eBay

Internal Client Interview for Security Domain (IDM/IGA):

Technical Round-1:
  • Explain basics of IGA backend components like workflow, notification etc.
  • Have you worked on Groovy scripts or Java scripts?
  • Any knowledge on test automation framework?
  • OIDC (open id connect) framework for SSO?
  • Explain OAuth configurations setup?
  • What about MFA , how do you perform setup for same?
  • Coding Round: I want to check whether input string has balances character like ( < { } > )
import java.util.Stack;
 
public class MyDomain {
 
    // ()
    // {[]}
    // {[(]}
 
    public static void main(String[] args) {
        // ===>> Brute Force method
        // Data -> For each Char scan
        // Put in any collection
        // Check if next char is open or close
        // Check if char is equal -> true else -> false
 
        String str = "{[(]}";
        System.out.println(isValid(str));
    }
 
    private static boolean isValid(String str) {
        Stack<Character> stack = new Stack<>();
        for (char ch : str.toCharArray()) {
            if (ch == '(' || ch == '[' || ch == '{') {
                stack.push(ch);
            } else if (ch == ')' || ch == ']' || ch == '}') {
                if (stack.isEmpty()) {
                    return false;
                }
                char openBracket = stack.pop();
                if (!isMatchChars(openBracket, ch)) {
                    return false;
                }
            }
        }
        return stack.isEmpty();
    }
 
    private static boolean isMatchChars(char openBracket, char closeBracket) {
        return (openBracket == '(' && closeBracket == ')') ||
                (openBracket == '{' && closeBracket == '}') ||
                (openBracket == '[' && closeBracket == ']');
    }
 
}


Round-2:
  • Explain basics of IGA backend components
  • Design interfaces APIs / Role Management: Rest API Interfaces
  • CRUD -> 
/role/:id -> Listing role api search by Id
Role - Members - 
/user/:roleName
/user/:uid/roledetails
 
OAuth-2:
/OAuth/token
idtoken -> credential
External consumer (Stored uid/pwd) -sa 
Resource owner 
-> Capabilites
-> Sprights
 persmission [
/endpoint1
/endpoint2
]
 
Authorization
 
Access_token
refresh_token (time based)
 
JWT
Header
Payload
 
 
IGA -> Concepts (How you will design the system from scratch) Explain in detailed component/feature wise:
Users -> Subordinated/Hierarchical/Manger path
Role/Entitlement (Catalog)
Access review (Certification)
Policy violation (SOD, Password policy)
Request access /approval
  -> Self service
  -> Raised for other (
Workflow -> integration script -> trigger email
Track request -> 
Notification -> Email
 
Explain if worked on any test automation - Mock - framework?
Selenium -> Cypress frame -Ui testing
Junit 
Postman automation
Karate framework (Load/Performance/API testing)
 
 
Write a program for Spell checker -> Explain approach and solutioning
Input string : "Goole"

 

Comments

Popular posts from this blog

Full Stack Java Developer - FAQ

DSA Interview Coding Questions

Java Interview Question - New FAQs