Ernst & Young Security Analyst 2 Interview Questions and Answers

Q1. Technical questions on build and operations
Add your answer

Q1. Managerial question and communication skills
Add your answer

Asked about Reasoning, English, Computer networks, Database Management system, Electronics

15 min discussion on any topic given on the spot, 1 min for thinking

Q1. What do you know about Cloud Computing?
Ans. 
Cloud computing is the delivery of computing services over the internet, including servers, storage, databases, networking, software, analytics, and intelligence.
• Cloud computing allows users to access and store data and applications on remote servers instead of on their local devices.

• It offers scalability, flexibility, cost-effectiveness, and the ability to access resources from anywhere with an internet connection.

• Exa...read more
Answered by AI
Add your answer
Q2. OOPs concepts and examples
Ans. 
OOPs concepts refer to Object-Oriented Programming principles like inheritance, encapsulation, polymorphism, and abstraction.
• Inheritance: Allows a class to inherit properties and behavior from another class.

• Encapsulation: Bundling data and methods that operate on the data into a single unit.

• Polymorphism: Ability to present the same interface for different data types.

• Abstraction: Hiding the complex implementation detail
Answered by AI
Add your answer
Q3. SQL queries like Joins and Selection
Add your answer

Q1. Risky user investigation and defination
Add your answer
Q2. Mitre attack frame work
Add your answer

Q1. Explain interesting incident you handled
Add your answer
Q2. Log sources - to hunt for threats
Ans. 
Log sources are essential for hunting threats in a network environment.
• Collect logs from network devices such as firewalls, routers, and switches.

• Utilize logs from endpoint security solutions like antivirus and EDR tools.

• Incorporate logs from servers, including authentication logs and system logs.

• Monitor logs from cloud services and applications for any suspicious activities.

• Analyze logs from SIEM solutions to correlat
Answered by AI
Add your answer

They ask questions based on security

Q1. What is injection
Ans. 
Injection is a technique used to introduce code or data into a computer program or system.
• Injection is commonly used in cyber attacks to exploit vulnerabilities in software.

• Types of injection include SQL injection, cross-site scripting (XSS), and command injection.

• Injection attacks can lead to unauthorized access, data theft, and system compromise.
Answered by AI
Add your answer
Q2. Type of injection
Ans. 
SQL injection is a type of injection attack that allows an attacker to execute malicious SQL statements.
• SQL injection involves inserting malicious SQL code into input fields of a web application

• Attackers can manipulate databases, steal data, and even delete or modify records

• Examples include entering ' OR '1'='1' into a login form to bypass authentication
Answered by AI
Add your answer

About a rat that can exfoliate the system and also mirte attack

Assembly language with little python

2 hours, basic dsa questions, cyber security related mcqs

Q1. What is normalization in dbms
Ans. 
Normalization in DBMS is the process of organizing data in a database to reduce redundancy and improve data integrity.
• Normalization involves breaking down a database into smaller, more manageable tables and defining relationships between them.

• It helps in reducing data redundancy by storing data in a structured and organized manner.

• Normalization also helps in improving data integrity by ensuring that data is consistent ...read more
Answered by AI
Add your answer
Q2. Difference between truncate and delete
Ans. 
Truncate is a DDL command that removes all records from a table, while delete is a DML command that removes specific records.
• Truncate is faster than delete as it does not log individual row deletions.

• Truncate resets identity columns, while delete does not.

• Truncate cannot be rolled back, while delete can be rolled back using a transaction.

• Truncate does not fire triggers, while delete does.
Answered by AI
Add your answer
Q3. How will your protect your digital data
Ans. 
I will protect my digital data by implementing strong encryption, regular backups, and strict access controls.
• Implement strong encryption algorithms to secure data in transit and at rest

• Regularly backup data to prevent loss in case of cyber attacks or hardware failures

• Enforce strict access controls by using multi-factor authentication and least privilege principle
Answered by AI
Add your answer
Q4. Some types of cyber attacks
Ans. 
Some types of cyber attacks include phishing, malware, ransomware, DDoS attacks, and social engineering.
• Phishing: fraudulent emails or messages to trick individuals into revealing sensitive information

• Malware: malicious software designed to damage or gain unauthorized access to a computer system

• Ransomware: encrypts files on a victim's system and demands payment for decryption

• DDoS attacks: overwhelming a system with a f...read more
Answered by AI
Add your answer