Question 1

How do you enable gzip/Brotli compression for HTTP responses?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js/Express performance interviews. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The real byte counts below are **actual, measured** raw wire bytes, captured via a client that bypasses automatic decompression specifically to measure what's genuinely sent — not illustrative numbers. ## 1. Why This Even Matters — A Story First Shipping a box stuf

Question 2

Explain the concept of 'middleware' in Express.js.

Accepted Answer

**Target Audience:** Engineers preparing for Node.js/Express interviews — assumes no prior Express-specific knowledge. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The chain-ordering and short-circuiting behavior below was **actually run** against a real Express server — genuine console output, not a description of intended behavior. ## 1. Why This Even Matters — A Story First An airport secu

Question 3

How do you handle CORS (Cross-Origin Resource Sharing) in Node.js?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js/Express and web-security interviews. **Difficulty:** Medium > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The header behavior below was **actually observed** from a real running Express server with the real `cors` middleware — genuine response headers, not a description of intended behavior. ## 1. Why This Even Matters — A Story First A nightclub bouncer checks

Question 4

What are the main security risks of using the 'eval()' function in Node.js?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js security-focused phone screens — no prior security background assumed. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. Every consequence below was **actually demonstrated by running real code**, not described as a hypothetical. ## 1. Why This Even Matters — A Story First Handing a stranger a blank check with your signature already on it is fun

Question 5

What is Node.js and why is it popular?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js phone screens — no prior Node knowledge assumed. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The version numbers below were read directly from a running Node process on this machine, not quoted from memory. ## 1. Why This Even Matters — A Story First Before Node.js, JavaScript lived almost entirely in one place: the browser, running whatev

Question 6

What is the purpose of the util.promisify function in Node.js?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js phone screens — assumes basic Promise and callback familiarity. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. Both the success and rejection paths below were **actually executed** on Node v24.19.0, not assumed from the function's name. ## 1. Why This Even Matters — A Story First An old appliance with a two-prong plug still works perfectly —

Question 7

What is the difference between blocking and non-blocking I/O in Node.js?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js interviews — assumes basic `fs` module and event-loop familiarity. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The tick counts and timings below came from **actually running both versions** on Node v24.19.0 against a real 50MB file, not a description of expected behavior. ## 1. Why This Even Matters — A Story First A single toll-booth work

Question 8

Explain the concept of REPL in Node.js

Accepted Answer

**Target Audience:** Engineers preparing for Node.js phone screens — no prior REPL experience assumed. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The session transcript below came from an **actually running, programmatic REPL session** on Node v24.19.0, not a description of expected behavior. ## 1. Why This Even Matters — A Story First A chemist testing a small reaction does not build an en

Question 9

What is the difference between unit, integration, and end-to-end tests for a Node.js API?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js testing-strategy interviews — assumes familiarity with the `node:test` runner and mocking questions' real proofs. **Difficulty:** Medium > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The timing comparison below is **real, measured** output from actually running both a unit and an integration test with `node --test` — genuine milliseconds, not illustrative numbers.

Question 10

What does the Node.js `--env-file` flag do, and does it replace dotenv?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js backend interviews — assumes basic `process.env` familiarity. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. Everything below was **executed against Node v24.19.0** — the raw output is pasted in section 3. ## 1. Why This Even Matters — A Story First For years, every Node tutorial opened the same way: npm install dotenv, then

NODE.JSDECODED.

Easy

How do you enable gzip/Brotli compression for HTTP responses?

Explain the concept of 'middleware' in Express.js.

How do you handle CORS (Cross-Origin Resource Sharing) in Node.js?

What are the main security risks of using the 'eval()' function in Node.js?

What is Node.js and why is it popular?

What is the purpose of the util.promisify function in Node.js?

What is the difference between blocking and non-blocking I/O in Node.js?

Explain the concept of REPL in Node.js

Medium

How does the Node.js event loop work?

What is AbortSignal.timeout and how do you cancel async work cleanly?

How do you mock modules, timers, and network calls in Node.js tests?

What is CSRF and how do you protect a Node.js API against it?

What are 'Event Emitting' patterns and how does error-first callback convention relate to them?

When would you choose Node.js over other backend technologies?

How do you manage configuration in a Node.js application for different environments?

What is a background job queue (BullMQ/Redis) and when do you need one?

Hard

What is `process.nextTick()` and `setImmediate()` and when to use them?

How do you profile CPU usage with --prof, 0x, or clinic.js flame graphs?

How do you handle circular dependencies in Node.js?

What is a ReDoS (Regular Expression Denial of Service) attack and how do you avoid it?

How does the Node.js 'dns' module differ from browser-based DNS resolution?

What is SSRF and how do you mitigate it in a Node.js backend?

What is the purpose of the HTTP Agent in Node.js?

What are some common ways to improve performance in a Node.js application?