Netrika Consulting Security Analyst Interview Questions and Answers

The methodology approach for API and web pen test involves identifying vulnerabilities, testing for exploits, and reporting findings.

• Identify the scope of the test and the target systems

• Perform reconnaissance to gather information about the target

• Test for common vulnerabilities such as SQL injection and cross-site scripting

• Test for exploits to determine the impact of vulnerabilities

• Report findings and provide recommend

CSRF tokens are used to prevent unauthorized access to sensitive data or actions on a website.

• CSRF tokens add an extra layer of security to web applications by ensuring that requests are coming from an authenticated user.

• They are generated by the server and included in forms or URLs to verify the authenticity of the request.

• Without CSRF tokens, attackers can use cross-site scripting (XSS) attacks to trick users into un...read more

OWASP vulnerabilities commonly encountered in security analysis

• Injection flaws (SQL, LDAP, OS command, etc.)

• Cross-site scripting (XSS)

• Broken authentication and session management

• Security misconfiguration

• Sensitive data exposure

• Insufficient logging and monitoring

• Using components with known vulnerabilities

• Insecure communication (e.g. lack of encryption)

• Broken access control

• XML External Entities (XXE)