CERT-IN Interview Questions and Answers

SQL Injection is a type of cyber attack where malicious SQL statements are inserted into an entry field for execution.

• SQL Injection techniques include Union-based, Boolean-based, Error-based, Time-based, etc.

• Types of SQL Injection include In-band SQL Injection, Inferential SQL Injection, Out-of-band SQL Injection.

• Example: SELECT * FROM users WHERE username = 'admin' OR 1=1; --'

Web application testing involves testing the functionality, usability, security, and performance of a web application.

• Identify the scope of testing based on requirements

• Perform functional testing to ensure all features work as expected

• Conduct usability testing to assess user experience

• Perform security testing to identify vulnerabilities

• Test performance to ensure the application can handle expected load

• Use tools like Se...read more

Various logs such as system logs, application logs, security logs, and network logs should be considered for analysis on a particular server.

• System logs: Contains information about the operating system, hardware, and software components.

• Application logs: Records events and errors related to specific applications running on the server.

• Security logs: Tracks security-related events such as login attempts, access control, ...read more