Technology is evolving rapidly, and online security threats are becoming very difficult to detect. For sophisticated cybercriminal groups in operation, the traditional way of resolving threats is no longer be effective. Hence, cyber security professionals are expected to improve their skill sets regularly as the security landscape changes. They provide advisory and technical support to help clients enhance their Security & Risk function. Here are some questions to them:

1. What Do you have on your Home Network?

A Windows laptop with a wireless generic router, a phone all the way up to 14 Linux Workstations, an Active Directory Domain Controller, a devoted Firewall appliance and a net- connected toaster.

2. What Project that you’ve Built are you Most Proud of?

Whether your project is as individual as the first time you modified a games console or built your first PC or as significant as writing a program, the point of this question is to show your passion. This was taught during cyber security training.

3. What is “SQL Injection”?

It is one of the common attacking techniques used by hackers to get critical data. Hackers check for any loop hole in the framework through which they can pass SQL queries, which escapes the security checks and returns critical data.

4. What is SSL Connection and an SSL Session?

SSL connection is a transient peer-to-peer communications interface where every connection is associated with one SSL Session. This session can be defined as an association between client and server, generally crated by handshake protocol.

5.What are the Three Ways to Authenticate a Person?

Something they have (token), Something they know (password) and something they are (biometrics). This authentication sometimes uses a password and token setup, although at times can be a PIN and thumbprint.

6. Various Methodologies in Security Testing

White Box- All the data are given to the testers, Black Box- No data is given to the testers and they can test the system in real world scenario, Grey Box- Partial data is with the analyzers and rest they have to rest on their own.

7. What are Web Server Vulnerabilities?

The common vulnerabilities that the web server can take advantage of are : Misconfiguration, Default settings, Bugs in operating system and web servers.

Also Read:- CEH Interview Questions & Answers

8. What is Traceroute or Tracert?

Allows you to determine where the breakdown in connection has occurred by showing you the correct chain of connection from router to router to the final objective.

9. Linux Server Security: Three Steps to Secure Each System

The three steps to secure each system: Auditing, Hardening, Compliance.

10. What is Salting and What is it Used for?

Your interviewer is referring to password salting but is attempting to catch you out by only utilizing half the term. It is a more secure type of encryption for passwords and is a term you will be expected to know and understand.

11. Component used in SSL

SSL is utilized to make secure connection between computers and clients. Following component used in SSL: Handshake protocol, Encryption algorithms, SSL Recorded protocol, Change Cipher Spec.

12. What is WEP Cracking?

WEP cracking is the method of exploiting security vulnerabilities in wireless networks and gaining unauthorized access.

13. Parameters that Define an SSL Session State

The parameters that characterize an SSL session state are: Session identifier, Compression method, Peer certificate, Master secret, Cipher spec.

14. How Do you Protect your Home Wireless Access Point?

There are a variety of approaches to protect a Wireless Access Point: not broadcasting the SSID, using WPA2 and using MAC address filtering are the most popular among them.

15. What are the Attributes of Security Testing?

There are following seven attributes of Security Testing: Authentication, Confidentiality, Authorization, Integrity, Availability, Non-repudiation, Resilience.

16. What is Port Scanning?

Ports are the point from where information goes all through any system. Scanning of the ports to find out any loop holes in the framework are known as Port Scanning.

17. What is Phishing?

A technique used to scam people for information by impersonating a genuine site like Facebook or Hotmail, to lure the user into entering their personal account and password information. Professionals are taught how to make clients aware of this during a cyber security training course.

18. Describe Network Intrusion Detection system (NDIS)?

It is utilized for complete analysis of passing traffic on the sub-net as well as to match it with known attacks. If any loop hole identified then the administrator receives an alert.

19. Techniques used to Prevent Web Server Attacks

Patch Management, safe installation and configuration of web server software, removal of unused and default account, remote administration disabling, etc.

20. What is HIDS?

HIDS or Host Intrusion Detection System is one in which snapshot of the current system is taken and contrast to previous snapshots. It checks if critical files were modified or deleted then an alert is sent to the administrator.

 Enquire Now