crash.software
Projects
Pull Requests
Issues
Builds
Cipherops
Code
Files
Commits
Branches
Tags
Pull Requests
Code Comments
Code Compare
Issues
Builds
Statistics
Child Projects
‹cra.sh›
RESTful API
Projects STRLCPY Cipherops Commits d046aa49
🤬
  • .gitbook/assets/0.png
  • .gitbook/assets/1.png
  • .gitbook/assets/2.png
  • .gitbook/assets/3.png
  • .gitbook/assets/4.png
  • .gitbook/assets/5.png
  • .gitbook/assets/file.excalidraw.svg
  • ■ ■ ■ ■ ■ ■
    SUMMARY.md
    skipped 84 lines
    85 85  * [Exploitation notes](exploitation/exploitation-notes.md)
    86 86  * [Post Exploitation](exploitation/post-exploitation.md)
    87 87   
     88 +***
     89 + 
     90 +* [Interview Question](interview-question.md)
     91 +* [Question and Answers](question-and-answers.md)
     92 + 
  • ■ ■ ■ ■ ■ ■
    interview-question.md
     1 +# Interview Question
     2 + 
     3 +```markdown
     4 +Here are the 300 interview questions for cyber security roles
     5 + 
     6 +Generic
     7 + 
     8 +1. Can you name some of the emerging cyber threats?
     9 +2. Can you walk me through economics of cyber security?
     10 +3. What parts of the information security should the organisations outsource?
     11 +4. What security conferences have you participated over the past 24 months?
     12 +5. Can you explain some ways cyber criminals are using services like LinkedIn?
     13 +6. Can you name a few leading cyber security vendors? What do they do?
     14 +7. What is information security and how is it achieved?
     15 +8. What are the core principles of information security?
     16 +9. What is non-repudiation (as it applies to IT security)?
     17 +10. As a CISO how would you justify a security spent to the board of directors?
     18 +11. How often should the information security be covered in the boardroom, why?
     19 +12. What is the relationship between information security and data availability?
     20 +13. What is a security policy and why do we need one?
     21 +14. What is the difference between logical and physical security? Can you give an
     22 +example of both?
     23 +15. What’s an acceptable level of risk?
     24 +16. How does Gartner rank the vendors in their Magic Quadrant?
     25 +17. What are the most common types of attacks that threaten enterprise data security?
     26 +18. What is the difference between a threat and a vulnerability?
     27 +19. Can you give me an example of common security vulnerabilities?
     28 +20. Are you familiar with any security management frameworks such as ISO/IEC 27002?
     29 +21. What is a security control?
     30 +22. What are the different types of security control?
     31 +23. Can you describe the information lifecycle? How do you ensure information security
     32 +at each phase?
     33 +24. What is Information Security Governance?
     34 +25. What are your professional values? Why are professional ethics important in the
     35 +information security field?
     36 +26. Is geo-blocking a valid security control?
     37 +27. Are open-source projects more or less secure than proprietary ones?
     38 +28. Who do you look up to within the field of Information Security? Why?
     39 +29. Where do you get your security news from?
     40 +30. What’s the difference between symmetric and public-key cryptography?
     41 +31. What kind of network do you have at home?
     42 +32. What are the advantages offered by bug bounty programs over normal testing
     43 +practices?
     44 +33. What are your first three steps when securing a Linux server?
     45 +34. What are your first three steps when securing a Windows server?
     46 +35. What are your first three steps when securing a web application?
     47 +36. What are the security risks of IoT devices?
     48 +37. Who’s more dangerous to an organization, insiders or outsiders?
     49 +38. Why is DNS monitoring important?
     50 +39. How would traceroute help you find out where a breakdown in communication is?
     51 +40. Why would you want to use SSH from a Windows PC?
     52 +41. How would you find out what a POST code means?
     53 +42. What is the difference between a black hat and a white hat?
     54 +43. What do you think of social networking sites such as Facebook and LinkedIn?
     55 +44. Why are internal threats often more successful than external threats?
     56 +45. Why is deleted data not truly gone when you delete it?
     57 +46. What is the Chain of Custody?
     58 +47. How would you permanently remove the threat of data falling into the wrong
     59 +hands?
     60 +48. What is exfiltration?
     61 +49. How do you protect your home wireless access point?
     62 +50. If you were going to break into a database-based website, how would you do it?
     63 +51. What is the CIA triangle?
     64 +52. What is the difference between information protection and information assurance?
     65 +53. How would you lock down a mobile device?
     66 +54. How can you check are the mobile application on your phone secure to use?
     67 +55. Which is more secure Android or iOS, why?
     68 +56. What is the difference between closed-source and open-source? Which is better?
     69 +57. What is your opinion on hacktivist groups such as Anonymous?
     70 +58. How would you explain the threat of deep fakes?
     71 +59. Which one is more secure, a strong password or biometric authentication?
     72 +60. What’s the difference between deep web and dark web?
     73 +61. Why ransomware doesn’t affect the mobile devices?
     74 +62. What is MITRE ATTACK?
     75 +63. Should CISO report to CIO or CEO and why is that?
     76 +64. What is pineapple device?
     77 +65. What is Raspberry Pie?
     78 +66. What is Kubernetes?
     79 +67. What role does the AI and machine learning have in information security?
     80 +68. What application would you use to securely communicate between mobile devices?
     81 +69. What does proxy do?
     82 +70. Can you explain man-in-the middle attack?
     83 +71. What is the most secure authentication methodology, why?
     84 +72. Why the IT and security teams don’t like agents?
     85 +73. Can you name a few recent security breaches?
     86 +74. What is GDPR and does it affect you?
     87 +75. What role does the automation have in information security?
     88 +76. What is the difference between SIEM and UEBA?
     89 +77. Can give me an example of supply chain attack?
     90 +78. Can you define what is APT?
     91 +79. Why are the insurance companies paying out the ransomware demands?
     92 +80. What are the top 3 countries in information war?
     93 +81. Can you explain some ways the attackers are using AI?
     94 +82. Why are the cyber insurance premiums raising?
     95 +Cloud security
     96 +83. Why are so many S3 Bucket’s breached?
     97 +84. What does the shared responsibility model in cloud mean?
     98 +85. What is the advantage of API over forward proxy?
     99 +86. How would you secure the East-West traffic in the cloud?
     100 +87. How would you secure the traffic between cloud services?
     101 +88. Who is responsible for securing the data and users when using SaaS or IaaS services?
     102 +89. Why are the containers vulnerable?
     103 +90. What are some of the security risks for the organisation when using Slack or
     104 +Microsoft Teams?
     105 +91. Why does it take so long for organisations to move their workloads to the cloud?
     106 +92. Can you name the advantages of cloud-based databases?
     107 +93. Can you name a few security software tools that can help you monitor cloud
     108 +environments?
     109 +94. What are things to take into consideration when using public cloud instead of
     110 +private?
     111 +95. What is CASB?
     112 +Network security
     113 +96. What port does ping work over?
     114 +97. Do you prefer filtered ports or closed ports on your firewall?
     115 +98. How exactly does traceroute/tracert work at the protocol level?
     116 +99. What are Linux’s strengths and weaknesses vs. Windows?
     117 +100. What is a firewall? And provide an example of how a firewall can be bypassed
     118 +by an outsider to access the corporate network.
     119 +101. Besides firewalls, what other devices are used to enforce network
     120 +boundaries?
     121 +102. What is the role of network boundaries in information security?
     122 +103. What does an intrusion detection system do? How does it do it?
     123 +104. What is a honeypot? What type of attack does it defend against?
     124 +105. What technologies and approaches are used to secure information and
     125 +services deployed on cloud computing infrastructure?
     126 +106. What information security challenges are faced in a cloud computing
     127 +environment?
     128 +107. Can you give me an overview of IP multicast?
     129 +108. How many bits do you need for a subnet size?
     130 +109. What is packet filtering?
     131 +110. Can you explain the difference between a packet filtering firewall and an
     132 +application layer firewall?
     133 +111. What are the layers of the OSI model?
     134 +112. How would you login to Active Directory from a Linux or Mac box?
     135 +113. What is an easy way to configure a network to allow only a single computer
     136 +to login on a particular jack?
     137 +114. What are the three ways to authenticate a person?
     138 +115. You find out that there is an active problem on your network. You can fix it,
     139 +but it is out of your jurisdiction. What do you do?
     140 +116. How would you compromise an “office workstation” at a hotel?
     141 +117. What is worse in firewall detection, a false negative or a false positive? And
     142 +why?
     143 +118. How would you judge if a remote server is running IIS or Apache?
     144 +119. What is the difference between an HIDS and a NIDS?
     145 +120. Why is it so hard to monitor cloud traffic from the network?
     146 +121. What is SD-WAN?
     147 +Application security
     148 +122. What is CI/CD pipeline?
     149 +123. Vulnerabilities represent 50% of Application Security pen test findings, what’s
     150 +the other half?
     151 +124. Can you explain what is business logic error and what does that have to do
     152 +with application security?
     153 +125. Describe the last program or script that you wrote. What problem did it
     154 +solve?
     155 +126. Can you briefly discuss the role of information security in each phase of the
     156 +software development lifecycle?
     157 +127. How would you implement a secure login field on a high traffic website
     158 +where performance is a consideration?
     159 +128. What are the various ways to handle account brute forcing?
     160 +129. What is cross-site request forgery?
     161 +130. Can you explain the hardest application security challenge you have worked
     162 +with and how did you overcome that?
     163 +131. How does one defend against CSRF?
     164 +132. If you were a site administrator looking for incoming CSRF attacks, what
     165 +would you look for?
     166 +133. What’s the difference between HTTP and HTML?
     167 +134. How does HTTP handle state?
     168 +135. What exactly is cross-site scripting?
     169 +136. What’s the difference between stored and reflected XSS?
     170 +137. What are the common defences against XSS?
     171 +138. You are remoted into a headless system in a remote area. You have no
     172 +physical access to the hardware, and you need to perform an OS installation. What
     173 +do you do?
     174 +139. On a Windows network, why is it easier to break into a local account than an
     175 +AD account?
     176 +140. What does user enumeration mean?
     177 +141. Can you explain OWASP top 10?
     178 +142. How would you secure a database?
     179 +143. What are the common defences against SQL injection?
     180 +144. How do see the obfuscated SQL injection in clear text?
     181 +145. How would you secure the local access to database?
     182 +Security architect
     183 +146. Explain data leakage and give examples of some of the root causes.
     184 +147. What are some effective ways to control data leakage?
     185 +148. Describe the 80/20 rules of networking.
     186 +149. What are web server vulnerabilities and name a few methods to prevent web
     187 +server attacks?
     188 +150. What are the most damaging types of malwares?
     189 +151. What’s your preferred method of giving remote employees access to the
     190 +company network and are there any weaknesses associated to it?
     191 +152. List a couple of tests that you would do to a network to identify security
     192 +flaws.
     193 +153. What kind of websites and cloud services would you block?
     194 +154. What type of security flaw is there in VPN?
     195 +155. What is a DDoS attack?
     196 +156. Can you describe the role of security operations in the enterprise?
     197 +157. What is layered security architecture? Is it a good approach? Why?
     198 +158. Have you designed security measures that span overlapping information
     199 +domains? Can you give me a brief overview of the solution?
     200 +159. How do you ensure that a design anticipates human error?
     201 +160. How do you ensure that a design achieves regulatory compliance?
     202 +161. What is capability-based security? Have you incorporated this pattern into
     203 +your designs? How?
     204 +162. Can you give me a few examples of security architecture requirements?
     205 +163. Who typically owns security architecture requirements and what
     206 +stakeholders contribute?
     207 +164. What special security challenges does SOA present?
     208 +165. What security challenges do unified communications present?
     209 +166. Do you take a different approach to security architecture for a COTS vs a
     210 +custom solution?
     211 +167. Have you architected a security solution that involved SaaS components?
     212 +What challenges did you face?
     213 +168. Have you worked on a project in which stakeholders choose to accept
     214 +identified security risks that worried you? How did you handle the situation?
     215 +169. You see a user logging in as root to perform basic functions. Is this a
     216 +problem?
     217 +170. What is data protection in transit vs data protection at rest?
     218 +171. You need to reset a password-protected BIOS configuration. What do you
     219 +do?
     220 +Risk management
     221 +172. Is there an acceptable level of risk?
     222 +173. Is it a good idea to pay the ransom in when your data has been encrypted by
     223 +a ransomware?
     224 +174. What’s the most comprehensive security standard to manage risk?
     225 +175. How do you measure risk? Can you give an example of a specific metric that
     226 +measures information security risk?
     227 +176. Can you give me an example of risk trade-offs (e.g. risk vs cost)?
     228 +177. What is incident management?
     229 +178. What is business continuity management? How does it relate to security?
     230 +179. What is the primary reason most companies haven’t fixed their
     231 +vulnerabilities?
     232 +180. What’s the goal of information security within an organization?
     233 +181. What’s the difference between a threat, vulnerability, and a risk?
     234 +182. If you were to start a job as head engineer or CSO at a Fortune 500 company
     235 +due to the previous guy being fired for incompetence, what would your priorities
     236 +be? [Imagine you start on day one with no knowledge of the environment]
     237 +183. As a corporate information security professional, what’s more important to
     238 +focus on: threats or vulnerabilities?
     239 +184. If I’m on my laptop, here inside my company, and I have just plugged in my
     240 +network cable. How many packets must leave my NIC in order to complete a
     241 +traceroute to twitter.com?
     242 +185. How would you build the ultimate botnet?
     243 +186. What are the primary design flaws in HTTP, and how would you improve it?
     244 +187. If you could re-design TCP, what would you fix?
     245 +188. What is the one feature you would add to DNS to improve it the most?
     246 +189. What is likely to be the primary protocol used for the Internet of Things in 10
     247 +years?
     248 +190. If you had to get rid of a layer of the OSI model, which would it be?
     249 +191. What is residual risk?
     250 +192. What is the difference between a vulnerability and an exploit?
     251 +193. What role does cyber awareness have in information security?
     252 +194. What is a tabletop exercise?
     253 +195. Can you explain threat modelling?
     254 +196. Why are the incidents relating to insiders more expensive?
     255 +Security audits, testing & incident response
     256 +197. What is the main driver for security audits and pen tests?
     257 +198. Can you explain what a great scoping process look like?
     258 +199. What is an IT security audit?
     259 +200. What is the main reason why organisations don’t fix the penetration test
     260 +findings?
     261 +201. What’s the difference between high and critical vulnerability finding?
     262 +202. What is an RFC?
     263 +203. What is your favourite exploit?
     264 +204. What type of systems should be audited?
     265 +205. How would you bypass AV?
     266 +206. Why are the roles important when testing API’s?
     267 +207. What’s the difference in testing mobile and web application?
     268 +208. What’s the difference in testing web application and API?
     269 +209. Have you worked in a virtualized environment?
     270 +210. What is the most difficult part of auditing for you?
     271 +211. Describe the most difficult auditing procedure you’ve implemented.
     272 +212. What is change management?
     273 +213. What were some of the findings in one of your last times you tested an
     274 +incident response plan?
     275 +214. What types of RFC or change management software have you used?
     276 +215. What do you do if a rollout goes wrong?
     277 +216. How do you manage system major incidents?
     278 +217. How do you ask developers to document changes?
     279 +218. How do you compare files that might have changed since the last time you
     280 +looked at them?
     281 +219. Can you explain the three types of network review?
     282 +220. How would you conduct a password audit?
     283 +221. Name a few types of security breaches.
     284 +222. What is a common method of disrupting enterprise systems?
     285 +223. What are some security software tools you can use to monitor the network?
     286 +224. What should you do after you suspect a network has been hacked?
     287 +225. How can you encrypt email to secure transmissions about the company?
     288 +226. What document describes steps to bring up a network that’s had a major
     289 +outage?
     290 +227. How can you ensure backups are secure?
     291 +228. What are your thoughts on automated penetration testing?
     292 +229. What is one way to do a cross-script hack?
     293 +230. How can you avoid cross script hacks?
     294 +231. How do you test information security?
     295 +232. What is the difference between black box and white box penetration testing?
     296 +233. What is a vulnerability scan?
     297 +234. In pen testing what’s better, a red team or a blue team?
     298 +235. Why would you bring in an outside contractor to perform a penetration test?
     299 +236. What does PCI-DSS say about pen testing?
     300 +237. How would you deliver a social engineering security test?
     301 +238. Why is incident response plan important?
     302 +239. How do you test the security of cloud services like Salesforce or Amazon
     303 +AWS?
     304 +240. What are the three first steps when responding to a ransomware attack?
     305 +241. What does lockpicking have to do with security testing?
     306 +242. How would you test a ATM or smart parking meter?
     307 +243. What are the you biggest bounties you have earned?
     308 +244. Can you name a few EDR tools?
     309 +245. What is your favourite physical security testing tool or device?
     310 +246. What would be the topic of phishing email if you would send it today?
     311 +247. At what stage you usually engage with the developers?
     312 +248. At what stage of development lifecycle, you should do the security testing?
     313 +249. What is the difference between security audit and penetration test?
     314 +250. Can you explain the biggest challenge while doing a security test and how did
     315 +you overcome that?
     316 +251. You managed to hack the smart thermometer in casino, how would you
     317 +make your way to the high-roller database and back?
     318 +252. Why is Tesla paying million dollars for bugs/vulnerabilities?
     319 +Cryptography
     320 +253. What is secret-key cryptography?
     321 +254. What is public-key cryptography?
     322 +255. What is a session key?
     323 +256. What is RSA?
     324 +257. How fast is RSA?
     325 +258. What would it take to break RSA?
     326 +259. Are strong primes necessary for RSA?
     327 +260. How large a module (key) should be used in RSA?
     328 +261. How large should the primes be?
     329 +262. How is RSA used for authentication in practice? What are RSA digital
     330 +signatures?
     331 +263. What are the alternatives to RSA?
     332 +264. Is RSA currently in use today?
     333 +265. What are DSS and DSA?
     334 +266. What is difference between DSA and RSA?
     335 +267. Is DSA secure?
     336 +268. What are special signature schemes?
     337 +269. What is a blind signature scheme?
     338 +270. What is a designated confirmer signatures?
     339 +271. What is a fail-stop signature scheme?
     340 +272. What is a group signature?
     341 +273. What is blowfish?
     342 +274. What is SAFER?
     343 +275. What is FEAL?
     344 +276. What is Shipjack?
     345 +277. What is stream cipher?
     346 +278. What is the advantage of public-key cryptography over secret-key
     347 +cryptography?
     348 +279. What is the advantage of secret-key cryptography over public-key
     349 +cryptography?
     350 +280. What is Message Authentication Code (MAC)?
     351 +281. What is a block cipher?
     352 +282. What are different block cipher modes of operation?
     353 +283. What is a stream cipher? Name a most widely used stream cipher.
     354 +284. What is one-way hash function?
     355 +285. What is collision when we talk about hash functions?
     356 +286. What are the applications of a hash function?
     357 +287. What is trapdoor function?
     358 +288. Cryptographically speaking, what is the main method of building a shared
     359 +secret over a public medium?
     360 +289. What’s the difference between Diffie-Hellman and RSA?
     361 +290. What kind of attack is a standard Diffie-Hellman exchange vulnerable to?
     362 +291. What’s the difference between encoding, encryption, and hashing?
     363 +292. In public-key cryptography you have a public and a private key, and you often
     364 +perform both encryption and signing functions. Which key is used for which
     365 +function?
     366 +293. What’s the difference between Symmetric and Asymmetric encryption?
     367 +294. If you had to both encrypt and compress data during transmission, which
     368 +would you do first, and why?
     369 +295. What is SSL and why is it not enough when it comes to encryption?
     370 +296. What is salting, and why is it used?
     371 +297. What are salted hashes?
     372 +298. What is the Three-way handshake? How can it be used to create a DOS
     373 +attack?
     374 +299. Wh
     375 +```
     376 + 
     377 +```markdown
     378 +# VAPT Interview Questions
     379 +- What do you mean by security testing?
     380 + Security testing is a process intended to reveal flaws in the security mechanisms of an information system that protect data and maintain functionality as intended.
     381 +- What do you mean by vulnerability?
     382 + Vulnerability is the inability to resist a hazard or to respond when a disaster has occurred.
     383 +- What do you mean by penetration testing?
     384 + A penetration test (pen test) is an authorized simulated attack performed on a computer system to evaluate its security.
     385 +- What are the two prevalent techniques used to safeguard a password file?
     386 +- What are the major attributes of security testing?
     387 + Normally, security testing has the following attributes:
     388 + 👉 Authentication.
     389 + 👉 Authorization.
     390 + 👉 Confidentiality.
     391 + 👉 Availability.
     392 + 👉 Integrity.
     393 + 👉 Non-repudiation.
     394 +- What is the importance of VAPT?
     395 + VAPT helps to protect your organisation by providing visibility of security weaknesses and guidance to address them.
     396 +- As a developer, what will you do to rectify existing cross-site scripting vulnerability in the code that the application security auditors have reported?
     397 +- What do you know about WSDL and SOAP?
     398 + SOAP (Simple Object Access Protocol) is a message protocol that enables the distributed elements of an application to communicate. SOAP can be carried over a variety of standard protocols, including the web-related Hypertext Transfer Protocol (HTTP).
     399 + 
     400 +## DevOps Interview Questions
     401 + 
     402 +- What do you know about DevOps?
     403 + DevOps is the combination of cultural philosophies, practices, and tools that increases an organization's ability to deliver applications and services at high velocity: evolving and improving products at a faster pace than organizations using traditional software development and infrastructure management processes.
     404 +- What is the role of AWS in DevOps?
     405 + AWS provides services that help you practice DevOps at your company and that are built first for use with AWS. These tools automate manual tasks, help teams manage complex environments at scale, and keep engineers in control of the high velocity that is enabled by DevOps.
     406 +- How is DevOps different from agile methodology?
     407 + DevOps is a culture, fostering collaboration amongst all participants involved in the development and maintenance of software. Agile can be described as a development methodology designed to maintain productivity and drive releases with the common reality of changing needs.
     408 +- What are the different phases in DevOps?
     409 + DevOps follows certain processes that include code, build, test, release, deploy, operate, monitor and plan. DevOps lifecycle follows various phases such as continuous development, integration, testing, continuous monitoring, and continuous feedback.
     410 +- How will you approach a project that needs to implement DevOps?
     411 +- What is the difference between continuous delivery and continuous deployment?
     412 + Continuous Delivery (CD): CI + the entire software release process is automated, it may be composed of multiple stages, and deployment to production is manual. Continuous Deployment: CI + CD + fully automated deployment to production.
     413 +- What is the role of configuration management in DevOps?
     414 + Configuration management is important because it enables the ability to scale infrastructure and software systems without having to correspondingly scale administrative staff to manage those systems. This can make it possible to scale where it previously wasn't feasible to do so.
     415 +- What are the fundamental differences between DevOps & Agile?
     416 + 
     417 +# Cyber security analyst
     418 +- What is the difference between Symmetric and Asymmetric encryption?
     419 + Symmetric encryption uses a single key that needs to be shared among the people who need to receive the message while asymmetric encryption uses a pair of public key and a private key to encrypt and decrypt messages when communicating
     420 +- What is the difference between IDS and IPS?
     421 +An intrusion detection system (IDS) is defined as a solution that monitors network events and analyzes them to detect security incidents and imminent threats. An intrusion prevention system (IPS) is defined as a solution that performs intrusion detection and then goes one step ahead and prevents any detected threats.
     422 +- What are the response codes that can be received from a Web Application?
     423 +- What steps will you take to secure a server?
     424 +Server Security in 3 Steps
     425 +Step 1 – Shut Down Access. As IT admins install appropriate software packages and applications onto servers, invariably ports are opened and services enabled. ...
     426 +Step 2 – Patch Your Servers. ...
     427 +Step 3 – Tightly Control User Access.
     428 +
     429 +- How can identity theft be prevented?
     430 +One of the most effective ways to protect against identity theft is to monitor your credit reports and billing statements so you can spot and report unauthorized activity
     431 +- How would you reset a password-protected BIOS configuration?
     432 +- How often should you perform Patch management?
     433 +- What are salted hashes?
     434 +Salting hashes sounds like one of the steps of a hash browns recipe, but in cryptography, the expression refers to adding random data to the input of a hash function to guarantee a unique output, the hash, even when the inputs are the same
     435 + 
     436 +## Application security engineer
     437 +- What is Intrusion Detection?
     438 +- List the attributes of Security Testing?
     439 +- What are the SSL connections and an SSL session?
     440 +- List the full names of abbreviations related to Software security?
     441 +- List down some factors that can cause vulnerabilities?
     442 +- List the parameters that define an SSL session connection?
     443 +- What are the three classes of intruders?
     444 +- List the parameters that define an SSL session state?
     445 + 
     446 +# Network security engineer
     447 +- Why are internal threats usually more effective than external threats?
     448 +- Which is a more secure project: open-source or proprietary?
     449 +- How do you deal with “Man In The Middle” attacks?
     450 +- Explain the difference between a white and black hat hacker.
     451 +- What are the best defenses against a brute force login attack?
     452 +- What do you use on your own personal network?
     453 +- How do you define risk, vulnerability, and threat, in the context of network security?
     454 +- What are the possible results of an attack on a computer network?
     455 +```
     456 + 
     457 + 
  • ■ ■ ■ ■ ■ ■
    overview/resourses/hacking-resources.md
    skipped 1 lines
    2 2   
    3 3  {% embed url="https://github.com/0xsyr0/Awesome-Cybersecurity-Handbooks" %}
    4 4   
     5 +{% embed url="https://github.com/devanshbatham/Vulnerabilities-Unmasked" %}
     6 + 
    5 7  * [Hacking Resources](broken-reference)
    6 8   * [Usefull Web Browser plugins](broken-reference)
    7 9   * [Cool Tools/Labs](broken-reference)
    skipped 310 lines
  • ■ ■ ■ ■ ■ ■
    question-and-answers.md
     1 +# Question and Answers
     2 + 
     3 +### Vulnerability Assessment and Penetration Testing (VAPT)
     4 + 
     5 +#### Question 1:
     6 + 
     7 +What does VAPT stand for in the context of cybersecurity?
     8 + 
     9 +a) Virtual Analysis and Penetration Techniques b) Vulnerability Analysis and Penetration Testing c) Visual Assessment and Precautionary Tactics d) Validating Assets and Penetrating Threats
     10 + 
     11 +#### Answer 1:
     12 + 
     13 +b) Vulnerability Analysis and Penetration Testing
     14 + 
     15 +#### Question 2:
     16 + 
     17 +Which of the following is the primary objective of VAPT?
     18 + 
     19 +a) Identifying and remediating vulnerabilities in a system b) Protecting sensitive data from unauthorized access c) Developing new security tools and technologies d) Monitoring network traffic for potential threats
     20 + 
     21 +#### Answer 2:
     22 + 
     23 +a) Identifying and remediating vulnerabilities in a system
     24 + 
     25 +#### Question 3:
     26 + 
     27 +What is the difference between vulnerability assessment and penetration testing?
     28 + 
     29 +a) Vulnerability assessment involves exploiting vulnerabilities, while penetration testing does not. b) Penetration testing is automated, while vulnerability assessment is manual. c) Vulnerability assessment identifies weaknesses, while penetration testing simulates attacks. d) Vulnerability assessment is only performed on web applications, while penetration testing is for networks.
     30 + 
     31 +#### Answer 3:
     32 + 
     33 +c) Vulnerability assessment identifies weaknesses, while penetration testing simulates attacks.
     34 + 
     35 +#### Question 4:
     36 + 
     37 +Which phase of VAPT involves gathering information about the target system, such as IP addresses and domain names?
     38 + 
     39 +a) Exploitation b) Enumeration c) Scanning d) Reconnaissance
     40 + 
     41 +#### Answer 4:
     42 + 
     43 +d) Reconnaissance
     44 + 
     45 +#### Question 5:
     46 + 
     47 +When conducting a penetration test, what is the correct sequence of actions typically followed?
     48 + 
     49 +a) Reconnaissance, Scanning, Exploitation, Post-Exploitation b) Scanning, Reconnaissance, Exploitation, Post-Exploitation c) Exploitation, Scanning, Reconnaissance, Post-Exploitation d) Post-Exploitation, Exploitation, Scanning, Reconnaissance
     50 + 
     51 +#### Answer 5:
     52 + 
     53 +a) Reconnaissance, Scanning, Exploitation, Post-Exploitation
     54 + 
     55 +#### Question 6:
     56 + 
     57 +Which of the following is NOT a common penetration testing methodology?
     58 + 
     59 +a) OWASP Testing Guide b) NIST Cybersecurity Framework c) Penetration Testing Execution Standard (PTES) d) Open Source Security Testing Methodology Manual (OSSTMM)
     60 + 
     61 +#### Answer 6:
     62 + 
     63 +b) NIST Cybersecurity Framework
     64 + 
     65 +#### Question 7:
     66 + 
     67 +During a penetration test, what does the term "privilege escalation" refer to?
     68 + 
     69 +a) Gaining unauthorized access to sensitive data b) Elevating user privileges to gain administrative access c) Cracking encrypted passwords d) Denying service to legitimate users
     70 + 
     71 +#### Answer 7:
     72 + 
     73 +b) Elevating user privileges to gain administrative access
     74 + 
     75 +#### Question 8:
     76 + 
     77 +What is the primary purpose of the report generated after a VAPT engagement?
     78 + 
     79 +a) To provide a detailed analysis of the target system's architecture b) To justify the cost of the VAPT engagement to the client c) To impress the client with technical jargon and complex language d) To present findings, vulnerabilities, and recommended remediation actions
     80 + 
     81 +#### Answer 8:
     82 + 
     83 +d) To present findings, vulnerabilities, and recommended remediation actions
     84 + 
     85 +#### Question 9:
     86 + 
     87 +Which of the following statements is true about bug bounty programs?
     88 + 
     89 +a) Bug bounty programs are only offered by government agencies. b) Bug bounty programs are illegal and considered hacking. c) Bug bounty programs reward individuals for responsibly disclosing security vulnerabilities. d) Bug bounty programs are exclusively focused on network security.
     90 + 
     91 +#### Answer 9:
     92 + 
     93 +c) Bug bounty programs reward individuals for responsibly disclosing security vulnerabilities.
     94 + 
     95 +#### Question 10:
     96 + 
     97 +What is the main motivation for organizations to run bug bounty programs?
     98 + 
     99 +a) To find vulnerabilities in their competitors' systems b) To promote illegal hacking activities c) To improve their cybersecurity by incentivizing external researchers d) To replace internal security teams with external researchers
     100 + 
     101 +#### Answer 10:
     102 + 
     103 +c) To improve their cybersecurity by incentivizing external researchers
     104 + 
     105 +### Bug Bounty Programs
     106 + 
     107 +#### Question 11:
     108 + 
     109 +Which tech giant is known for running one of the most popular bug bounty programs?
     110 + 
     111 +a) Microsoft b) Apple c) Amazon d) Google
     112 + 
     113 +#### Answer 11:
     114 + 
     115 +d) Google
     116 + 
     117 +#### Question 12:
     118 + 
     119 +What is the main difference between public and private bug bounty programs?
     120 + 
     121 +a) Public programs have more security vulnerabilities to discover. b) Private programs are only open to internal employees. c) Public programs offer higher rewards to researchers. d) Private programs are invitation-only and not open to the public.
     122 + 
     123 +#### Answer 12:
     124 + 
     125 +d) Private programs are invitation-only and not open to the public.
     126 + 
     127 +#### Question 13:
     128 + 
     129 +Which of the following is NOT typically considered a valid vulnerability for bug bounty programs?
     130 + 
     131 +a) Cross-Site Scripting (XSS) b) Remote Code Execution (RCE) c) Brute-Force Attacks d) SQL Injection (SQLi)
     132 + 
     133 +#### Answer 13:
     134 + 
     135 +c) Brute-Force Attacks
     136 + 
     137 +#### Question 14:
     138 + 
     139 +What role does a bug bounty platform play in these programs?
     140 + 
     141 +a) It manages and conducts the penetration testing process. b) It acts as a mediator between the organization and the researchers. c) It automatically fixes reported vulnerabilities. d) It exclusively focuses on finding zero-day vulnerabilities.
     142 + 
     143 +#### Answer 14:
     144 + 
     145 +b) It acts as a mediator between the organization and the researchers.
     146 + 
     147 +#### Question 15:
     148 + 
     149 +What is the "Hall of Fame" in the context of bug bounty programs?
     150 + 
     151 +a) A section of the bug bounty platform that lists the most valuable vulnerabilities found. b) An award given to the researcher with the most vulnerability reports. c) A competition where researchers compete against each other to find bugs. d) A ceremony held annually to celebrate successful bug bounty programs.
     152 + 
     153 +#### Answer 15:
     154 + 
     155 +a) A section of the bug bounty platform that lists the most valuable vulnerabilities found.
     156 + 
     157 +#### Question 16:
     158 + 
     159 +What is the responsible disclosure principle in bug bounty programs?
     160 + 
     161 +a) Researchers must disclose vulnerabilities to the public before notifying the organization. b) Researchers should only report vulnerabilities to the media for maximum impact. c) Researchers should report vulnerabilities to the organization without disclosing them to the public. d) Researchers can sell the discovered vulnerabilities to the highest bidder.
     162 + 
     163 +#### Answer 16:
     164 + 
     165 +c) Researchers should report vulnerabilities to the organization without disclosing them to the public.
     166 + 
     167 +#### Question 17:
     168 + 
     169 +What is the main goal of a security researcher participating in bug bounty programs?
     170 + 
     171 +a) To gain unauthorized access to the organization's systems. b) To cause disruption and damage to the organization's infrastructure. c) To earn monetary rewards for responsibly disclosing security vulnerabilities. d) To compete with other researchers and become the top bug bounty hunter.
     172 + 
     173 +#### Answer 17:
     174 + 
     175 +c) To earn monetary rewards for responsibly disclosing security vulnerabilities.
     176 + 
     177 +#### Question 18:
     178 + 
     179 +Which of the following is a famous example of a critical bug discovered through a bug bounty program?
     180 + 
     181 +a) Heartbleed vulnerability in OpenSSL b) WannaCry ransomware attack c) Stuxnet worm targeting SCADA systems d) NotPetya malware outbreak
     182 + 
     183 +#### Answer 18:
     184 + 
     185 +a) Heartbleed vulnerability in OpenSSL
     186 + 
     187 +#### Question 19:
     188 + 
     189 +What is the "Payout Cap" in bug bounty programs?
     190 + 
     191 +a) The maximum number of bug reports a researcher can submit in a year. b) The highest reward amount a researcher can receive for a single vulnerability. c) The time limit set for researchers to find and report bugs. d) The minimum threshold of bugs that must be reported before researchers receive rewards.
     192 + 
     193 +#### Answer 19:
     194 + 
     195 +b) The highest reward amount a researcher can receive for a single vulnerability.
     196 + 
     197 +#### Question 20:
     198 + 
     199 +Which term is commonly used to describe the process of fixing reported vulnerabilities?
     200 + 
     201 +a) Patching b) Fuzzing c) Bricking d) Rooting
     202 + 
     203 +#### Answer 20:
     204 + 
     205 +a) Patching
     206 + 
     207 +### Network Security 
     208 + 
     209 +#### Question 21:
     210 + 
     211 +Which of the following network security measures is used to control and monitor the flow of incoming and outgoing network traffic?
     212 + 
     213 +a) Firewall b) Antivirus c) Encryption d) Intrusion Detection System (IDS)
     214 + 
     215 +#### Answer 21:
     216 + 
     217 +a) Firewall
     218 + 
     219 +#### Question 22:
     220 + 
     221 +What is the purpose of a Virtual Private Network (VPN) in network security?
     222 + 
     223 +a) To protect against viruses and malware. b) To prevent unauthorized access to physical network devices. c) To provide secure and encrypted communication over public networks. d) To block malicious websites and content.
     224 + 
     225 +#### Answer 22:
     226 + 
     227 +c) To provide secure and encrypted communication over public networks.
     228 + 
     229 +#### Question 23:
     230 + 
     231 +Which of the following statements about Distributed Denial of Service (DDoS) attacks is true?
     232 + 
     233 +a) DDoS attacks are always carried out by a single attacker using multiple systems. b) DDoS attacks aim to steal sensitive information from a targeted network. c) DDoS attacks overwhelm a network by flooding it with a massive amount of legitimate traffic. d) DDoS attacks can only be prevented by installing additional hardware.
     234 + 
     235 +#### Answer 23:
     236 + 
     237 +c) DDoS attacks overwhelm a network by flooding it with a massive amount of legitimate traffic.
     238 + 
     239 +#### Question 24:
     240 + 
     241 +Which network security concept involves hiding internal IP addresses from external networks?
     242 + 
     243 +a) Network Address Translation (NAT) b) Virtual LAN (VLAN) c) Quality of Service (QoS) d) Port Forwarding
     244 + 
     245 +#### Answer 24:
     246 + 
     247 +a) Network Address Translation (NAT)
     248 + 
     249 +#### Question 25:
     250 + 
     251 +What does the term "phishing" refer to in the context of network security?
     252 + 
     253 +a) Gaining unauthorized access to a network by exploiting software vulnerabilities. b) Sending deceptive emails or messages to trick users into revealing sensitive information. c) Scanning a network to identify security vulnerabilities. d) Intercepting and decoding encrypted network traffic.
     254 + 
     255 +#### Answer 25:
     256 + 
     257 +b) Sending deceptive emails or messages to trick users into revealing sensitive information.
     258 + 
     259 +#### Question 26:
     260 + 
     261 +Which security protocol is commonly used to secure network communication over the internet?
     262 + 
     263 +a) Secure Sockets Layer (SSL) b) File Transfer Protocol (FTP) c) Simple Network Management Protocol (SNMP) d) Hypertext Transfer Protocol (HTTP)
     264 + 
     265 +#### Answer 26:
     266 + 
     267 +a) Secure Sockets Layer (SSL)
     268 + 
     269 +#### Question 27:
     270 + 
     271 +What is the purpose of network segmentation in network security?
     272 + 
     273 +a) To isolate infected devices and prevent them from spreading malware. b) To reduce network latency and improve performance. c) To limit the number of users accessing the network simultaneously. d) To ensure all devices on the network use the same IP address range.
     274 + 
     275 +#### Answer 27:
     276 + 
     277 +a) To isolate infected devices and prevent them from spreading malware.
     278 + 
     279 +#### Question 28:
     280 + 
     281 +Which of the following is NOT a common wireless network security measure?
     282 + 
     283 +a) WPA2 (Wi-Fi Protected Access 2) b) MAC filtering (Media Access Control) c) SSID hiding (Service Set Identifier) d) Packet sniffing
     284 + 
     285 +#### Answer 28:
     286 + 
     287 +d) Packet sniffing
     288 + 
     289 +#### Question 29:
     290 + 
     291 +What is the primary purpose of an intrusion detection system (IDS) in network security?
     292 + 
     293 +a) To prevent unauthorized access to a network. b) To encrypt data transmitted over the network. c) To detect and respond to suspicious activities or security breaches. d) To filter out malicious websites and content.
     294 + 
     295 +#### Answer 29:
     296 + 
     297 +c) To detect and respond to suspicious activities or security breaches.
     298 + 
     299 +#### Question 30:
     300 + 
     301 +What does the term "zero-day vulnerability" mean in the context of network security?
     302 + 
     303 +a) A vulnerability that has been known for zero days and doesn't exist. b) A vulnerability that has never been exploited in the wild. c) A vulnerability that was discovered today and has not yet been patched. d) A vulnerability that affects zero devices on the network.
     304 + 
     305 +#### Answer 30:
     306 + 
     307 +c) A vulnerability that was discovered today and has not yet been patched.
     308 + 
Please wait...
Page is in error, reload to recover