Deloitte Senior Analyst Interview Questions, Process, and Tips

Communication assessment

Q1. Generic questions
Add your answer

Q1. About relevant past experience
Add your answer
Q2. Tell us something about yourself
Add your answer
Q3. What are your 5 strengths and weakness
Add your answer

Q1. What is the Expected CTC
Ans. 
The Expected CTC is negotiable based on the candidate's experience, skills, and the company's budget.
• Expected CTC depends on the candidate's level of experience and expertise.

• Negotiation skills can play a crucial role in determining the final CTC.

• Researching industry standards and company budget can help in setting a realistic expectation.

• Providing examples of past compensation packages can give a clearer picture of th
Answered by AI
Add your answer

Q1. What are your salary expectations?
Add your answer
Q2. Why are you looking for a change?
Add your answer
Q3. Tell me about yourself.
Add your answer

Q1. Tell us something about your role in the previous organization
Add your answer
Q2. Where do you see yourself in 5 years?
Add your answer
Q3. Where do you see yourself in 5 years
Add your answer

Q1. Speaking and communication test
Add your answer

Q1. Find vulnerabilities in a simulated network and prepare a VAPT report.
Ans. 
To find vulnerabilities in a simulated network and prepare a VAPT report.
• Conduct a vulnerability assessment using tools like Nessus, OpenVAS, etc.

• Identify vulnerabilities and their severity levels

• Prepare a detailed report with recommendations for remediation

• Include an executive summary for non-technical stakeholders
Answered by AI
Add your answer

Q1. Diff b/w authorisation and authentication
Ans. 
Authorization is the process of granting access to a resource, while authentication is the process of verifying the identity of a user.
• Authorization determines what a user can do with a resource, while authentication verifies who the user is.

• Authorization is based on permissions and roles, while authentication is based on credentials such as username and password.

• Examples of authorization include granting access to a f...read more
Answered by AI
Add your answer
Q2. Explain following vulnerabilities 1. IDOR 2. Types of XSS 3. SQLi
Ans. 
IDOR is Insecure Direct Object Reference, XSS is Cross-Site Scripting, and SQLi is SQL Injection.
• IDOR occurs when an application allows direct access to internal objects without proper authorization.

• XSS refers to injecting malicious scripts into web pages viewed by other users, compromising their security.

• SQLi is a technique where an attacker inserts malicious SQL code into a query, manipulating the database.

• Example of...read more
Answered by AI
Add your answer
Q3. Practices to prevent SQLi
Ans. 
Practices to prevent SQLi
• Use parameterized queries or prepared statements

• Implement input validation and sanitization

• Apply least privilege principle for database access

• Regularly update and patch database software

• Implement a web application firewall (WAF)

• Perform security testing and code reviews
Answered by AI
Add your answer
Q4. Diff b/w encryption and hashing
Ans. 
Encryption is reversible while hashing is irreversible.
• Encryption is the process of converting plain text into cipher text using an algorithm and a key.

• Hashing is the process of converting plain text into a fixed-length string of characters using a hash function.

• Encryption can be decrypted using a key while hashing cannot be reversed.

• Encryption is used to protect data while hashing is used to verify data integrity.

• Exam...read more
Answered by AI
Add your answer

Q1. Was completely based on my resume and other scenario based questions
Add your answer