Upload Button Icon Add office photos
Premium Employer

i

This company page is being actively managed by Deloitte Team. If you also belong to the team, you can get access from here

Deloitte Verified Tick

Compare button icon Compare button icon Compare
3.8

based on 17.2k Reviews

Proud winner of ABECA 2024 - AmbitionBox Employee Choice Awards

zig zag pattern zig zag pattern

Filter interviews by

Deloitte Vapt Engineer Interview Questions, Process, and Tips

Updated 9 Aug 2023

Top Deloitte Vapt Engineer Interview Questions and Answers

View all 6 questions

Deloitte Vapt Engineer Interview Experiences

2 interviews found

Interview experience
3
Average
Difficulty level
Moderate
Process Duration
Less than 2 weeks
Result
Selected Selected

I applied via Approached by Company and was interviewed in Jul 2023. There were 3 interview rounds.

Round 1 - Resume Shortlist 
Pro Tip by AmbitionBox:
Keep your resume crisp and to the point. A recruiter looks at your resume for an average of 6 seconds, make sure to leave the best impression.
View all tips
Round 2 - Technical 

(3 Questions)

  • Q1. What are SAST and DAST?
  • Ans. 

    SAST stands for Static Application Security Testing and DAST stands for Dynamic Application Security Testing.

    • SAST involves analyzing the application's source code or binary code for security vulnerabilities without executing the code.

    • DAST involves testing the application while it is running to identify security vulnerabilities by sending malicious input.

    • SAST is typically performed earlier in the development cycle while...

  • Answered by AI
  • Q2. What is Union-based SQL injection?
  • Ans. 

    Union-based SQL injection is a type of attack that allows an attacker to extract information from a database by using the UNION SQL operator.

    • Union-based SQL injection involves injecting a malicious SQL query that uses the UNION operator to combine the results of the original query with the attacker's query.

    • The attacker can use the UNION operator to retrieve data from other tables in the database, potentially accessing ...

  • Answered by AI
  • Q3. What is IDOR, DOM XSS, Nessus working?
  • Ans. 

    IDOR, DOM XSS, and Nessus are common security vulnerabilities and tools used in penetration testing.

    • IDOR stands for Insecure Direct Object Reference, where an attacker can access unauthorized data by manipulating object references.

    • DOM XSS (Cross-Site Scripting) is a type of XSS attack that occurs in the Document Object Model.

    • Nessus is a popular vulnerability scanner used in penetration testing to identify security vuln

  • Answered by AI
Round 3 - HR 

(1 Question)

  • Q1. Salary discussion and details about the previous company

Interview Preparation Tips

Interview preparation tips for other job seekers - be true and honest

Skills evaluated in this interview

Interview experience
4
Good
Difficulty level
Moderate
Process Duration
2-4 weeks
Result
Selected Selected

I applied via LinkedIn and was interviewed in Jan 2023. There were 2 interview rounds.

Round 1 - Resume Shortlist 
Pro Tip by AmbitionBox:
Don’t add your photo or details such as gender, age, and address in your resume. These details do not add any value.
View all tips
Round 2 - Technical 

(3 Questions)

  • Q1. What is XSS attack in security
  • Ans. 

    XSS (Cross-Site Scripting) is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.

    • XSS attacks can be used to steal sensitive information, such as login credentials or personal data.

    • Attackers can also use XSS to hijack user sessions, redirect users to malicious websites, or deface web pages.

    • There are three types of XSS attacks: stored, reflected, and DO...

  • Answered by AI
  • Q2. Can you explain different types of XSS
  • Ans. 

    XSS stands for Cross-Site Scripting. It is a type of security vulnerability that allows attackers to inject malicious scripts into web pages.

    • Reflected XSS: The injected script is embedded in the URL and executed when the victim visits the manipulated link.

    • Stored XSS: The injected script is permanently stored on the target server and executed whenever the vulnerable page is accessed.

    • DOM-based XSS: The vulnerability aris...

  • Answered by AI
  • Q3. Explain how is network VAPT conducted
  • Ans. 

    Network VAPT is conducted by identifying vulnerabilities in the network and testing its security measures.

    • The process involves identifying potential vulnerabilities in the network infrastructure

    • Penetration testing is conducted to simulate attacks and test the effectiveness of security measures

    • Vulnerability assessment is done to identify weaknesses in the network

    • The results are analyzed and recommendations are made to i...

  • Answered by AI

Interview Preparation Tips

Interview preparation tips for other job seekers - VAPT Jobs

Study basics of web application security

Skills evaluated in this interview

Vapt Engineer Interview Questions Asked at Other Companies

asked in Deloitte
Q1. Can you explain different types of XSS
asked in PTC
Q2. 1. Diff Between CSRF and SSRF. 2. Types of XSS 3. DOM 4. XSS 5. I ... read more
asked in Deloitte
Q3. Explain how is network VAPT conducted
asked in Deloitte
Q4. What is IDOR, DOM XSS, Nessus working?
asked in Deloitte
Q5. What is Union-based SQL injection?

Interview questions from similar companies

Interview experience
4
Good
Difficulty level
Moderate
Process Duration
4-6 weeks
Result
Not Selected

I applied via Naukri.com and was interviewed in Dec 2024. There were 2 interview rounds.

Round 1 - One-on-one 

(2 Questions)

  • Q1. How does Django apply migrations to the database?
  • Ans. 

    Django applies migrations to the database using the 'manage.py migrate' command.

    • Django tracks changes to models and generates migration files accordingly.

    • The 'manage.py makemigrations' command creates migration files based on model changes.

    • The 'manage.py migrate' command applies the generated migration files to the database.

    • Migrations help keep the database schema in sync with the changes in Django models.

  • Answered by AI
  • Q2. What is hoisting in javascript?
  • Ans. 

    Hoisting in JavaScript is the behavior where variable and function declarations are moved to the top of their containing scope during the compilation phase.

    • Variable declarations are hoisted to the top of their scope, but not their assignments.

    • Function declarations are fully hoisted, meaning they can be called before they are declared.

    • Hoisting can lead to unexpected behavior if not understood properly.

  • Answered by AI
Round 2 - Assignment 

Create a full stack application in 3 days.

Interview experience
4
Good
Difficulty level
-
Process Duration
-
Result
-
Round 1 - Technical 

(2 Questions)

  • Q1. Difference between inheritance and polymorphism
  • Ans. 

    Inheritance is a way to create a new class using properties and methods of an existing class, while polymorphism allows objects of different classes to be treated as objects of a common superclass.

    • Inheritance allows a class to inherit properties and methods from another class.

    • Polymorphism allows objects of different classes to be treated as objects of a common superclass.

    • Inheritance promotes code reusability and reduce...

  • Answered by AI
  • Q2. Write a code to check anagram or not
  • Ans. 

    Code to check if two strings are anagrams

    • Create a function that takes in two strings as input

    • Convert both strings to lowercase and remove any spaces

    • Sort both strings and compare if they are equal to determine if they are anagrams

  • Answered by AI

Interview Preparation Tips

Interview preparation tips for other job seekers - They asked very basic java questions like difference between inheritance and polyformism.
Asked basic java concepts

Skills evaluated in this interview

Interview experience
4
Good
Difficulty level
-
Process Duration
-
Result
-
Round 1 - Coding Test 

Few basics of java
Dsa question

Round 2 - Technical 

(2 Questions)

  • Q1. Java multithreading questions
  • Q2. Spring boot questions.

Junior Engineer Interview Questions & Answers

WSP user image Prithwindra Sarkar

posted on 30 Oct 2024

Interview experience
5
Excellent
Difficulty level
Moderate
Process Duration
Less than 2 weeks
Result
Not Selected

I applied via Naukri.com and was interviewed in Sep 2024. There were 2 interview rounds.

Round 1 - HR 

(2 Questions)

  • Q1. Tell me about yourself
  • Ans. 

    I am a dedicated and detail-oriented Junior Engineer with a passion for problem-solving and continuous learning.

    • Graduated with a degree in Engineering from XYZ University

    • Completed internships at ABC Company, gaining hands-on experience in project management

    • Proficient in CAD software and technical drawing

  • Answered by AI
  • Q2. Diagram of water treatment
  • Ans. 

    Water treatment involves a series of processes to remove impurities and make water safe for consumption.

    • Water treatment typically involves processes such as coagulation, sedimentation, filtration, and disinfection.

    • Coagulation involves adding chemicals to water to make particles clump together for easier removal.

    • Sedimentation allows the larger particles to settle at the bottom of a tank.

    • Filtration involves passing water...

  • Answered by AI
Round 2 - HR 

(2 Questions)

  • Q1. Personal details
  • Q2. Why you want to join
  • Ans. 

    I want to join because I am passionate about engineering and eager to learn and grow in a dynamic environment.

    • Passionate about engineering

    • Eager to learn and grow

    • Excited about working in a dynamic environment

  • Answered by AI

Interview Preparation Tips

Interview preparation tips for other job seekers - good
Interview experience
3
Average
Difficulty level
Easy
Process Duration
Less than 2 weeks
Result
Selected Selected

I applied via Naukri.com and was interviewed in Feb 2024. There were 3 interview rounds.

Round 1 - Coding Test 

Code test on Codility

Round 2 - Technical 

(2 Questions)

  • Q1. How NodeJs handles concurrency
  • Ans. 

    NodeJs handles concurrency using event-driven, non-blocking I/O model.

    • NodeJs uses event loop to handle multiple requests concurrently.

    • It utilizes asynchronous functions to avoid blocking the main thread.

    • NodeJs supports callbacks, promises, and async/await for managing asynchronous operations.

  • Answered by AI
  • Q2. Event Loop, Single Threaded
Round 3 - Behavioral 

(1 Question)

  • Q1. Your day to day activities, Roles and Responsibilities
Interview experience
5
Excellent
Difficulty level
-
Process Duration
-
Result
-
Round 1 - Coding Test 

Dsa questions like search sort

Interview experience
4
Good
Difficulty level
-
Process Duration
-
Result
-
Round 1 - Technical 

(1 Question)

  • Q1. .net questions, web api
Interview experience
5
Excellent
Difficulty level
Moderate
Process Duration
Less than 2 weeks
Result
Not Selected

I was interviewed in Dec 2023.

Round 1 - Technical 

(2 Questions)

  • Q1. Lifecycle hooks of Angular
  • Ans. 

    Angular lifecycle hooks are methods that allow you to tap into specific points in a component's lifecycle.

    • ngOnChanges: called when an input property changes

    • ngOnInit: called once the component is initialized

    • ngDoCheck: called during every change detection run

    • ngAfterContentInit: called after content (ng-content) has been projected into the component

    • ngAfterContentChecked: called after every check of the projected content

    • ng...

  • Answered by AI
  • Q2. SOLID principles
Round 2 - Technical 

(1 Question)

  • Q1. Questions on SQL
Round 3 - HR 

(1 Question)

  • Q1. Introduction and basic questions

Skills evaluated in this interview

Deloitte Interview FAQs

How many rounds are there in Deloitte Vapt Engineer interview?
Deloitte interview process usually has 2-3 rounds. The most common rounds in the Deloitte interview process are Resume Shortlist, Technical and HR.
What are the top questions asked in Deloitte Vapt Engineer interview?

Some of the top questions asked at the Deloitte Vapt Engineer interview -

  1. Can you explain different types of ...read more
  2. Explain how is network VAPT conduc...read more
  3. What is IDOR, DOM XSS, Nessus worki...read more

Tell us how to improve this page.

Deloitte Vapt Engineer Interview Process

based on 2 interviews

Interview experience

3.5
  
Good
View more

Interview Questions from Similar Companies

TCS Interview Questions
3.7
 • 10.3k Interviews
Accenture Interview Questions
3.9
 • 8.1k Interviews
Capgemini Interview Questions
3.8
 • 4.8k Interviews
IBM Interview Questions
4.0
 • 2.4k Interviews
PwC Interview Questions
3.4
 • 1.4k Interviews
Ernst & Young Interview Questions
3.5
 • 1.1k Interviews
KPMG India Interview Questions
3.5
 • 791 Interviews
ZS Interview Questions
3.4
 • 479 Interviews
BCG Interview Questions
3.8
 • 195 Interviews
View all
Deloitte Vapt Engineer Salary
based on 4 salaries
₹4.3 L/yr - ₹8.5 L/yr
38% more than the average Vapt Engineer Salary in India
View more details
Consultant
33k salaries
unlock blur

₹6.2 L/yr - ₹23 L/yr

Senior Consultant
20.7k salaries
unlock blur

₹11 L/yr - ₹42 L/yr

Analyst
14k salaries
unlock blur

₹3.7 L/yr - ₹12.4 L/yr

Assistant Manager
10k salaries
unlock blur

₹7.8 L/yr - ₹24 L/yr

Manager
7k salaries
unlock blur

₹15.8 L/yr - ₹52 L/yr

Explore more salaries
Compare Deloitte with

Accenture

3.9
Compare

PwC

3.4
Compare

Ernst & Young

3.4
Compare

Cognizant

3.8
Compare
Did you find this page helpful?
Yes No
write
Share an Interview