Interview questions for cyber security career
Hello readers, this is a quite interesting post. Here I have given 101 questions based out of my memory during multiple interviews I had attended while trying to switching jobs. So after a long thinking, it came to my mind to keep it posted that can help others. So I kept here for reference and study purpose only. I have not kept the answers here, because that is your task to find out the answers and prepare yourself accordingly.
While you read questions and find answers, it will help you to remember some parts. Then practice, revise and learn. Although there are lots of questions in this domain. Cyber Security domain is very large and depth in nature. But for basic understanding and preparing for interviews to take or give, this post might help.
Lets see the questions below:
- What is your current job role and why you want to change your job role?
- Have you ever worked on Security audit, IT audit, internal audit, SOC, SOX environment?
- How many types of risks are there?
- What do you mean by risk assessment and risk management?
- Tell the formula for calculating risk in risk assessment.
- Difference between qualitative and quantitative risk.
- How you address residual risks?
- What is inherent risk?
- Difference between threat, vulnerability and risk.
- What is shoulder surfing and social engineering?
- What is CIA triad?
- Do you know data classification? Example.
- What is that risk called when you accept it?
- What do you mean by risk register and risk treatment plan?
- The difference between internal audit and external audit.
- What is a RACI chart?
- What do you mean by SOX audit?
- Have you done any SOX, SOC2 , ITGC audit?
- Difference between SOC2 and SOC1 audit reports.
- What control activities ape applicable for financial audit?
- What are ITGC controls?
- What is a control environment?
- What is an information processing facility and what are basic controls applicable for it?
- What is an encryption and how many types of encryption is there. Which encryption is best encryption method?
- What is the goal of system and application audit?
- How you address the risks identified. What are steps after getting your findings?
- The important factors required for planning audit?
- How many controls are there in ISO27001? Name few controls how you review those controls.
- What is context of a organization in ISO 27001?
- What is advantage of implementing ISO 27001 for an organization?
- What is the process for implementing ISO 27001?
- What is human resource security in ISO 27001?
- What are the controls tested for network security in ISO 27001 context?
- What is enterprise security?
- What is SOA?
- What is BCP and how the activity is being carried out?
- What is RTO and RPO?
- What is GRC? Name some GRC tools and best features in it.
- What is GDPR? When it came to effect?
- What is personal data and how to keep safe personal data?
- What kind of information does the GDPR applied?
- What tools you have used for application security audit? Name some application security tools.
- Difference between Vulnerability assessment and Penetration Testing.
- Difference between NMAP and NESSUS tool.
- Can you perform PT from a VA tool? Which tool offers both VA and PT capability?
- What do you mean by port scanning? Name some tools.
- How do you plan your audit within your team and with client?
- What is patch management?
- Describe phishing with an example.
- What is audit methodology and how it is planned?
- Describe change management in ISO 27001.
- What is threat analysis and how you can perform that?
- Name some of logical security technologies you have used.
- Difference between incident management and problem management with example.
- How incident management and change management is integrated?
- What is IAM, PAM?
- What is DAST / MAST / SAST / IAST?
- Difference between SAST / DAST?
- How can you securely access to a cloud network?
- Can you name 3 basic areas of control under PCI DSS standard?
- Do you know NIST framework? Can you name 2-3 controls?
- Can you give one example, of NIST control associated with ISO27001 controls?
- What are basic methods for financial fraud detection and prevention?
- Any critical risks identified in last 3 months? How you have addressed?
- Do you know SDLC? What the security measures being carried out during a software development. How you can audit a SDLC process?
- What is a Zero day attack? How you can prevent that?
- Difference between IDS and IPS systems.
- Difference between firewall and IPS device.
- Can you name some VPN tools and DLP tools? What tools you have used?
- Name some features of DLP.
- What is OT security?
- What is Zero trust network?
- How identity theft can be prevented?
- What is DMZ zone and why it is required?
- How to protect your home wireless access point?
- What is ransomware attack and how do you address it?
- Do you know DDoS attack and how it occurs?
- What is access control policy?
- Difference between SSO and MFA. Which one is best authentication method?
- Do you know Ubikey?
- Do you know how to harden a server?
- What are common policies need to be configured in firewall?
- What is signature based filter?
- What is source-routed traffic?
- What is SQL injection?
- What is Salting?
- Difference between SSL, SSH.
- What are OWASP top 10 controls?
- Difference between symmetric and asymmetric encryption.
- What is XSS attack?
- What is black box testing and white box testing?
- What is a botnet attack?
- What is network honey pot?
- What is network sniffing?
- What is a key logger?
- How to secure RDP? Why it is not secure to use RDP?
- What are risks arises from malware attack?
- What is threat intelligence?
- What are biggest sources of malware?
- What is reverse engineering? Where it is used?
- What is a root kit?
If you unable to understand or find any answers, please post in comment section below.
-DR
