Deloitte Solution Advisor Interview Questions, Process, and Tips

DNS protocol is used to translate domain names into IP addresses.

• DNS stands for Domain Name System

• It is responsible for resolving domain names to IP addresses

• DNS uses a hierarchical system of servers to perform this translation

• DNS queries can be cached to improve performance

• Examples of DNS servers include Google DNS and OpenDNS

ICMP does not have a port number.

• ICMP is a protocol that operates at the network layer of the OSI model.

• It is used for error reporting, network congestion control, and other purposes.

• Unlike TCP and UDP, ICMP does not have a port number.

• Instead, it uses message types and codes to communicate information.

Parameterized queries can prevent SQL injection attacks.

• Parameterized queries use placeholders for user input, preventing malicious SQL code injection.

• They are more secure than concatenating user input into SQL statements.

• Example: SELECT * FROM users WHERE username = ? AND password = ?

• The question marks are replaced with user input, preventing SQL injection.

LFI, RFI, and Path Traversal are all types of web application vulnerabilities.

• LFI (Local File Inclusion) is a vulnerability that allows an attacker to include files on a server through the web application.

• RFI (Remote File Inclusion) is a vulnerability that allows an attacker to include files from a remote server through the web application.

• Path Traversal is a vulnerability that allows an attacker to access files outsid...read more

Exploiting a JBoss based application

• Exploit known vulnerabilities in JBoss and its components

• Use brute force attacks to guess weak passwords

• Perform SQL injection attacks to gain access to the database

• Use cross-site scripting (XSS) attacks to inject malicious code

• Exploit misconfigured security settings

• Use social engineering to trick users into revealing sensitive information

• Perform man-in-the-middle attacks to intercept...read more