Interview

CIA Triad

A model for understanding the three core principles of cybersecurity: Confidentiality, Integrity, and Availability.

Confidentiality

Protecting information from unauthorized access.

Integrity

Ensuring the accuracy and trustworthiness of data.

Availability

Guaranteeing that data and systems are accessible when needed.

Defense-in-Depth

A multi-layered approach to security that employs multiple strategies to protect data and resources.

Zero Trust Architecture

A security model requiring strict verification for all users, even those inside the network.

NIST Cybersecurity Framework

Guidelines developed to help organizations manage and reduce cybersecurity risks.

ISO/IEC 27001

International standard for managing information security, defining requirements for an Information Security Management System (ISMS).

OWASP Top 10

A list of the most critical web application security risks published by the Open Web Application Security Project.

Injection

Flaws allowing untrusted data to execute commands or queries, such as SQL injection.

Heuristic Analysis

A method of detecting malware based on common suspicious characteristics rather than specific signatures.

Behavioral Analysis

A monitoring method that flags files as malware if they behave suspiciously on the system.

Sandboxing

Running files in an isolated virtual environment to observe behavior before execution.

SHA-256

A secure hashing algorithm that produces a 256-bit hash value, used for data security and integrity verification.

Get-Service

A PowerShell command that lists all services and their status.

Get-Process

A PowerShell command that shows all running processes on a system.

netstat -ano

A Command Prompt command that displays active network connections and listening ports.

Anomaly Detection in Network Traffic

Machine learning models that analyze network traffic to detect unusual patterns indicating possible attacks.

Phishing Detection

AI algorithms that analyze email patterns to identify potential phishing attempts.

Malware Classification

AI techniques that analyze attributes of malware to categorize and respond to new strains.

Behavioral Biometrics for Authentication

ML models that learn user interaction patterns to verify identity.