Question 1

How do you enable gzip/Brotli compression for HTTP responses?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js/Express performance interviews. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The real byte counts below are **actual, measured** raw wire bytes, captured via a client that bypasses automatic decompression specifically to measure what's genuinely sent — not illustrative numbers. ## 1. Why This Even Matters — A Story First Shipping a box stuf

Question 2

Explain the concept of 'middleware' in Express.js.

Accepted Answer

**Target Audience:** Engineers preparing for Node.js/Express interviews — assumes no prior Express-specific knowledge. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The chain-ordering and short-circuiting behavior below was **actually run** against a real Express server — genuine console output, not a description of intended behavior. ## 1. Why This Even Matters — A Story First An airport secu

Question 3

How do you handle CORS (Cross-Origin Resource Sharing) in Node.js?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js/Express and web-security interviews. **Difficulty:** Medium > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The header behavior below was **actually observed** from a real running Express server with the real `cors` middleware — genuine response headers, not a description of intended behavior. ## 1. Why This Even Matters — A Story First A nightclub bouncer checks

Question 4

What are the main security risks of using the 'eval()' function in Node.js?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js security-focused phone screens — no prior security background assumed. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. Every consequence below was **actually demonstrated by running real code**, not described as a hypothetical. ## 1. Why This Even Matters — A Story First Handing a stranger a blank check with your signature already on it is fun

Question 5

What does NODE_ENV=production actually change and why does it matter?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js deployment and configuration interviews. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. Both the "Node core does nothing special" proof and the real Express behavior difference below were **actually run** — not descriptions of documented behavior. ## 1. Why This Even Matters — A Story First A single word written on a sticky note ("PRODUCTION"

Question 6

What is Node.js and why is it popular?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js phone screens — no prior Node knowledge assumed. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The version numbers below were read directly from a running Node process on this machine, not quoted from memory. ## 1. Why This Even Matters — A Story First Before Node.js, JavaScript lived almost entirely in one place: the browser, running whatev

Question 7

Explain the concept of REPL in Node.js

Accepted Answer

**Target Audience:** Engineers preparing for Node.js phone screens — no prior REPL experience assumed. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The session transcript below came from an **actually running, programmatic REPL session** on Node v24.19.0, not a description of expected behavior. ## 1. Why This Even Matters — A Story First A chemist testing a small reaction does not build an en

Question 8

Explain the purpose of `package.json` and `npm`.

Accepted Answer

**Target Audience:** Engineers preparing for Node.js phone screens — no prior npm experience assumed. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The file contents below came from **actually running** `npm init -y` and `npm install` on this machine, not a hand-written example. ## 1. Why This Even Matters — A Story First A shopping list says "a loaf of bread" — not the specific loaf, not whic

Question 9

What is the difference between unit, integration, and end-to-end tests for a Node.js API?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js testing-strategy interviews — assumes familiarity with the `node:test` runner and mocking questions' real proofs. **Difficulty:** Medium > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The timing comparison below is **real, measured** output from actually running both a unit and an integration test with `node --test` — genuine milliseconds, not illustrative numbers.

Question 10

How do you manage configuration in a Node.js application for different environments?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js interviews — assumes basic `process.env` familiarity. **Difficulty:** Medium > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The config-switching behavior below was **actually run** across three different `NODE_ENV` values on Node v24.19.0, including the failure case. ## 1. Why This Even Matters — A Story First A single stage play script works in two different the

NODE.JSDECODED.

Easy

How do you enable gzip/Brotli compression for HTTP responses?

Explain the concept of 'middleware' in Express.js.

How do you handle CORS (Cross-Origin Resource Sharing) in Node.js?

What are the main security risks of using the 'eval()' function in Node.js?

What does NODE_ENV=production actually change and why does it matter?

What is Node.js and why is it popular?

Explain the concept of REPL in Node.js

Explain the purpose of `package.json` and `npm`.

Medium

How do you manage configuration in a Node.js application for different environments?

What are some best practices for structuring a Node.js project?

What is Helmet and which HTTP security headers should a Node.js API set?

What are the differences between npm, Yarn, and pnpm?

How do you handle errors in Node.js applications?

How do you protect a Node.js API against Denial of Service (DoS) and brute-force attacks?

How do you implement rate limiting in a Node.js Express application?

How do you handle uncaught exceptions and unhandled promise rejections in Node.js?

Hard

What is a ReDoS (Regular Expression Denial of Service) attack and how do you avoid it?

How do you implement microservices communication in Node.js?

What changes for a Node.js app running on AWS Lambda vs a long-running server?

What is the 'vm' (Virtual Machine) module and when would you use it?

What is the package.json "exports" field and conditional exports?

How do you secure your Node.js API endpoints?