Bus.

Windows Services / Worker Services Background
Long-Running Background Process Services
🗣️ In plain EnglishA Windows Service is a program that runs quietly in the background — no user interface, no windows — continuously doing a job like checking for new orders every 30 seconds, sending scheduled reports, or synchronizing data between systems. .NET Worker Services are the modern equivalent, designed to run in containers or cloud environments.

Worker Services and Windows Services are common in enterprise .NET environments for integration jobs, data pipelines, scheduled tasks, and monitoring agents. They're often paired with message queues (Azure Service Bus, RabbitMQ) to process work items asynchronously. A candidate listing "Windows Services" likely has enterprise integration experience; ".NET Worker Services" signals more modern cloud-native knowledge.

Power Platform Low-Code
Power Apps · Power BI · Power Automate
🗣️ In plain EnglishThe Microsoft Power Platform is a set of low-code tools that let people build apps, dashboards, and automation without being professional programmers. Power Apps builds simple forms-based apps. Power BI creates interactive business dashboards and charts. Power Automate creates automated workflows (like automatically emailing a manager when a form is submitted).

Power Platform skills are distinct from traditional software development. Power Apps/Power Automate developers are often non-programmers (business analysts, operations staff). Power BI analysts focus on data visualization, not application development. These are important to distinguish from C#/.NET developers — they're complementary, not interchangeable. A traditional developer listing Power BI skills indicates data reporting experience on top of their coding background.

📖

Microsoft Stack Quick-Reference Glossary

Jargon you'll encounter on résumés and job descriptions — decoded

Term / AcronymPlain-English MeaningWhen You See It
.NET / dotnetMicrosoft's developer platform — the engine that runs C# code on any OSEvery Microsoft-stack résumé
CLRCommon Language Runtime — the part of .NET that actually executes your codeDeep .NET internals discussions
ASP.NET CoreMicrosoft's web framework for building websites, APIs, and web servicesEvery .NET web developer résumé
MVCModel-View-Controller — an organizing pattern for web app code (separate data, display, and logic)ASP.NET web app experience
ORMObject-Relational Mapper — auto-translation between C# code and database tables (Entity Framework)Data layer experience
EF CoreEntity Framework Core — Microsoft's official ORM for database access in .NETDatabase + .NET experience
LINQLanguage Integrated Query — C#'s built-in syntax for querying and filtering data collectionsCore C# proficiency
T-SQLTransact-SQL — Microsoft's version of the SQL database language with extra featuresSQL Server experience
BlazorMicrosoft's web UI framework — builds interactive web pages using C# instead of JavaScriptModern Microsoft front-end
XAMLXML-based layout language for WPF/MAUI desktop and mobile UIs — like HTML for desktop appsDesktop or mobile .NET apps
NuGetMicrosoft's package manager — downloads and installs pre-built .NET librariesAssumed in all .NET projects
IISInternet Information Services — Microsoft's built-in Windows web server (hosts ASP.NET apps)On-premises Windows hosting
Azure AD / Entra IDMicrosoft's enterprise identity service — manages employee logins across company appsEnterprise security experience
JWTJSON Web Token — a secure digital "badge" used for API authentication without re-sending passwordsAPI security / ASP.NET Identity
SignalRMicrosoft's real-time communications library — server pushes live updates to the browserChat, live dashboards, notifications
Dependency InjectionA design pattern built into ASP.NET Core — components receive their dependencies automatically rather than creating them manuallyASP.NET Core experience
MiddlewareCode that runs on every web request in sequence — handles logging, authentication, compression, etc.ASP.NET Core architecture
gRPCA high-performance alternative to REST APIs for service-to-service communication — faster than JSON over HTTPMicroservices, high-performance back-ends
DapperA lightweight data access library — like EF Core but you write the SQL yourself, for maximum speedPerformance-critical database work
SerilogA popular logging library for .NET — records app events, errors, and diagnostics in structured formatsProduction-ready .NET applications
💬

Recruiter's Interview Cheat Sheet

45+ qualifying questions organized by domain — for both web and non-web Microsoft roles

📌 How to use this section

You don't need to understand the technology to evaluate answers. Listen for specificity (real tool names and versions), tradeoff thinking (they know pros and cons), and depth under follow-up (the story holds up). Each question shows Strong ✓, Average ≈, and Weak ✗ answer patterns.

🔎

General Screening

ALL MICROSOFT-STACK CANDIDATES
Opener
"Walk me through a recent .NET application you built — what was the problem it solved, and which Microsoft technologies did you use?"
Strong: Names specific technologies (e.g., "ASP.NET Core 8 Web API with React front-end, EF Core + SQL Server, deployed to Azure App Service via Azure DevOps"). Explains business purpose clearly.

Average: Can describe the app but vague on tech ("I used .NET and a database").

Weak: Only describes front-end features; no detail on architecture.
Version Check
"What version of .NET are you currently using? What's the difference between .NET Framework and modern .NET?"
Strong: Using .NET 6, 8, or 9. Correctly explains that .NET Framework (1–4.8) is Windows-only and legacy; modern .NET (5+) is cross-platform and actively developed.

Average: Using .NET 6+ but can't clearly articulate the difference.

Weak: Still on .NET Framework 4.x with no awareness of the modern platform — significant legacy risk.
Self-Assessment
"Rate yourself on back-end vs. front-end. Are you more comfortable in C#/ASP.NET Core or in Blazor/React/TypeScript?"
Strong: Honest split with reasoning ("I'm a 8/10 back-end, 5/10 front-end — I can build React components but prefer the API layer"). Self-aware.

Average: Claims equal strength everywhere with no explanation.

Weak: "I'm expert in everything" with no ability to drill into specifics.
Tooling
"Which IDE do you use for .NET development, and what debugging tools do you rely on?"
Strong: Visual Studio 2022 for .NET; VS Code for lightweight editing. Mentions the integrated debugger, breakpoints, watch windows, and potentially dotnet-trace or Application Insights for production diagnostics.

Average: Uses Visual Studio but only the basics.

Weak: Unclear on tooling — a daily-use tool every developer should know intimately.
🖥️

Front-End Questions

BLAZOR · RAZOR · REACT · ANGULAR · TYPESCRIPT
Blazor vs JS
"When would you choose Blazor over React/Angular for a .NET project's front-end? What are the tradeoffs?"
Strong: Blazor for Microsoft-centric teams where C# everywhere reduces context-switching, for internal enterprise tools, or when the team has no JavaScript expertise. React/Angular for broader talent pool, large public-facing apps, or richer ecosystem. Notes Blazor WASM has larger download size.

Average: "Blazor uses C# so it's better for .NET teams" — partially correct but incomplete.

Weak: Doesn't know both options exist or can't articulate any tradeoff.
Blazor Rendering
"What's the difference between Blazor Server and Blazor WebAssembly?"
Strong: Server: UI logic runs on the server, updates pushed via SignalR — fast startup, needs constant connection. WebAssembly: C# runs in the browser itself — works offline, larger initial download. .NET 8 "Blazor United" lets you mix both per-component.

Average: Knows there are two modes but can't explain the technical difference clearly.

Weak: Only knows one mode or is unaware of the distinction.
API Consumption
"How does your front-end call your ASP.NET Core back-end to fetch data?"
Strong: HTTP client calls to REST endpoints returning JSON. In Blazor: HttpClient. In React/Angular: fetch/axios/Angular HttpClient. Mentions CORS (the browser security rule that must be configured on the ASP.NET server to allow cross-origin calls).

Average: "It calls an API" — correct but no mechanical detail.

Weak: Unclear on the connection mechanism between front-end and back-end.
TypeScript
"Why do most professional Angular and React projects use TypeScript instead of plain JavaScript?"
Strong: TypeScript adds static types — the compiler catches type-mismatch errors before the code runs, like a spell-checker for logic. Essential for large codebases where teams must understand each other's code. Angular is 100% TypeScript by default. Microsoft invented TypeScript.

Average: "TypeScript is just typed JavaScript" — true but can't explain the practical benefit.

Weak: Unaware of TypeScript or dismisses it as unnecessary overhead.
Real-Time UI
"Have you built any real-time features — live notifications, chat, dashboards that update automatically?"
Strong: Describes SignalR — the server pushes updates to connected clients without polling. Gives a concrete example (live order tracking, collaborative editing, live auction bidding). Knows it works via WebSockets with HTTP fallback.

Average: Used polling (repeatedly asking the server for updates) instead of push — functional but inefficient.

Weak: No awareness of real-time patterns.
UI Libraries
"What component libraries or UI frameworks have you used for building Microsoft-stack UIs?"
Strong: For Blazor: MudBlazor, Radzen, Telerik Blazor, Microsoft's Fluent UI. For Angular: Angular Material (Google), PrimeNG, Telerik Kendo. For React: Material-UI, Ant Design, Fluent UI React. Can explain why they chose a specific library.

Average: Has used one library but can't compare options.

Weak: Builds everything from scratch — inefficient and unusual in enterprise settings.
⚙️

Back-End Questions

C# · ASP.NET CORE · SECURITY · PATTERNS
ASP.NET Core
"Explain Dependency Injection in ASP.NET Core. Why does it matter?"
Strong: ASP.NET Core has DI built in. Components declare what they need (e.g., a database service), and the framework automatically provides it — components don't create their own dependencies. This makes code easier to test (you can inject mock services) and easier to change (swap one implementation for another). Mentions service lifetimes: Singleton, Scoped, Transient.

Average: "It's a way to provide services to classes" — correct but surface-level.

Weak: Can't explain it or confuses it with another concept.
Middleware
"What is the ASP.NET Core middleware pipeline? Give an example of custom middleware you've written."
Strong: Every HTTP request passes through a chain of middleware components in order — authentication, authorization, logging, compression, routing, etc. Gives a real example: "I wrote middleware to log every request's duration and status code to Application Insights." Understands order matters.

Average: Knows middleware exists and uses built-in ones but never wrote custom middleware.

Weak: "What's middleware?" — a fundamental ASP.NET Core concept.
Security
"How do you secure a .NET Web API so only authenticated users can access it?"
Strong: JWT (JSON Web Tokens) with ASP.NET Core Identity or Azure AD. User logs in, receives a token, sends it with every request. The API validates the token with the [Authorize] attribute. May mention OAuth2/OpenID Connect for enterprise SSO, and role-based access control for permissions.

Average: Has used [Authorize] but unclear on the underlying JWT/token mechanism.

Weak: No authentication experience — a showstopper for any production role.
Async Programming
"What does async/await mean in C#, and why is it important for web APIs?"
Strong: Async/await lets a web server handle other requests while waiting for a slow operation (database query, file read, external API call). Without it, every thread is blocked while waiting — under high load, the server runs out of threads. With async, one thread can serve thousands of concurrent requests efficiently.

Average: "It makes code run without blocking" — correct but can't explain the scalability impact.

Weak: Uses async/await by copying patterns but can't explain what it does.
Design Patterns
"What is the Repository Pattern? Have you used it with EF Core?"
Strong: The Repository Pattern wraps all database access in a dedicated interface — controllers never touch the database directly. This makes swapping databases, testing with mocks, and code reuse easier. Common in enterprise .NET apps. May also mention CQRS (Command/Query Responsibility Segregation) or MediatR for more advanced architectures.

Average: Has used it but uses EF Core DbContext directly everywhere instead.

Weak: Unaware of the pattern — a gap in enterprise .NET knowledge.
API Documentation
"How do you document your ASP.NET Core APIs so other developers or teams know how to use them?"
Strong: Swagger/OpenAPI — auto-generates interactive API documentation from code annotations. Developers can test the API directly from the browser. May mention versioning strategies (/api/v1/, /api/v2/) and Postman for manual API testing.

Average: Has used Swagger but didn't set it up themselves.

Weak: No documentation practice — "other teams just ask us." Problematic for any API that's consumed by other teams or systems.
🗄️

Database Questions

SQL SERVER · EF CORE · T-SQL · AZURE DATA
EF Core Basics
"Explain Code-First vs Database-First in Entity Framework Core."
Strong: Code-First: developer defines C# classes, EF Core generates the database tables via migrations — the most common modern approach. Database-First: start with an existing database, EF Core reverse-engineers C# models from it — common when integrating with legacy databases.

Average: Uses Code-First but unfamiliar with Database-First or migration management.

Weak: Can't explain the difference — a fundamental EF Core concept.
Migrations
"How do you safely update a production SQL Server database schema without breaking the running application?"
Strong: EF Core migrations — versioned, incremental changes generated as code. Generate a migration for each change, review the SQL it produces, apply during a deployment window. May mention flyway-style practices: always add columns with defaults, never drop columns immediately (mark deprecated first).

Average: Uses migrations but applies them manually in production without review.

Weak: "I change the database directly in production." A serious operational risk.
N+1 Problem
"Have you heard of the N+1 query problem? What is it and how do you fix it with EF Core?"
Strong: N+1 happens when code fetches a list (1 query), then fetches related data for each item separately (N queries). For 100 orders, that's 101 database trips instead of 1. Fix: use .Include() in EF Core to eager-load related data in a single JOIN query, or use projection (.Select()) to fetch only needed fields.

Average: Has heard of it but can't describe the fix clearly.

Weak: Unaware — this is a common performance killer in EF Core applications.
Stored Procedures
"Do you use stored procedures in SQL Server or rely on EF Core generated queries? When do you use each?"
Strong: EF Core generated queries for standard CRUD — less code, more maintainable. Stored procedures for complex business logic that benefits from database execution, bulk operations, or when DBA team owns the database layer. Dapper for high-performance raw SQL when EF Core's generated SQL isn't efficient enough.

Average: Defaults entirely to EF Core without knowing when to use stored procedures.

Weak: Only knows stored procedures — lacks modern ORM experience.
Indexing
"A query on a SQL Server table with 10 million rows is slow. What's your first diagnostic step?"
Strong: Check execution plan in SSMS (shows how SQL Server processes the query). Look for "table scan" vs "index seek" — a table scan reads every row (slow); an index seek jumps directly to matching rows (fast). Add an index on the column being searched in the WHERE clause. Also check for missing statistics, implicit type conversions, or inefficient joins.

Average: Knows indexes help but uncertain on diagnosis tools.

Weak: "I'd rewrite the query" with no diagnostic approach.
Azure Data
"What's the difference between SQL Server and Azure SQL Database? When would you choose Cosmos DB?"
Strong: Azure SQL is managed SQL Server in the cloud — Microsoft handles patching, backups, HA. Same SQL syntax, same SSMS tooling. Choose Azure SQL for relational data with existing SQL skills. Cosmos DB for truly global distribution, flexible document data, or when you need guaranteed < 10ms reads anywhere on earth.

Average: Knows Azure SQL exists but has no Cosmos DB knowledge.

Weak: "The cloud version is just SQL Server" with no understanding of managed service benefits.
🚀

DevOps & Azure Questions

AZURE DEVOPS · CI/CD · DOCKER · AZURE SERVICES
Azure DevOps
"Walk me through your team's CI/CD pipeline. What happens when you merge code to the main branch?"
Strong: Merge triggers Azure DevOps Pipeline (or GitHub Actions) — runs automated unit/integration tests → builds the application → creates a Docker image or deployment artifact → deploys to staging → optionally promotes to production after approval. Describes rollback strategy.

Average: Uses a pipeline but only for building/testing, not automated deployment.

Weak: "We deploy manually by uploading files." No automation — significant process risk.
Azure Hosting
"How have you deployed ASP.NET Core applications to Azure? What Azure service did you use?"
Strong: Azure App Service for most web apps (simplest, managed), Azure Container Apps or AKS for containerized microservices, Azure Functions for serverless workloads. Knows auto-scaling, deployment slots (blue/green deployments), and App Service Plans (the billing tier).

Average: Has used Azure App Service but unclear on other hosting options or scaling.

Weak: "We hosted it on a Windows Server in our office." No cloud experience — a gap for modern roles.
Containers
"Why would you containerize a .NET application in Docker? What does that give you?"
Strong: Containers package the app and all its dependencies in one portable image — runs identically on any machine. Eliminates "works on my machine" problems. Enables reproducible deployments, consistent environments between dev/staging/prod, and easy scaling (spin up more containers). Microsoft's .NET has official Docker images.

Average: Uses Docker because the team requires it but can't explain the core benefit.

Weak: No Docker experience — increasingly a gap at mid/senior levels.
Configuration
"How do you manage different settings (database strings, API keys) between Development, Staging, and Production in .NET?"
Strong: ASP.NET Core has built-in environment-based configuration: appsettings.json base + appsettings.Development.json override. Production secrets stored in Azure Key Vault (never in code or config files). Environment variables injected by Azure App Service or Kubernetes at runtime.

Average: Uses appsettings.json per environment but stores secrets in config files — risky.

Weak: Hardcoded connection strings in code — a serious security failure.
Monitoring
"How do you know when your production .NET application is experiencing errors or performance issues?"
Strong: Azure Application Insights — Microsoft's APM tool that captures exceptions, request durations, dependencies, and custom metrics. Sets up alerts when error rate or response time exceeds thresholds. May also mention Serilog + Azure Log Analytics for structured logging.

Average: "I check the logs when someone reports a problem." Reactive but no proactive monitoring.

Weak: No production monitoring at all — discovers problems only from user complaints.
Microservices
"Have you built microservices with .NET? How do services communicate with each other?"
Strong: REST/HTTP for synchronous calls; Azure Service Bus or RabbitMQ for async messaging. Mentions resilience patterns (Polly for retries + circuit breaker). Knows that microservices are complex — added network overhead, distributed tracing, and deployment complexity. Uses Ocelot or Azure API Gateway for routing.

Average: Has worked with microservices but only on HTTP calls — no async messaging or resilience patterns.

Weak: Claims microservices experience but can't explain inter-service communication or failure handling.
🖥️

Non-Web / Desktop / Enterprise Questions

WPF · MAUI · WINDOWS SERVICES · POWER PLATFORM
WPF / Desktop
"Have you built WPF applications? What is MVVM, and why do WPF developers use it?"
Strong: MVVM (Model-View-ViewModel) separates the UI (View/XAML) from the business logic (ViewModel/C#). The ViewModel exposes data via data binding — the UI updates automatically when the data changes. This makes WPF apps testable and maintainable. Mentions frameworks like CommunityToolkit.Mvvm or ReactiveUI.

Average: Builds WPF apps but uses code-behind instead of MVVM — functional but harder to test.

Weak: Unaware of MVVM — fundamental to professional WPF development.
.NET MAUI
"What's the difference between .NET MAUI and Xamarin? Have you worked with either?"
Strong: Xamarin was the predecessor — Microsoft ended support for Xamarin.Forms in May 2024. .NET MAUI is the replacement, using a single project to target iOS, Android, macOS, and Windows. MAUI integrates with modern .NET and supports Blazor Hybrid (web UI reuse). Xamarin experience transfers to MAUI.

Average: Has Xamarin experience but unaware it's been superseded.

Weak: Confuses mobile development with web development entirely.
Background Services
"Describe a situation where you needed to run code on a schedule or in the background without user interaction."
Strong: Describes a concrete use case (nightly report generation, data sync, file processing). Technology used: .NET Worker Service with a hosted background task, Azure Functions with Timer trigger, or Windows Service. Discusses error handling, retry logic, and monitoring in background jobs.

Average: Has done this but uses a less optimal approach (console app run as scheduled task).

Weak: No background processing experience — common in integration/enterprise roles.
Power Platform
"What's the difference between a Power Apps developer and a .NET developer? Can they work together?"
Strong: Power Apps is low-code — business analysts build simple forms/automation without programming. .NET developers build complex, custom applications with full code. They complement each other: .NET devs can build custom connectors for Power Platform, and Power Apps can call .NET-built APIs. Neither replaces the other.

Average: Aware both exist but unclear on where each is appropriate.

Weak: Dismisses Power Platform entirely or treats it as equivalent to full software development.

🚩 Universal Red Flags — Microsoft Stack

Legacy-only experienceClaims .NET expertise but only knows .NET Framework 4.x — signals no exposure to modern cross-platform .NET (5+). Ask specifically about ASP.NET Core vs. ASP.NET MVC 5.
C# without async/awaitAny mid/senior .NET developer should know async programming. Not knowing async/await signals gaps in understanding modern .NET API development under load.
No Azure exposureMicrosoft stack increasingly means Azure. A senior .NET developer with zero cloud experience is a significant gap for most modern enterprises. Even basic App Service deployment is expected.
Hardcoded credentialsStoring connection strings, API keys, or passwords in source code or config files (instead of Azure Key Vault or environment variables) is a fundamental security failure.
No EF Core migrationsApplying database changes manually in production ("I just run the ALTER TABLE in SSMS") is risky. Professional teams version-control schema changes with EF Core migrations or equivalent tooling.
Confusing WPF and webXAML/WPF/MAUI developers and ASP.NET web developers are different skill sets. A résumé claiming expertise in both warrants careful verification — these are distinct domains requiring different mindsets.