Qseap Infotech Interview Questions and Answers

Basic Login and reasoning questions with some basic networking and CIA model-related questions.

Q1. OWASP Top 10 CIA Model
Ans. 
OWASP Top 10 is a list of common web application vulnerabilities. CIA model is a framework for information security.
• OWASP Top 10 includes vulnerabilities like injection, broken authentication, and cross-site scripting.

• CIA model stands for confidentiality, integrity, and availability.

• It is used to evaluate and improve the security of information systems.

• For example, a company may use the CIA model to ensure that custome...read more
Answered by AI
Add your answer
Q2. Access Control Questions (Privilege Escalation and IDOR) Cookie Attributes Injection
Add your answer
Q3. Threat, Vulnerability and Risk Difference Authentication and Authorization Difference
Ans. 
Threat, vulnerability, and risk are related to security while authentication and authorization are related to access control.
• Threat is a potential danger that can exploit a vulnerability and cause harm.

• Vulnerability is a weakness in a system that can be exploited by a threat.

• Risk is the likelihood of a threat exploiting a vulnerability and the impact it will have.

• Authentication is the process of verifying the identity ...read more
Answered by AI
Add your answer

Q1. Basic Questions like describing yourself and some key points in your resume Strength and weakness
Add your answer

Numerical reasoning and logical reasoning a bit tough however can be clear

Q1. Network protocols and its port number,nmap questions like how to scan ports, firewalls and it's type, vpn,http vs https vs ssl, cia triad, scenario based questions
Add your answer

Q1. They will not ask any questions on this round just confirmation from your side.
Add your answer

Q1. Tell me something about yourself
Add your answer
Q2. Something abou your family
Add your answer
Q3. Why you choose this cyber security field
Add your answer

Maths, reasoning, and it complicated

Q1. Basic knowledge on what qseap is into
Add your answer
Q2. Pen testing and vulnerability assessments
Add your answer

Basic aptitude MCQ questions

Q1. List OWASP TOP 10
Ans. 
OWASP TOP 10 is a list of the top 10 most critical web application security risks.
• Injection

• Broken Authentication

• Sensitive Data Exposure

• XML External Entities (XXE)

• Broken Access Control

• Security Misconfiguration

• Cross-Site Scripting (XSS)

• Insecure Deserialization

• Using Components with Known Vulnerabilities

• Insufficient Logging and Monitoring
Answered by AI
Add your answer
Q2. SQLi in detail with mitigation and scenario
Ans. 
SQL injection (SQLi) is a type of cyber attack where malicious SQL statements are inserted into an entry field to manipulate the database.
• SQLi occurs when an attacker inserts malicious SQL code into a query to manipulate the database.

• Mitigation techniques include using parameterized queries, input validation, and stored procedures.

• Example scenario: Attacker enters ' OR 1=1;--' into a login form to bypass authentication...read more
Answered by AI
Add your answer

There will be two set of papers one is Quantitative aptitude of 15 marks.
Technical aptitude based on cyber security.

Q1. 1.Introduce yourself
Add your answer
Q2. 2.Basic questions of cyber security
Add your answer
Q3. 3.what is port number of https and http
Ans. 
HTTP uses port 80 and HTTPS uses port 443.
• HTTP uses port 80 for communication between web servers and clients.

• HTTPS uses port 443 for secure communication between web servers and clients.

• Port numbers are used to identify specific processes running on a server.

• Other common port numbers include 21 for FTP, 22 for SSH, and 25 for SMTP.
Answered by AI
Add your answer
Q4. 4.what is vulnerability.
Ans. 
A vulnerability is a weakness or flaw in a system that can be exploited by attackers to gain unauthorized access or cause damage.
• Vulnerabilities can exist in software, hardware, or even human behavior.

• Examples of vulnerabilities include unpatched software, weak passwords, and social engineering tactics.

• Vulnerability assessments and penetration testing can help identify and mitigate vulnerabilities.

• Regular updates and p...read more
Answered by AI
Add your answer
Q5. 5.Who is hacker or unauthorised user
Ans. 
A hacker or unauthorized user is someone who gains unauthorized access to a computer system or network.
• Hackers can be individuals or groups with malicious intent or those who seek to expose vulnerabilities in a system for ethical reasons.

• Unauthorized users can also include employees who abuse their access privileges or individuals who accidentally gain access to a system.

• Examples of unauthorized access include phishing...read more
Answered by AI
Add your answer