Security — Interview questions
Access Control Vulnerabilities
Broken authorization at the application layer — IDOR, object- and function-level access control, path traversal, open redirect, business-logic and TOCTOU flaws, multi-tenant isolation.
13 questions
Adversary Techniques
AD/Windows attack techniques framed for defenders — Kerberoasting, AS-REP roasting, Pass-the-Hash/Ticket, Golden/Silver tickets, DCSync, delegation abuse, LLMNR poisoning, C2 and attack-path analysis. Detection and mitigation only.
12 questions
API Security
API-layer risk — the OWASP API Top 10, excessive data exposure, rate limiting, GraphQL introspection/depth abuse, versioning of shadow endpoints, webhook signing and error-handling exposure.
12 questions
AppSec Process & Architecture
Secure SDLC, secure code review, threat modeling, segregation of duties, vulnerability triage and secure architecture design.
24 questions
Authentication & Access Control
Identification vs authentication vs authorization, JWT structure and pitfalls, defending auth flows, account recovery and OTP abuse.
20 questions
Blue Team & Detection
Phishing, indicators of compromise, the cyber kill chain, persistence, lateral movement, credential attacks and privilege escalation.
11 questions
Client-Side Vulnerabilities
Browser-trust vulnerabilities — XSS types, contextual output encoding, CSP, CSRF, CORS, clickjacking, tabnabbing, prototype pollution, postMessage and WebSocket security.
16 questions
Cloud & Kubernetes Security
Kubernetes attack surface and cluster-compromise paths — kube-api access, RBAC, privileged pods, hostPath, anonymous etcd and node-level escalation.
15 questions
Compliance & Privacy
Data classification, GDPR, Russian 152-ФЗ, PCI DSS scope reduction, privacy-by-design, retention/deletion policy and controller-vs-processor duties.
8 questions
Container & Kubernetes Security
Docker and Kubernetes hardening — container escape, root/privileged risk, minimal images, RBAC, NetworkPolicy, Pod Security Standards, secrets, service-account tokens, supply chain, runtime detection and image scanning.
13 questions
Cryptography & TLS
Symmetric vs asymmetric crypto, TLS/HTTPS handshake, certificates and the chain of trust, secure password storage.
21 questions
Detection Engineering
SIEM and detection rules — correlation, essential log sources, MITRE ATT&CK mapping, IOC vs IOA, the pyramid of pain, EDR vs AV, threat intelligence and tuning without blind spots.
13 questions
DevSecOps & Secure Pipelines
SAST/DAST/SCA/IAST, CI/CD hardening, secrets scanning, supply-chain defense, SBOM, IaC scanning, dependency pinning, CVE triage and security quality gates.
14 questions
Incident Response
The IR lifecycle (PICERL) — event vs incident, containment vs monitoring, attack timelines, phishing triage, breach scoping, ransomware playbooks, chain of custody and breach notification.
13 questions
Injection Attacks
Server-side interpreter injection — SQLi variants, NoSQL, OS command, LDAP, XXE, SSTI, ORM misuse, CRLF/header and mass-assignment injection, and the one defense that unifies them.
15 questions
Malware Analysis & Forensics
Static vs dynamic analysis, fileless malware, Windows/Linux persistence artifacts, memory vs disk forensics, sandbox detonation, anti-analysis, process injection and IOC extraction.
11 questions
Mobile Application Security
Mobile app security basics — cleartext traffic via dependencies, screenshot cache leaks, OAuth in WebView, and tamper/root/jailbreak detection.
12 questions
Network Security Fundamentals
OSI model, TCP vs UDP, ICMP, traceroute, port-scanning techniques and network segmentation.
21 questions
OAuth & Federated Identity
OAuth2/OIDC/SAML flows and token security — the authorization-code flow, PKCE, state, redirect_uri validation, id_token, JWT verification, algorithm confusion and SAML signature wrapping.
12 questions
Server-Side Vulnerabilities
Request-processing server flaws — SSRF and DNS rebinding, insecure deserialization, HTTP request smuggling, unsafe file upload, Host-header attacks, web-cache poisoning/deception and file inclusion.
14 questions
Web Application Vulnerabilities
XSS, CSRF, SQL/NoSQL injection, SSRF, SSTI, path traversal, command injection, insecure deserialization and file-upload threats.
17 questions
