CGI Group Interview Questions and Answers

Q1. What changes should be made to both the backend and frontend when a new field is added in order to ensure that data flows from the backend to the user interface (UI) in the Model-View-Controller (MVC) arch...read more
Ans. 
Adding a new field in MVC requires updates in the backend and frontend for seamless data flow.
• 1. Update the Model: Add the new field to the data model class (e.g., 'public string NewField { get; set; }' in C#).

• 2. Update the Database: Modify the database schema to include the new field (e.g., using a migration in Entity Framework).

• 3. Update the Controller: Ensure the controller retrieves and sends the new field data to ...read more
Answered by AI
Add your answer
Q2. Could you describe the types of SQL query questions you were asked during the interview, including scenarios involving join operations with two tables and the expected outputs, as well as your experience w...read more
Add your answer
Q3. There are two technical rounds 1st round is around 45 mins and second round is face to face that is too technical around one and half an hour. Third round also happened at a day with manager
Add your answer

Q1. What is xss,How can you prevent
Ans. 
XSS (Cross-Site Scripting) is a security vulnerability allowing attackers to inject malicious scripts into web pages viewed by users.
• Sanitize user input to remove harmful scripts. Example: Use libraries like DOMPurify.

• Implement Content Security Policy (CSP) to restrict sources of scripts.

• Use HTTPOnly and Secure flags on cookies to prevent access via JavaScript.

• Validate and encode output data to prevent script execution...read more
Answered by AI
Add your answer
Q2. What is sql and explain second order sql injection
Ans. 
SQL (Structured Query Language) is a standard language for managing and manipulating relational databases.
• SQL is used to perform tasks such as querying data, updating records, and managing database structures.

• Second-order SQL injection occurs when an attacker injects malicious SQL code into a database, which is then executed later.

• For example, an attacker might input a value that is stored in the database, and when tha...read more
Answered by AI
Add your answer
Q3. Csp header bypass how can you do
Ans. 
CSP header bypass involves exploiting misconfigurations or weaknesses in Content Security Policy to execute unauthorized scripts.
• 1. Use of 'unsafe-inline': If a CSP allows 'unsafe-inline', attackers can inject scripts directly into HTML.

• 2. Whitelisting domains: If a CSP whitelists a domain that is compromised, attackers can serve malicious scripts from that domain.

• 3. Data URIs: Some CSP configurations may allow data UR...read more
Answered by AI
Add your answer
Q4. Can we get xss and sql injecfion in a web application as well
Ans. 
Yes, a web application can be vulnerable to both XSS and SQL injection due to improper input validation.
• XSS (Cross-Site Scripting) occurs when an application includes untrusted data in a web page without proper validation or escaping.

• SQL Injection happens when an application includes untrusted data in a SQL query without proper sanitization.

• For example, an input field that allows users to enter comments could be vulner...read more
Answered by AI
Add your answer
Q5. This isnt a question even if i answered all of the lady questions she acted as if she is helping me and elongated and prolonged that i habe to keep answering for questions . In one way dumped her attitude ...read more
Add your answer

Q1. Parameter and argument difference in JavaScript ? 2. Closures and hoisting in Javascript ? 3. Var, let and Const difference ?
Ans. 
Understanding JavaScript concepts like parameters, closures, and variable declarations is crucial for effective coding.
• Parameters are variables listed as part of a function's definition, while arguments are the actual values passed to the function.

• Example: function add(a, b) { return a + b; } - 'a' and 'b' are parameters; add(2, 3) - '2' and '3' are arguments.

• Closures are functions that remember their lexical scope eve...read more
Answered by AI
Add your answer
Q2. Should create a simple form with name, email, mobile and if we click the submit button the added details has to show on the below table
Ans. 
Create a simple Angular form to capture user details and display them in a table upon submission.
• Use Angular Reactive Forms for form handling.

• Create a form with fields: name, email, and mobile.

• Bind form controls to the template using [(ngModel)].

• On form submission, push the form data to an array.

• Use *ngFor to display the array data in a table.
Answered by AI
Add your answer

Around 120 minutes. Had Different sections for coding, verbal, CS fundamentals.

Q1. Resume Based (OOPs, JS related and Other Basic things)
Add your answer
Q2. SQL query
Add your answer

Q1. Relocation and other HR ques.
Add your answer

Q1. Different and high level questions not meant for 0-2 years of experience candidates.
Add your answer

Q1. Java oops concept, core java concepts
Add your answer

Q1. Springboot, microservices
Add your answer

Q1. Scenario based technical techno functional concept
Add your answer

Q1. More l3 level techno consultant HCM asks
Add your answer

Q1. Salary discussion
Ans. 
Discussing salary expectations is crucial for aligning compensation with skills and market standards.
• Research industry standards: Use websites like Glassdoor or Payscale to find average salaries for similar roles.

• Consider your experience: If you have 5+ years in business analysis, you can justify a higher salary.

• Highlight your skills: Mention specific skills like data analysis or project management that add value to th...read more
Answered by AI
View 1 more answer