300 Infosec Interview Questions 284p4y

300 InfoSec Interview questions Source: http://www.concise-courses.com/ec-council/ceh/info/ By Waqar Soomro

1. What is the extent of your web application development experience? 2. Aside from taking courses, what sorts of things have you done to become better qualified for your pursuits as an IT Professional? 3. What port does ping work over? 4. What’s the difference between HTTP and HTML? 5. What does RSA stand for? 6. What conferences do you routinely attend? 7. How do you create SSL certificates, generically speaking? 8. What is meterpreter? 9. With regard to forensics, what is physically different about how the platters are used in a 3.5" and a 2.5" HDD? 10. What is a honeypot? 11. What is a honeypot? 12. Describe the last program or script that you wrote. What problem did it solve? 13. What’s the difference between a router, a bridge, a hub and a switch? 14. What’s port scanning and how does it work? 15. What’s the better approach setting up a firewall: dropping or rejecting unwanted packets and why? 16. Please describe the steps to be taken by a company implementing an ISMS framework 17. Can we perform VA remotely? 18. What experience do you have with Data Loss Prevention (DLP) 19. Are you a risk-taker? 20. Give me an example of when you thought outside of the box. How did it help your employer? 21. Provide an example of a time when you successfully organized a diverse group of people to accomplish a task. 22. Share an experience in which your understanding of a current or problem helped your company to respond to the problem. 23. Provide an experience that demonstrates your ability to manage time effectively. What were the challenges and results?

24. Share an experience in which you conducted a test of a product, service, or process and successfully improved the quality or performance of the product, service, or process. 25. What is Spyware? 26. Can my page file hold sensitive data? 27. Physical Security questions 28. What do you see as the most critical and current threats effecting Internet accessible websites? 29. Is NT susceptible to flood attacks? 30. Are some Web server software programs more secure than others? 31. Have you worked with building and maintaining networks? 32. What makes you a good IT professional? 33. How does HTTP handle state? 34. I have just plugged in my network cable. How many packets must leave my NIC in order to complete a traceroute to twitter.com? 35. What is DES? 36. What papers have you written? 37. What is DNS Hijacking? 38. What is LDAP? 39. What are DCO and HPA? 40. Can DCO and HPA be changed? 41. Are there limitations of Intrusion Detection Signatures? 42. What are Linux’s strengths and weaknesses vs. Windows? 43. Please explain how the SSL protocol works. 44. Please explain how asymmetric encryption works 45. Please detail 802.1x security vs. 802.11 security (don’t confuse the protocols). 46. Why did you become (Certified Ethical Hacker) certified? 47. If we want to launch any new product or services in the market how will you perform risk assessment 48. How can you configure a network router from the CLI? 49. Is it possible to use packet filters on an NT machine? 50. What do you see as the most critical and current threats effecting Internet accessible websites? 51. Would you consider analyzing data or information a strength? How so? 52. Share an experience in which your attention to detail and thoroughness had an impact on your last company. 53. How do you determine when to update virus protection systems?

54. Describe an effective method you have used to maintain permanent fleet cryptologic and carry-on direct systems. 55. Provide an example when you were able to prevent a problem because you foresaw the reaction of another person. 56. How can I avoid computer viruses? 57. Use the out put from any network security scanner, which ever network security scanner is used by the interviewer 58. Wireless Security questions 59. What do you see as challenges to successfully deploying/monitoring web intrusion detection? 60. What ports must I enable to let NBT (NetBios over T/IP) through my firewall? 61. Are server-side includes insecure? 62. In which area of networking do you consider yourself most competent and why? 63. What specific automated tools have you used to recover deleted files? 64. What exactly is Cross Site Scripting? 65. How would you build the ultimate botnet? 66. What is Triple DES? 67. What is the secret sauce to a Cisco command? 68. What are IDA and/or Olly? 69. Why is LDAP called Light weight? 70. What was ISO 17799 originally called? 71. What’s the difference between a threat, vulnerability, and a risk? 72. What is a Syn Flood attack, and how to prevent it? 73. Can a server certificate prevent SQL injection attacks against your system? Please explain. 74. What is stateful packet inspection? 75. During an audit, an interviewee is not disclosing the information being requested. How would you overcome this situation? 76. How will u implement B 77. What are the ways to secure a Linux system? 78. What do you see as challenges to successfully deploying/monitoring web intrusion detection? 79. Provide an example when your ethics were tested. 80. Provide an example of when you were persistent in the face of obstacles. 81. What have you found to be the best way to monitor the performance of your work and/or the work of others? Share a time when you had to take corrective action.

82. Share an experience in which your diligence of inspecting equipment, structures, or materials helped you identify a problem or the cause of a problem. 83. Tell me about the last time you oversaw the work of someone else. How did you effectively motivate, develop, and direct the worker(s)? 84. What is computer impersonation? 85. Where do I get patches, or, what is a Service Pack or a Hot Fix? 86. What is Authenticode? 87. Intrusion Detection and Recovery questions 88. What are the most important steps you would recommend for securing a new web server? 89. What should I think about when using SNMP? 90. How do I secure Windows 2000 and IIS 5.0? 91. Give two examples of things you’ve done on the job or in school that demonstrate your willingness to work hard. 92. When solving a problem, tell me about the steps you go through to ensure your decisions are correct / effective. 93. What’s the difference between stored and reflected XSS? 94. What is NMAP? 95. How is session management handled with both HTTP and HTTPS request/responses? 96. What do you think of Teams? 97. Have you hacked any system? 98. What are the standard port numbers for SMTP, POP3, IMAP4, RPC, LDAP and Global Catalog? 99. Describe a time when you implemented defense in depth. 100.

What areas does ISO 27001 and 27002 cover?

101.

Cryptographically speaking, what is the main method of building a shared secret over a public

medium? 102.

Your network has been infected by malware. Please walk me through the process of cleaning

up the environment. 103.

Do you have a home lab? If so, how do you use it to perfect your skills.

104.

What is NAT and how does it work?

105.

Within the PCI-DSS sphere, what is a compensating control?

106.

How will u take approval from management to implement security control.

107.

Tell me about cross site request forgery and why should I care.

108.

What are the most important steps you would recommend for securing a new web server?

Web application? 109.

Provide a time when you were able to identify a complex problem, evaluate the options, and

implement a solution. How did the solution benefit your employer? 110.

Name a time when your patience was tested. How did you keep your emotions in check?

111.

Share an example of when you established and accomplished a goal that was personally

challenging. What helped you succeed? 112.

Name a time when your creativity or alternative thinking solved a problem in your workplace.

113.

Describe a time when you successfully persuaded another person to change his/her way of

thinking or behavior. 114.

What are privileges ( rights)?

115.

What is a SID (Security ID)?

116.

What servers have T ports opened on a NT system?

117.

Current Awareness of Security Issues questions

118.

What are some examples of you how you would attempt to gain access?

119.

What are giant packets?

120.

Or, is Windows NT susceptible to the PING attack?

121.

What is the IIS Lockdown Tool?

122.

What is the most difficult task you have performed or learned about with group policy with a

Windows Server? 123.

Which do you prefer, Windows, Mac, or Linux and why?

124.

What are the common defenses against XSS?

125.

Describe a session fixation vulnerabilities and when it occurs?

126.

What is the primary difference between traceroute on Unix/Linux and tracert on Windows?

127.

What is the security threat level today at the Internet Storm Center (ISC)?

128.

Have you released any worm/trojan/malicious code in the wild?

129.

How will you determine if a file is packed or not?

130.

The goal here is to get the candidate to talk about multiple layers of security, like an onion.

131.

Define an incident?

132.

What’s the difference between Diffie-Hellman and RSA?

133.

What kind of authentication does AD use?

134.

What is a Man In The Middle attack?

135.

What is a buffer overflow?

136.

Who is the ultimate responsible to classify a company’s information: the Infosec Team or the

information owner? 137.

How will you communicate VA and PT report to higher management

138.

What are the 7 layers of the OSI model.

139.

If you were not using Apache as the reverse proxy, what Microsoft application/tool could you

use to mitigate this attack? 140.

What are some long-range objectives that you developed in your last job? What did you do to

achieve them? 141.

How would you rate your writing skills?

142.

Share an experience in which you successfully modified computer security files.

143.

Tell me about a time when you developed your own way of doing things or were self-

motivated to finish an important task. 144.

Tell me about a time when your ability to analyze needs and product requirements helped you

create an effective design or make an informed decision to benefit your company. 145.

What is this (X) IDS signature mean?

146.

What is an ACE (Access Control Entry)?

147.

What is a NULL session?

148.

What is there to worry about Web Security?

149.

How could you identify what the contents are of the hacked.htm file that the attacker is trying

to ? 150.

What is Rollback.exe?

151.

What is the Microsoft Baseline Security Analyzer?

152.

It is very important to build good relationships on the job, but sometimes it doesn’t always

work out. If you can, tell me about a time when you were not able to build a successful relationship with a difficult person. 153.

What are you most proud of?

154.

What’s the difference between symmetric and public-key cryptography

155.

What is Cross-site scripting (XSS)?

156.

What kind of lab do you have at home?

157.

Explain SOX, HIPAA, PCI and GLB (if applicable). What do you see as the most critical and

current threats effecting Internet accessible websites? 158.

If i give you two DLLs of different versions, one has the vulnerability and another is patched

for that vulnerability then how will you find the vulnerability?

159.

Do you have Rainbow tables?

160.

What was the last training course you attend? Where? When? Why?

161.

What is the difference between Encrypting and Encoding?

162.

What kind of attack is a standard Diffie-Hellman exchange vulnerable to?

163.

What’s the difference between a Proxy and a Firewall?

164.

Take me through the process of pen testing a system.

165.

What are the most common application security flaws?

166.

Please describe the process of evaluating and analysing risks.

167.

what is CSRF attack?

168.

What is your vision for our security organization?

169.

Tell me how you organize, plan, and prioritize your work.

170.

Share a time when you willingly took on additional responsibilities or challenges. How did

you successfully meet all of the demands of these responsibilities? 171.

Provide an example of a time when you were able to demonstrate excellent listening skills.

What was the situation and outcome? 172.

Share an experience in which your ability to consider the costs or benefits of a potential action

helped you choose the most appropriate action. 173.

Please share with me an example of how you helped coach or mentor someone. What

improvements did you see in the person's knowledge or skills? 174.

Share an experience in which you used new training skills, ideas, or a method to adapt to a

new situation or improve an ongoing one. 175.

What is an ACL (Access Control List)?

176.

What is SRM (Security Reference Monitor)?

177.

What is Shutdown.exe?

178.

Are some operating systems more secure to use as platforms for Web servers than others?

179.

I am new to the Internet and have been hearing a lot about viruses. I am not exactly sure what

they are. Can you help? 180.

What is AFTP, NVAlert and NVRunCmd?

181.

What online resources do you use to keep abreast of web security issues?

182.

Can you give an example of a recent web security vulnerability or threat?

183.

What are three characteristics of a good manager?

184.

What are your best qualities when looking at your job experience?

185.

In public-key cryptography you have a public and a private key, and you often perform both

encryption and g functions. Which key is used for which function? 186.

In a public key infrastructure (PKI), the authority responsible for the identification and

authentication of an applicant for a digital certificate (i.e., certificate subjects) is called what? 187.

What is a Buffer Overflow?

188.

What do you see as challenges to successfully deploying/monitoring web intrusion detection?

189.

What is the latest security breach you’re aware of?

190.

What is dsniff?

191.

Describe the last security implementation you were involved with.

192.

What can protect you 100% from attack?

193.

What’s the goal of information security within an organization?

194.

What is Cross-Site Scripting and how can it be prevented?

195.

What is vulnerability test and how do you perform it?

196.

What is a false positive?

197.

What actions would you take to change end behavior towards InfoSec?

198.

what is the difference of pen testing and vulnerability assessment?

199.

What do you think about security convergence and its effect on our company?

200.

Share an effective method you have used to prevent violations of computer security

procedures. 201.

Provide a time when you dealt calmly and effectively with a high-stress situation.

202.

Provide a time when you worked in a rapidly evolving workplace. How did you deal with the

change? 203.

Describe an effective method you have used to ensure functioning of data processing

activities and security measures. 204.

Share an experience in which personal connections to coworkers or others helped you to be

successful in your work. 205.

Provide an experience in which your ability to actively find ways to help people improved

your company or your own work ethic. 206.

What makes a strong ?

207.

What is SAM (Security Manager)?

208.

What is CryptoAPI?

209.

Are CGI scripts insecure?

210.

What is the security threat level today at the Internet Storm Center (ISC)?

211.

There are a number of things to do to get better security on remote connections

212.

Imagine that we are running an Apache reverse proxy server and one of the servers we are

proxy for is a Windows IIS server. What does the log entry suggest has happened? 213.

Tell us about a time when you took responsibility for an error/mistake and were held

personally able. 214.

Do you have any questions for us?

215.

What kind of network do you have at home?

216.

What’s the difference between encryption and hashing?

217.

What is a NOP Sled?

218.

What are the most important steps you would recommend for securing a new web server?

219.

Can a Virtual Operating System be compromised?

220.

Have you ever used FTK, Encase, dc3dd, dd_rescue or dcfldd?

221.

Design a RADIUS infrastructure for 802.11 security and authentication.

222.

How exactly does traceroute/tracert work at the protocol level?

223.

Are open-source projects more or less secure than proprietary ones?

224.

What’s the difference between symmetric and asymmetric encryption?

225.

What are the latest threats you foresee for the near future?

226.

What is ISO 27001 and why should a company adopt it?

227.

How do you ensure a secure software development?

What are the best practices to be followed? 228.

what is the security implication of using mobile devices for enterprises?

229.

How do you sell security to other executives?

230.

Name a time when you identified strengths and weaknesses of alternative solutions to

problems. What was the impact? 231.

Share an example of when you went above and beyond the "call of duty".

232.

Provide a successful method you have used to monitor the use of data files and regulate

access to safeguard information in computer files. 233.

Share an effective method you have used to ensure system security and improve server and

network efficiency. How do you promote security awareness? 234.

Please share an experience in which you successfully taught a difficult principle or concept.

How were you able to be successful?

235.

Describe an experience in which your ability to work well with others and reconcile

differences helped your company or employer. 236.

How can I avoid Spyware?

237.

What is an access token?

238.

How do we “lock down” a new system?

239.

What general security precautions should I take?

240.

What is LSA (Local Security Authority)?

241.

Can I grant access to someone to view or change the logfiles?

242.

What applications can generate log files?

243.

What do you know about our company and why are you interested in working/interning with

us? 244.

Where do you get your security news from?

245.

What is Cross-Site Request Forgery?

246.

Describe the issues related to using MD5 Hashing Algorithm in SSL certificates?

247.

A business team has developed this brand new web site that you just tested and found a

number of XSS errors in, how would you handle that? 248.

What are the most important steps you would recommend for securing a new Web

application? 249.

What sort of test would you perform to understand a virus?

250.

Other than Wireshark, what sniffers have you used?

251.

What was the last technical book you read?

252.

If you were to start a job as head engineer or CSO at a Fortune 500 company due to the

previous guy being fired for incompetence, what would your priorities be? 253.

What’s the difference between encoding, encryption, and hashing?

254.

What’s the difference between encryption and hashing?

255.

How would you harden a Windows Server?

What about a Linux Server? 256.

Please describe step-by-step how you would prepare and perform an audit of any given

system. 257.

How does NAC work?

258.

what security threats the social networking sites bring to enterprises?

259.

How do you sell security to the company at large?

260.

Share an experience you had in dealing with a difficult person and how you handled the

situation. 261.

Describe an effective method you have used to encrypt data transmissions and erect firewalls.

262.

How do you balance cooperation with others and independent thinking?

Share an example. 263.

Provide a time when you successfully explained a difficult issue to a .

264.

Provide an experience in which you were sensitive to someone's needs or feelings. How did

your helpfulness affect your work environment? 265.

In your experience, what is the key to developing a good team?

266.

How can I protect my home computer?

267.

Are there any NT based viruses, or can NT be susceptible for other viruses?

268.

What is the URLScan Security Tool?

269.

What is a secure channel?

270.

Where is the that I configure a service to start with stored?

271.

What has been your most challenging course in college? Why?

272.

If you had to both encrypt and compress data during transmission, which would you do first,

and why? 273.

How does one defend against CSRF?

274.

What is Key Escrow?

275.

What is SSL?

276.

What is UPX?

277.

Tell me what you know about Sleuthkit.

278.

What is your CISSP number?

279.

As a corporate Information Security professional, what’s more important to focus on: threats

or vulnerabilities? 280.

Who do you look up to within the field of Information Security? Why?

281.

Why should I use server certificates on my e-commerce website?

282.

What do you understand by layered security approach?

283.

What is a “RISK”, how can it be measured and what actions can be taken to treat it?

284.

What is the difference between SOX compliance and ISO 27001?

285.

How do you convince the managers at the client company that they need to adhere to some

security standards or best practices?

286.

Are you willing to be able for security?

287.

Share an experience when you applied new technology or information in your job. How did it

help your company? 288.

Tell me about a plan you developed which successfully safeguarded computer files against

modification, destruction, or disclosure. What is one thing you would change about your plan? 289.

Share an experience in which your willingness to lead or offer an opinion helped your

company. 290.

What is the state of your documentation records?

What is one thing you would like to improve? 291.

Share an experience in which you successfully coordinated with others. How about a

coordination effort that was not as successful? 292.

What is a Firewall?

293.

I have been hearing a lot about firewalls, but I am not sure what it is or if I need it. Can you

help? 294.

Are there any known problems with the screen saver/ screen lock program?

295.

What is the HFNetChk Security Tool?

296.

How do I get my computer C2-level secure, or, what is c2config?

297.

Exactly what security risks are we talking about?

298.

How can I secure my client computers against my s?