6)What is Cross site Scripting ? Prevent script attacks 7)What is sql injection? is a common attack vector that uses malicious SQL code for backend database manipulation to access information that was not intended to be displayed. -> we need to use dynamic values 8)What is layout file in MVC? 9)What is Unobtrusive Javascript? 10)What is Null Conditional Operator in C#? 11)What is Private Constructor ? 12)Advantages of hosting WCF services in IIS? 13)Service Contract , Operational Contract, Data Contract, Message Contract in WCF? Service contract – we create an interface during wcf development, service contract is given to interface - client and server needs to agree with the required stnadards Operational – method level abstraction, contract to execute the logic as per input Data contract - data contract for class