Which concepts show up across the most different tech domains in MockGen's real, 2,342-question interview bank — ranked by how many of the 46 domains genuinely test the same core idea.
Honest framing, upfront: these are recurring themes, not literal repeated questions — each domain asks about the same concept in its own words. Only 2 exact-duplicate strings exist in the whole dataset, both flagged inline below.
Memory leaks — what is retaining the object, and how do you find it
"What causes memory leaks in Android, and how do you detect and fix them?"
"What causes memory leaks in JavaScript and how would you detect one?"
"How can a Java application have a "memory leak" if the JVM has garbage collection?"
"What is a memory leak in Node.js, and what are the most common causes?"
"What's a common cause of memory leaks in Flutter apps involving controllers and subscriptions, and how do you catch it during code review or with DevTools?"
"How do closures cause retain cycles in Swift, and how do capture lists fix this?"
"How do you detect and fix a memory leak caused by a static or long-lived reference holding onto an Activity or Context?"
"A single-page application experiences gradual memory growth over time. Chrome DevTools Heap Snapshots reveal thousands of detached HTMLDivElement nodes retained in memory. Walk through common code patterns that cause detached DOM memory leaks and how to identify their GC retainer paths."
"A dashboard component subscribes to 10 distinct RxJS WebSocket streams in its constructor. Compare legacy unsubscription strategies (ngOnDestroy with takeUntil) against modern takeUntilDestroyed(this.destroyRef)."
"What is a common RxJS subscription memory leak in Angular, and how do you avoid it?"
"How do unsubscribed Observables cause memory leaks in Angular, and how do you prevent it?"
"Implement a reusable click-outside custom directive in Vue 3 that closes dropdown menus, ensuring no memory leaks occur when components are destroyed."
"A useEffect subscribes to a timer or event listener but the component can unmount while it's still pending, causing a memory leak. How do you fix this correctly with hooks?"
"A tree data structure holds child nodes via shared_ptr while child nodes hold a shared_ptr back to their parent. Why does clearing the root node fail to free tree memory, and how do you resolve it using weak_ptr?"
"Explain how Kotlin/Native's garbage-collected memory model manages references across the Swift ARC / Kotlin GC boundary, and how circular references can cause silent memory leaks."
Idempotency — making a repeated operation safe
13 use the API/operation sense (a retried mutating request must not double-charge); infrastructure uses the IaC declarative-convergence sense of the same word.
"Implement request de-duplication using an idempotency key with a TTL."
"How do you make a POST endpoint idempotent so retried requests don't create duplicate resources?"
"What is an idempotency key, and how do you implement idempotent POST endpoints in a Node backend?"
"What is idempotency in the context of REST APIs, and how would you implement idempotency keys for a payment endpoint?"
"How does an idempotency key work for a payment API, and why isn't the webhook-signature dedupe from earlier the same mechanism?"
"How do you design an idempotent POST endpoint in Express to safely handle duplicate network retries?"
"What does it mean for an API endpoint to be idempotent, and why does that matter for retries?"
"What does idempotency mean, and why is it a prerequisite for safe retries?"
"What does idempotency mean in the context of a data pipeline, and how do you design a pipeline step to be idempotent?"
"How do you design write-audit-publish patterns and partition-level atomic swaps to ensure ETL backfills are fully idempotent?"
"How do you manually test that an API endpoint is idempotent against double form submission?"
"How do you test idempotency for a payment API that might be retried by the client?"
"How would you design tests to verify idempotency in a payment API?"
"What is Infrastructure as Code, and why does idempotency matter so much in tools like Ansible, Terraform, or Puppet?"
Thundering herd / cache stampede
The most consistently phrased theme in the whole dataset — nearly the same sentence, retargeted per domain.
"What is a thundering herd problem, and how do you mitigate it?"
"What is the "thundering herd" problem in caching, and how do you prevent it?"
"What is the "thundering herd" problem in cloud-scale caching, and how do you mitigate cache-stampede on a popular key's expiration?"
"What is the "thundering herd" problem in cache invalidation for a heavily-read table, and how do you mitigate it?"
"What is the "thundering herd" problem in scheduled data pipelines, and how do you avoid it?"
"What is the "thundering herd" problem in autoscaling, and how do you design around it?"
"What is cache stampede (thundering herd), and how do you prevent it?"
"What is the thundering herd problem, and how do systems typically avoid it?"
"What is the thundering herd problem, and how would you performance test a system's resilience to it?"
"What is a cache stampede (thundering herd), and how do you prevent one when a popular cache key expires?"
The N+1 query problem
"What is the N+1 query problem and how do you fix it?"
"What is the N+1 query problem, and how do you actually fix it?"
"What is the N+1 query problem in an ORM like SQLAlchemy or Django ORM, and how do you fix it?"
"What is the N+1 select problem in Hibernate/JPA and how do you fix it?"
"What is the N+1 query problem in Mongoose and how do you solve it?"
"Explain the N+1 query problem with Mongoose populate() and how to avoid it."
"How does DataLoader solve the N+1 problem in a GraphQL Node.js server?"
"Compare fixing an N+1 query problem using JOIN FETCH queries versus Spring Data JPA @EntityGraph definitions, noting the impact on pagination."
"Explain the mechanical difference between select_related (SQL JOIN) and prefetch_related (separate batch queries) for fixing N+1 queries in Django."
"How do you identify an N+1 ORM query loop using database query logs and explain why its performance degrades quadratically under load?"
Dependency injection
"What is Dependency Injection and how does Hilt simplify it in Android?"
"What is Dependency Injection / Inversion of Control, and why does Spring use it?"
"What is dependency injection, and how does Spring's IoC container implement it?"
"What is dependency injection, and why is it useful in iOS app architecture?"
"What is dependency injection in a Flutter app, and how does a service locator like get_it differ from Provider-based injection?"
"How does dependency injection work in mobile apps (e.g., Dagger/Hilt on Android, Swift's Resolver), and why does it matter for testability?"
"What is dependency injection in Angular and how does the injector hierarchy work?"
"Explain Angular's dependency injection hierarchy across root, module, and component-level providers."
"How does FastAPI's dependency injection (Depends()) work, and why use it instead of just calling a helper function directly?"
"How do you configure a dependency injection framework in commonMain to assemble shared ViewModels while allowing platform-specific modules to be injected cleanly?"
CORS and the preflight request
"What is CORS and why does the browser enforce it?"
"What is CORS and how do you actually fix a CORS error?"
"What is CORS, and what actually happens during a preflight request?"
"What is CORS, and how do you configure it correctly in a Python backend?"
"What is CORS and how do you configure it correctly in an Express API?"
"Explain how browser CORS preflight (OPTIONS) handling works and how to properly configure credentials and exposed headers in the cors middleware."
"Explain how to configure CORS with credentials and implement the Double Submit Cookie pattern to protect against CSRF attacks."
"How do you troubleshoot CORS rejection on Angular preflight OPTIONS requests caused by GraalVM Native Image reachability analysis?"
"What is CORS and how does a common misconfiguration lead to a real vulnerability?"
"How do you test for CORS misconfigurations?"
Heavy/blocking work on the thread that must stay responsive
UI thread (mobile/frontend) or event loop (backend) — same core problem, different runtime.
"A list screen janks while parsing a large JSON — restructure the work with proper dispatchers."
"How do you implement background JSON parsing using Isolate.run() to avoid blocking Flutter's UI thread?"
"How do you offload heavy image processing to a Web Worker using Transferable Objects for zero-copy memory transfer?"
"What is a Web Worker and when would you use one?"
"How do you measure event loop delay using perf_hooks.monitorEventLoopDelay and offload CPU-intensive operations to a worker_threads pool?"
"Explain how FastAPI handles def vs async def routing under the hood and when to use anyio.to_thread.run_sync."
"Why does Task inherit the caller's actor context by default, and how do you offload work using Task.detached?"
"How do you partition thread pools and dispatchers to prevent compute-heavy tasks from starving high-priority disk I/O and UI rendering?"
"How do you refactor a gesture using react-native-reanimated Shared Values and Worklets to run animations entirely on the UI thread?"
"How do you ensure SQLDelight queries execute off the main thread on iOS without freezing the UI?"
Rate limiting
6 ask about designing the algorithm (token bucket vs sliding window), 4 treat it as a defense/test target.
"Explain the token bucket algorithm for rate limiting and how it differs from sliding window."
"Token bucket vs sliding window rate limiting — how do they differ and what are the trade-offs for a Node API?"
"How would you implement a simple rate limiter in Python using the token bucket algorithm?"
"Explain the token bucket algorithm for rate limiting and why you'd choose it over a fixed window counter."
"How do you implement rate limiting in an Express API?"
"Design a distributed rate-limiting architecture for an API Gateway serving 100,000 requests/sec using Token Bucket backed by Redis."
"Why is rate limiting important on authentication endpoints, and what does a solid implementation look like?"
"How would you design application-layer rate limiting to defend a login endpoint against a credential-stuffing attack?"
"How would you design tests for a rate limiter (e.g., 100 requests/minute per user)?"
"Beyond login brute-force protection, how do you test an API's rate limiting for resource-exhaustion abuse?"
CSRF (Cross-Site Request Forgery)
"What is CSRF (Cross-Site Request Forgery) and how do you prevent it?"
"What is a CSRF attack and how do you prevent it?"
"What is CSRF and how do modern apps actually prevent it?"
"What's the difference between XSS and CSRF, and how do you defend against each?"
"Explain Cross-Site Request Forgery (CSRF) and how modern frameworks and browsers mitigate it."
"What is CSRF and how do you test whether an application is vulnerable to it?"
"How do you configure Angular's HTTP client XSRF configuration to extract the XSRF-TOKEN cookie and send the X-XSRF-TOKEN header correctly?"
"Walk through configuring django-cors-headers and configuring Axios to send the X-CSRFToken header on state-changing requests."
"Explain how to implement the Double Submit Cookie pattern to protect against CSRF attacks."
Retry with exponential backoff and jitter
"Explain exponential backoff with jitter for retries."
"Explain retry with exponential backoff and jitter — why does jitter matter?"
"Why do retry mechanisms use exponential backoff with jitter instead of just retrying immediately?"
"A long-running job exposes a status endpoint; implement client-side polling with backoff and clear stop conditions."
"Implement polling for an async endpoint incorporating exponential backoff, randomized full jitter, and a hard circuit-breaker timeout."
"How do you design an automated retry mechanism with exponential backoff and randomized jitter using Spring Retry?"
"How do you implement adaptive client throttling, exponential backoff with full jitter, and circuit-breaker patterns to stop cascading failures?"
"How do you implement a React hook that handles WebSocket exponential backoff reconnection and heartbeat ping/pongs?"
"How do you write a deterministic RxJS marble test asserting a retry-with-exponential-backoff pipeline's emission timeline?"
The CAP theorem
"Explain the CAP theorem."
"What does the CAP theorem say, and why can't a distributed system have all three?"
"Explain the CAP theorem in practical terms — what does it actually force you to give up?"
"Explain the CAP theorem and how it should influence choosing a database for a Node microservice."
"Explain the CAP theorem and how it applies to choosing a cloud database for a globally distributed application."
"What is the CAP theorem, and how does it explain the trade-off between systems like Cassandra and a traditional distributed relational database?"
"Explain the CAP theorem and how it actually influences a real infrastructure decision, like choosing a database for a distributed system."
"Explain the CAP theorem and how it drives real database design decisions."
Code splitting / lazy loading
"Explain code splitting and dynamic imports."
"What is code splitting / lazy loading in a frontend app, and how do you implement it in React?"
"What is code-splitting in React, and how do React.lazy and Suspense implement it?"
"Explain code-splitting with React.lazy and Suspense."
"What is lazy loading in Angular routing, and why does it matter for application performance?"
"What is lazy loading in Angular and how do you implement it with the router?"
"How do you implement lazy-loaded (code-split) routes in Vue Router, and why does it matter for initial load performance?"
"How do you use a Metro bundle visualizer to identify bloat and enable inline requires to defer module execution?"
SQL injection and parameterized queries
Contains the dataset's one genuine verbatim-duplicate pair: appsec and backend both ask exactly "What is SQL injection and how do you prevent it?"
"What is SQL injection and how do you prevent it?"
"What is SQL injection and how do you prevent it?"
"What is classic SQL injection and how do parameterized queries prevent it?"
"How do you prevent SQL injection in a Node.js application when writing raw SQL queries?"
"How does SQL injection risk differ between writing raw SQL queries and using an ORM's parameterized queries?"
"How do you manually test a login form for basic SQL injection before reaching for automated tools?"
"How do you test for SQL injection, and what's the difference between error-based, blind, and time-based techniques?"
A scrolling list drops frames — profile it and find the real bottleneck
"A Composable list recomposes every item on each scroll — identify likely causes and fixes."
"How do you use Flutter DevTools Performance view to isolate whether a scrolling bottleneck is an expensive build(), layout passes, or image decoding?"
"How do you eliminate offscreen render passes (caused by cornerRadius/shadow rendering) using shadowPath and rasterization caching?"
"Walk through your profiling methodology to isolate whether scroll jank is view inflation, layout recalculation, or expensive payload binding."
"How do you configure dynamic height measurement caches in virtualization libraries to prevent scroll jumping with unknown-height items?"
"How do you diagnose estimated-item-size misconfigurations causing blank white cells to flash during rapid scrolling?"
"Design a virtualized scrolling chat feed that maintains scroll-to-bottom stickiness and avoids layout thrashing."
Flaky / non-deterministic tests — detect, quarantine, make deterministic
"What is flaky test quarantine and how would you implement one in CI?"
"Design an automated flaky-test management system in CI that auto-tags non-deterministic failures into an isolated non-blocking suite."
"How would you design an automated flaky-test quarantine system that detects intermittent failures without masking real regressions?"
"How do you implement intelligent test sharding and an automated flaky-test quarantine mechanism to bring CI time under 8 minutes?"
"How do you configure transactional rollback fixtures and worker-isolated test databases to fix intermittent pytest-xdist failures?"
"How do you construct Suspense-boundary tests that advance mocked timers without flaky timing races?"
"How do you write a UI test (Espresso, XCUITest, Appium) that reliably waits for async loading states instead of becoming flaky?"
Horizontal vs vertical scaling
"What's the difference between horizontal and vertical scaling?"
"What's the difference between scaling horizontally and vertically?"
"What's the difference between horizontal and vertical scaling in the cloud?"
"What is the difference between horizontal scaling and vertical scaling, and when would you choose one over the other?"
"What's the difference between horizontal and vertical scaling, and why does SRE practice generally favor horizontal scaling?"
"What's the difference between vertical and horizontal scaling from a performance testing perspective?"
"How does Node's single-threaded event loop model affect horizontal vs vertical scaling decisions for an API?"
Graceful shutdown / draining connections during a rolling deploy
"How do you implement graceful shutdown in a Node.js server responding to SIGTERM?"
"How would you investigate intermittent 502s during a rolling Kubernetes deployment related to readiness probes and SIGTERM handling?"
"How do you configure server.shutdown=graceful and coordinate Kubernetes preStop sleep hooks for zero-downtime rolling updates?"
"How do you tune Gunicorn graceful_timeout and configure Kubernetes health probes to prevent cascading worker restarts?"
"How do you coordinate SIGTERM handling, server.close(), and Mongoose disconnects during Kubernetes rolling deployments?"
"How do you coordinate dynamic endpoint discovery and graceful upstream connection draining to achieve zero-downtime routing updates?"
Blue-green vs canary deployment
"Explain blue-green deployment vs canary deployment."
"Explain the difference between blue-green deployments and canary deployments in the cloud."
"What's the difference between a blue-green deployment and a canary deployment?"
"Compare blue-green deployments and canary deployments — what does each catch that the other doesn't?"
"What is progressive delivery, and how does it differ from a traditional blue-green deploy?"
"Design an automated canary deployment pipeline that incrementally routes traffic from 5% to 100% based on real-time metric analysis."
The virtual DOM and reconciliation
Contains the dataset's one exact cross-domain duplicate string (mern / python_react).
"What is the Virtual DOM and how does React use it to update the UI efficiently?"
"What is the virtual DOM and how does React use it to update the UI efficiently?"
"What is the virtual DOM and how does React use it to update the UI efficiently?"
"Explain the virtual DOM and how React's reconciliation with keys works."
"What problem does the virtual DOM actually solve, and how does it make UI updates faster?"
"Implement a minimal Virtual DOM reconciler in pure JavaScript that computes diffs and applies minimal real DOM mutations."
Shallow copy vs deep copy
"What's the difference between shallow and deep comparison/cloning?"
"What's the difference between a shallow copy and a deep copy of an object, and what are the common ways to do each in JavaScript?"
"What's the difference between a shallow copy and a deep copy in Python, and when does a shallow copy cause a real bug?"
"What's the difference between deep copy and shallow copy in Python?"
"What is the difference between a shallow copy and a deep copy, and what's wrong with Java's Object.clone()?"
"What's the difference between a shallow copy and a deep copy in C++, and why does it matter for classes managing raw pointers?"
SSR hydration and hydration mismatch
"What is hydration in SSR, and what causes a hydration mismatch error?"
"What is hydration in server-rendered React apps, and what causes a hydration mismatch error?"
"What is a hydration mismatch in server-rendered React, and what commonly causes it?"
"What is hydration in an SSR framework, and what goes wrong when it fails?"
"What is non-destructive hydration in Angular's server-side rendering, and what problem does it solve?"
"How do you diagnose and resolve hydration mismatch errors in Nuxt 3 / Vue SSR using ClientOnly and onMounted?"
Why list keys must be stable (and why the array index is wrong)
"Why do list items in React need a unique "key" prop, and what goes wrong if you use the array index as the key?"
"Why does Vue require a unique :key when rendering a list with v-for, and what goes wrong if you use the array index as the key?"
"Why does React want a stable key prop when rendering lists, and what goes wrong if you use the array index?"
"What problem do React keys solve, and why is using an array index as a key an anti-pattern?"
"What is the purpose of trackBy in *ngFor, and what actually goes wrong without it?"
"How does the Element tree use Key (ValueKey vs ObjectKey) to preserve state identity when reordering a list of stateful items?"
Eliminate long-lived credentials — ephemeral secrets and OIDC federation
"Design a secretless authentication architecture using OIDC and Workload Identity Federation that grants ephemeral, scoped IAM permissions during pipeline execution."
"How would you design OIDC identity federation so autoscaling ephemeral CI runners interact with cloud providers without storing long-lived IAM keys?"
"How do you configure cross-cloud Workload Identity Federation with OIDC provider tokens to exchange IAM credentials without long-lived service account keys?"
"Explain OIDC token replay/scope risk in GitHub Actions-to-cloud workload identity federation, and how audience/claims restrictions mitigate it."
"How do you architect dynamic database secret generation to issue short-lived, ephemeral credentials with automated lease renewal?"
"Design a self-service CLI workflow that authenticates via SSO and generates ephemeral, dynamically expiring PostgreSQL credentials."
The circuit breaker pattern
"What is a circuit breaker pattern and when should you use one?"
"What problem does the circuit breaker pattern (e.g. Resilience4j) solve, and what are its states?"
"How would you implement a circuit breaker in a Node.js service calling an unreliable downstream API?"
"What is the circuit breaker pattern, and how would you implement one for calls to a flaky downstream service in Python?"
"How do you implement adaptive client throttling and circuit-breaker patterns to stop a cascading retry-storm failure?"
"Implement polling logic incorporating exponential backoff, randomized jitter, and a hard circuit-breaker timeout."
Deadlock — conditions, detection, and lock-ordering prevention
"What are the conditions required for a deadlock, and how can you prevent one?"
"What is a deadlock and how do databases detect and resolve them?"
"What causes a deadlock when using multiple mutexes, and how do std::lock and std::scoped_lock help avoid it?"
"How do you design a deterministic resource-ordering mechanism based on entity IDs to guarantee deadlock-free locking?"
"How do you parse a jstack thread dump to distinguish BLOCKED threads from WAITING threads to pinpoint a circular deadlock?"
Every question field across all 2,342 questions in all 46 domain files was read in full (not sampled), then every theme below was re-verified with a targeted grep against the live JSON before being recorded. The matching bar: the core thing being tested must be genuinely the same, even where vocabulary, framework, and scenario differ completely — but keyword overlap alone was not enough. Several tempting-but-false matches were checked and discarded (e.g. "SQL injection" keyword-matched a few mobile-domain questions that were actually about local SQLite storage, not injection). There are ZERO verbatim-identical question strings across domains except 2 genuine exact-duplicate pairs (flagged inline above) — everything else is a recurring theme in different words, not a repeated question. The ranking is by distinct domain count only. This list is conservative: a looser matching bar would comfortably surface 40+ themes.
Download the full question-bank dataset (CSV)