Interview Questions.

Question 1. What Is The Chain Of Custody?

Answer :

When preserving tune of information or equipment to be used in prison lawsuits, it desires to stay in a pristine kingdom. Therefore, documenting precisely who has had get entry to to what for how lengthy is important whilst managing this situation. Any compromise within the facts can cause felony troubles for the parties concerned and can cause a mistrial or contempt depending at the state of affairs.

Question 2. What Is The Difference Between A Black Hat And A White Hat?

Answer :

This specific query can lead into a first-rate philosophical debate about freedom of data, and if something is applied in a intentionally damaged manner it isn't definitely breaking into it, and so on and so forth. The one I even have heard the most is the classic Jedi example  equal tools, distinctive ideologies. Personally, with the humans I know that have labored on each sides of the line it comes down to this  the distinction among a Black Hat and a White Hat is who is signing the check.

DHCP Interview Questions
Question three. Why Would You Bring In An Outside Contractor To Check The Security Issues?

Answer :

Much like getting a fresh set of eyes on a trouble, every now and then you have got people that don't need to peer or don?T want to admit to an issue. Bringing in greater help as an audit can truely assist take away issues that your group isn?T capable of clear up on their personal. Granted they will price a small fortune, however they may be splendid at what they do.

Question 4. What Is A Honeypot?

Answer :

Honeypot is fake laptop gadget which behaves like a real gadget and attracts hackers to assault on it. Honeypot is used to discover loop holes in the device and to offer solution for these types of attacks.

Email Marketing Tutorial
Question five. How Much Will The New Export Process For Data Cost?

Answer :

There isn't any additional price to export your data, however, you will want to hold your account lively for the duration of the export.

Email Marketing Interview Questions
Question 6. Why Is It Easier To Break Into A Windows Local Account Than An Ad Account?

Answer :

Windows nearby debts have a high-quality deal of luggage tied to them, going for walks returned a long lengthy manner to hold compatibility for person accounts. If you're a user of passwords longer than 13 characters, you could have visible the message relating to this reality. However, Active Directory debts have a fantastic deal of security tied onto them, not the least of that is that the gadget actually doing the authenticating isn't always the one you are commonly sitting at while you are a normal consumer. Breaking right into a Windows.

Question 7. What Is Ssl And Why Is It Not Enough When It Comes To Encryption?

Answer :

SSL is identity verification, no longer hard facts encryption. It is designed so as to prove that the individual you're speaking to on the opposite cease is who they say they're. SSL and its massive brother TLS are both used nearly anyone on line, however the hassle is due to this it's far a huge target and is specifically attacked via its implementation (The Heartbleed trojan horse as an instance) and its regarded methodology. As a result, SSL may be stripped in certain circumstances, so extra protections for facts-in-transit .

JavaMail API Tutorial Simple Mail Transfer Protocol (SMTP) Interview Questions
Question 8. What Is The Cia Triangle?

Answer :

Confidentiality, Integrity, Availability. As close to a code for Information Security as it's miles possible to get, it's miles the boiled down essence of InfoSec. Confidentiality- preserving information at ease. Integrity- maintaining information intact. Availability- retaining information handy.

Question nine. What Is The Three-way Handshake? How Can It Be Used To Create A Dos Attack?

Answer :

ACK is the acknowledgement of the server again to the consumer, pronouncing that sure I pay attention you, allow's open a connection. SYN/ACK is the final connection, and allows the 2 to talk. The hassle is that this will be used as a totally simple form of Denial of Service Attack. The consumer opens up the SYN connection, the server responds with the SYN/ACK, however then the customer sends every other SYN. The server treats this as a new connection request and keeps the previous connection open.

JavaMail API Interview Questions
Question 10. What Is The Difference Between Information Protection And Information Assurance?

Answer :

Information Protection is simply what it seems like- defensive information thru the use of Encryption, Security software program and other methods designed to preserve it secure. Information Assurance on the other hand deals more with keeping the statistics dependable .RAID configurations, backups, non-repudiation strategies, etc.

Question eleven. What Is Iso 17799?

Answer :

ISO/IEC 17799 is at the beginning published in UK and defines first-class practices for Information Security Management. It has pointers for all agencies small or huge for Information safety.

Mail Server Interview Questions
Question 12. What Is Worse In Firewall Detection, A False Negative Or A False Positive?

Answer :

Far and away is a fake negative. A fake superb is stressful, however without problems dealt with  calling a valid piece of visitors horrific. A fake poor but is a bit of malicious traffic being permit thru without incident  truely bad.

DHCP Interview Questions
Question thirteen. What Is An Easy Way To Configure A Network To Allow Only A Single Computer To Login On A Particular Jack?

Answer :

Sticky ports are one of the community admin's pleasant pals and worst headaches. They assist you to set up your community so that every port on a transfer handiest permits one (or various which you specify) computer to attach on that port with the aid of locking it to a selected MAC address. If any other laptop plugs into that port, the port shuts down and you acquire a call that they can't connect anymore. If you were the one that at the beginning ran all the network connections then this isn't always a big problem.

Question 14. What Is The Difference Between Closed-supply And Open-source? Which Is Better?

Answer :

Open-source but presents the source code as a way to inspect the whole thing it does, in addition to be able to make adjustments your self and recompile the code. Both have arguments for and against them, most must do with audits and responsibility. Closed-supply advocates claim that open-supply reasons troubles due to the fact everybody can see precisely how it works and take advantage of weaknesses within the program. Open-supply counter pronouncing that because closed-source packages don't provide methods to fully take a look at them out.

Question 15. What Is Exfiltration?

Answer :

Exfiltration is just the alternative: getting sensitive data or items out of a vicinity without being discovered. In an surroundings with excessive protection, this will be extremely difficult however no longer not possible. Again we flip to our friends in the faux transport uniforms wandering across the building, and notice that sure there are approaches to get in and out without plenty of troubles.

Email Etiquette Interview Questions
Question sixteen. Explain The Term Dag (statistics Availability Group)?

Answer :

DAG or Data Availability Group is a framework construct is MS Exchange 2013. It is a set of upto 16 mailbox server that hosts a set of databases and affords computerized database level recuperation because of failure of servers of databases.

Question 17. What Are The Types Of Cookies?

Answer :

Types of Cookies are:

Session Cookies : These cookies are brief and closing in that consultation most effective.

Persistent cookies : These cookies stored at the hard disk power and last until its expiry or manually elimination of it. 

Email Handling Interview Questions
Question 18. List The Components Used In Ssl?

Answer :

Secure Sockets Layer protocol or SSL is used to make at ease connection between client and computers.

Below are the issue used in SSL:

SSL Recorded protocol
Handshake protocol
Change Cipher Spec
Encryption algorithms.
Email Marketing Interview Questions
Question 19. How To Judge If A Remote Server Is Running Iis Or Apache?

Answer :

Error messages frequently instances supply away what the server is walking, and typically if the internet site administrator has not installation custom blunders pages for each site, it can provide it away as actually as simply coming into a acknowledged awful deal with. Other instances, just the usage of telnet can be sufficient to peer how it responds.

Question 20. Why Would You Want To Use Ssh From A Windows Pc?

Answer :

SSH (TCP port 22) is a comfortable connection used on many one-of-a-kind structures and dedicated appliances. Routers, Switches, SFTP servers and unsecure programs being tunnelled thru this port all can be used to help harden a connection in opposition to eavesdropping. Despite the reality that maximum instances while you listen about any person SSHing right into a field it involves Linux, the SSH protocol itself is truely implemented on a extensive style of systems  though now not by way of default on most Windows systems. Programs like PuTTY.

Qmail Interview Questions
Question 21. What Do You Think Of Social Networking Sites Such As Facebook And Linkedin In The Context Of Data Security?

Answer :

This is a doozy, and there are an enormous number of reviews for this query. Many assume they're the worst component that ever took place to the sector, while others praise their lifestyles. In the realm of safety, they may be the source of intense data leaks if handled in their default configurations. It is viable to fasten down permissions on social networking sites, however in a few instances this is not sufficient due to the reality that the backend is not sufficiently secured.

Question 22. What Are The Three Ways To Authenticate A Person?

Answer :

Something they realize (password), some thing they have got (token), and something they are (biometrics). Two-thing authentication often times makes use of a password and token setup, even though in a few cases this will be a PIN and thumbprint.

Question 23. What Is Port Scanning?

Answer :

Ports are the point from wherein records goes inside and outside of any device. Scanning of the ports to discover any loop holes in the system are referred to as Port Scanning. There can be some susceptible factors within the device to which hackers can attack and get the important records. These factors have to be identified and averted from any misuse.

Dns Server Interview Questions
Question 24. List The Parameters That Define An Ssl Session State?

Answer :

The parameters that define an SSL consultation country are:

Session identifier
Peer certificates
Compression approach
Cipher spec
Master secret
Is resumable.
Simple Mail Transfer Protocol (SMTP) Interview Questions
Question 25. Describe Network Intrusion Detection System?

Answer :

Network Intrusion Detection System generally referred to as NIDS. It is used for analysis of the passing site visitors at the complete sub-net and to match with the known attacks. If any loop hollow identified then administrator receives an alert. 

Question 26. What Is Meant By Recipient Resolution, Routing Resolution And Content Conversion For Emails?

Answer :

Recipient Resolution: The e-mail address of the recipient is resolved to determine whether or not the recipient has got a mailbox within the Exchange Organization or an outside electronic mail address

Routing Resolution: Once the information concerning the recipient is resolved, the closing vacation spot for the mail is routed, and the subsequent hop are determined

Content Conversion: Once the mail has reached its decided address, the SMTP is converted into readable layout like HTML, rich text layout or plain text .

Microsoft Exchange Server 2013 Interview Questions
Question 27. What Is Data Protection In Transit Vs Data Protection At Rest?

Answer :

When statistics is blanketed at the same time as it is just sitting there in its database or on its tough drive- it could be taken into consideration at relaxation. On the alternative hand, at the same time as it's far going from server to customer it's miles in-transit. Many servers do one or the other- protected SQL databases, VPN connections, etc, but there aren't many that do both in most cases because of the more drain on assets. It is still an awesome practice to do both but, even though it does take a piece longer.

JavaMail API Interview Questions
Question 28. How Will This Affect Detection Rate Performance For Either Malware Or Spam?

Answer :

No trade in overall performance is predicted. Intel Security will maintain to provide assist for the affected products to keep the performance ranges of the malware and spam protection thru the 5 years transition length.

Question 29. How Do You Protect Your Home Wireless Access Point?

Answer :

There are quite a few one of a kind ways to protect a Wireless Access Point: using WPA2, not broadcasting the SSID, and the use of MAC deal with filtering are the maximum famous amongst them. 
There are many other options, however in an ordinary home environment, the ones three are the most important.
By now you've got visible extra than a truthful quantity of issues. You have got a toolkit of frequently used  packages, a standard suite of safety utilities, you are at ease with cleanups.
Sendmail Interview Questions
Question 30. What Are The Most Important Steps You Would Recommend For Securing A New Web Server?

Answer :

Web Server Security:

Update/Patch the web server software
Minimize the server capability  disable extra modules
Delete default records/scripts
Increase logging verboseness
Update Permissions/Ownership of documents
Web Application Security:

Make positive Input Validation is enforced within the code- Security QA testing.

Question 31. Why Does Ingest Need To Cease Prior To Export Starting?

Answer :

Export is largely a photo of your archive. If the contents are continuously being delivered to after the export starts, there might want to be every other differential export after the first export completes as a way to get all the new e mail that turned into archived since the export began. This could emerge as a loop as new records is continually brought, so the first-rate solution is to "freeze" the contents of the archive for the duration of export. This also approach that selective purge and retention purge could be suspended.

Question 32. What's The Difference Between A White Box Test And A Black Box Test?

Answer :

Information given via the man or woman commissioning the take a look at. A White Box test is one wherein the pen trying out crew is given as plenty information as possible regarding the environment, whilst a Black Box take a look at iswell a Black Box. They don't know what's internal.

Question 33. Explain "url Manipulation"?

Answer :

URL manipulation is a kind of attack in which hackers manipulate the website URL to get the crucial facts. The statistics is surpassed inside the parameters inside the question string through HTTP GET technique among consumer and server. Hackers can alter the statistics among these parameters and get the authentication on the servers and steal the essential records.

Mail Server Interview Questions
Question 34. What's The Difference Between Symmetric And Asymmetric Encryption?

Answer :

To boil down an exceedingly complex subject matter into some short words, Symmetric encryption makes use of the same key to encrypt and decrypt, whilst Asymmetric makes use of exclusive keys for encryption and decryption. Symmetric is normally a whole lot quicker, but is difficult to put into effect maximum instances due to the fact that you could ought to transfer the key over an unencrypted channel. Therefore generally an Asymmetric connection might be installed first, then ship creates the Symmetric connection.

Question 35. What Is The Difference Between An Hids (host Intrusion Detection System) And A Nids (community Intrusion Detection System)?

Answer :

Both acronyms are Intrusion Detection Systems, but the first is a Host Intrusion Detection System whereas the second is a Network Intrusion Detection System. An HIDS runs as a historical past software in similar to an anti-virus software for instance, while a Network Intrusion Detection System sniffs packets as they go throughout the network looking for things that aren't pretty regular. Both systems have two fundamental variants: signature primarily based and anomaly based totally.

Question 36. Name The Two Common Techniques Used To Protect A Password File?

Answer :

Two commonplace techniques to defend a password report are- hashed passwords and a salt price or password report get admission to manipulate.

Email Etiquette Interview Questions
Question 37. Why To Do Need To Be Concerned About Our Mail Security?

Answer :

It looks as if we can't pass a number of days anymore without hearing approximately a major breach, which on the surface could make it appear that more people and places are being hacked than ever before (which to be sincere is true). However, it additionally indicates that detection and reporting of assaults is improving in keeping with requirements of each government entities and insurance companies. As a end result, the public and security professionals are each higher knowledgeable as to what they could do to help protect themselves.

Question 38. Why Are Internal Threats Oftentimes More Successful Than External Threats?

Answer :

This method that if you see any person that pokes round each day, month after month, you would possibly get used to the fact that he is just curious. You allow your shield down, and don't react as fast to feasible threats. On the other hand, say for example you have got an aggravated employee that is quickly to be fired and desires to expose his soon to be former company that he can deliver them down, so he sells his still active credentials and card-key to a neighborhood institution that focuses on white-collar crime.

Question 39. What Is The Difference Between A Vulnerability And An Exploit?

Answer :

A lot of people would say that they may be the same element, and in a feel they could be right. However, one is a capability hassle at the same time as the other is an energetic problem. Think of it like this: You have a shed with a damaged lock wherein it won't latch well. In a few areas consisting of important towns, that might be a main hassle that wishes to be resolved right away, even as in others like rural regions its more of a nuisance that may be constant while you get around to it. In each scenarios it'd be a inclined.

Question 40. What Is Soap And Wsdl?

Answer :

SOAP or Simple Object Access Protocol is a XML-based protocol thru which programs alternate statistics over HTTP. XML requests are ship with the aid of net services in SOAP layout then a SOAP consumer sends a SOAP message to the server. The server responds again once more with a SOAP message along with the requested provider.

Email Handling Interview Questions
Question 41. Why Was Proofpoint Selected?

Answer :

Proofpoint is a clear leader in Gartner's Magic Quadrant for Secure Email Gateway. Proofpoint is also a pacesetter in Gartner's Magic Quadrant for Enterprise Information Archiving. Moreover, Proofpoint has merchandise to in shape our e-mail security portfolio (albeit extra function wealthy) and has products that expand to adjoining messaging regions which Intel Security does not have. Further information on the partnership can be forthcoming rapidly.

Question forty two. What Is Ssl Connection And An Ssl Session?

Answer :

SSL or secured socket layer connection is a transient peer-to-peer communications hyperlink wherein every connection is related to one SSL Session.
SSL consultation can be defines as affiliation among client and server commonly crated through handshake protocol. There are set of parameters are described and it could be share with the aid of more than one SSL connections.
Qmail Interview Questions
Question forty three. What Is The Role Of Client Access Server?

Answer :

The Client Access Server gives connectivity to diverse offerings like

Microsoft Office Outlook
Outlook Web App
Mobile devices
POP & SMTP
Accepts mail from grants mail to other mail hosts at the net
Gives unified namespace, network safety and authentication
Handles all consumer requests for Exchange
Routes requests to the precise mailbox server
Allows the use of layer 4 (TCP affinity) routing.
Question 44. How Would You Find Out What A Post Code Means?

Answer :

POST is one of the fine gear to be had whilst a device will not boot. Normally via the use of either show LEDs in more modern structures, or traditionally through audio tones, those precise codes can tell you what the system would not like about its contemporary setup. Because of how rare those occasions can be, unless you are on a tech bench day in and day out, reference materials along with the Motherboard guide and your seek engine of desire may be remarkable assets.

Question 45. What's Better, A Red Team Or A Blue Team, In Penetration Testing Scenarios?

Answer :

In penetration checking out scenarios, a red crew is making an attempt to interrupt in at the same time as a blue group is defending. Red Teams normally are taken into consideration the cooler  of the two, even as the Blue Team is normally the greater difficult. The typical guidelines practice like in any defense recreation: the Blue Team needs to be exact on every occasion, at the same time as the Red Team most effective must be exact once. That's now not totally accurate given the complexities at work in maximum scenarios, however it's near sufficient to provide an explanation for the concept.

Question 46. How Would You Lock Down A Mobile Device?

Answer :

The baseline for these even though might be 3 key elements: An anti-malware software, a remote wipe software, and full-disk encryption. Almost all modern-day cell gadgets irrespective of producer have anti-malware and far off wipe available for them, and only a few structures now do not include full-disk encryption available as an alternative directly in the OS.

Question 47. What Is A Cookie?

Answer :

Cookie is a bit of records received from net server and saved in an internet browser which can be study each time later. Cookie can include password facts, some vehicle fill statistics and if any hackers get these details it can be risky.

Question 48. How To Reset A Password-blanketed Bios Configuration?

Answer :

While BIOS itself has been superseded with the aid of UEFI, maximum structures nonetheless follow the same configuration for how they preserve the settings in storage. Since BIOS itself is a pre-boot gadget, it has its personal storage mechanism for its settings and preferences. In the traditional state of affairs, virtually popping out the CMOS (complementary metal-oxide-semiconductor) battery might be sufficient to have the memory storing those settings lose its electricity supply, and as a end result it'll lose its settings.