Filter interviews by
Clear (1)
I applied via Recruitment Consulltant and was interviewed in Aug 2024. There were 3 interview rounds.
IPsec stands for Internet Protocol Security, a protocol suite used to secure Internet Protocol (IP) communications.
IPsec provides authentication, integrity, and confidentiality for data transmitted over a network.
It can be used to create Virtual Private Networks (VPNs) to securely connect remote offices or users.
IPsec operates at the network layer of the OSI model and can be implemented through various protocols such a...
Firewalls are network security systems that monitor and control incoming and outgoing network traffic based on predetermined security rules.
Firewalls act as a barrier between a trusted internal network and untrusted external networks.
They can be hardware-based or software-based.
Firewalls can filter traffic based on IP addresses, ports, protocols, and applications.
Examples of firewalls include Cisco ASA, Palo Alto Netwo
My notice period is currently 2 weeks.
My notice period is 2 weeks
I am required to give a 2-week notice before leaving my current position
I can start a new role after 2 weeks from the date of resignation
Rate your
company
🤫 100% anonymous
How was your last interview experience?
I applied via Recruitment Consulltant and was interviewed before Feb 2023. There was 1 interview round.
Vulnerability management involves identifying, evaluating, and mitigating security vulnerabilities. Vulnerability scanners scan systems for known vulnerabilities. OWASP top 10 lists common web application security risks. SQL injection and XSS are common attack types. MITRE framework provides a structured approach to cybersecurity. Cyber-kill chain outlines the stages of a cyber attack. Malware analysis involves examini...
I applied via Naukri.com and was interviewed before Nov 2020. There were 3 interview rounds.
SQL injection is a code injection technique that attackers use to exploit vulnerabilities in a database-driven application.
SQL injection occurs when an attacker inserts malicious SQL code into a query, allowing them to manipulate or extract data from the database.
It can lead to unauthorized access, data breaches, data manipulation, or even complete system compromise.
To mitigate SQL injection, use parameterized queries ...
OWASP top 10 vulnerabilities are the most critical web application security risks.
Injection flaws (SQL, NoSQL, OS)
Broken authentication and session management
Cross-site scripting (XSS)
Broken access control
Security misconfiguration
Insecure cryptographic storage
Insufficient logging and monitoring
Insecure communication
Using components with known vulnerabilities
Insufficient attack protection
CSRF stands for Cross-Site Request Forgery, a type of attack where a malicious website tricks a user into performing an action on another website without their knowledge or consent.
CSRF attacks exploit the trust that a website has in a user's browser
Attackers can use CSRF to perform actions such as changing a user's password or making unauthorized purchases
Preventing CSRF involves using techniques such as CSRF tokens a
EDR is a proactive approach to threat detection and response, while antivirus is a reactive approach to threat prevention.
EDR focuses on detecting and responding to threats in real-time, while antivirus focuses on preventing known threats from infecting a system.
EDR uses behavioral analysis and machine learning to identify suspicious activity, while antivirus relies on signature-based detection.
EDR provides more detail...
Port numbers for different protocols used in networking.
HTTP - 80
HTTPS - 443
FTP - 20, 21
SSH - 22
SMTP - 25
DNS - 53
POP3 - 110
IMAP - 143
LDAP - 389
RDP - 3389
XSS stands for Cross-Site Scripting. It is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.
XSS attacks can be mitigated by input validation and output encoding.
Input validation involves checking user input for malicious code and rejecting it if found.
Output encoding involves converting special characters to their HTML entity equivalents to prevent ...
Top trending discussions
Visio is a diagramming tool used to create flowcharts, diagrams, and other visual representations of data.
Start by selecting a template or creating a new document
Drag and drop shapes onto the canvas and connect them with lines or arrows
Add text, images, and other elements to enhance the diagram
Use the formatting tools to customize the appearance of the diagram
Save and export the diagram in various formats such as PDF o
I applied via Campus Placement and was interviewed before Oct 2021. There were 2 interview rounds.
Derivatives are financial contracts that derive their value from an underlying asset or security.
Derivatives can be used for hedging or speculation.
Examples include futures, options, swaps, and forwards.
Derivatives can be traded on exchanges or over-the-counter.
Derivatives can be complex and carry significant risk.
Derivatives played a role in the 2008 financial crisis.
Derivatives are financial instruments whose value is derived from an underlying asset or security.
Futures contracts
Options contracts
Swaps
Forwards contracts
Credit derivatives
Interest rate derivatives
Currency derivatives
Commodity derivatives
I applied via Campus Placement and was interviewed in May 2021. There was 1 interview round.
Some of the top questions asked at the Cumulus Systems Information Security Analyst interview -
based on 2 interviews
1 Interview rounds
Anonymously discuss salaries, work culture, and many more
Get Ambitionbox App
based on 1 review
Rating in categories
Software Engineer
52
salaries
| ₹7 L/yr - ₹13.5 L/yr |
Senior Software Engineer
21
salaries
| ₹10.4 L/yr - ₹15.3 L/yr |
Information Security Analyst
16
salaries
| ₹5 L/yr - ₹14.5 L/yr |
QA Engineer
12
salaries
| ₹6 L/yr - ₹12 L/yr |
Associate Software Engineer
11
salaries
| ₹6 L/yr - ₹10.5 L/yr |
Infosys
TCS
Wipro
HCLTech