SISA Information Security Interview Questions, Process, and Tips

Q1. Complete phishing analysis
Ans. 
Phishing analysis involves examining suspicious emails or websites to identify potential threats.
• Check the sender's email address for any inconsistencies or misspellings

• Look for urgent language or requests for personal information

• Verify the legitimacy of any links by hovering over them before clicking

• Check for poor grammar or spelling errors in the email content

• Report any suspicious emails to the appropriate IT or secu
Answered by AI
Add your answer
Q2. All about malware analysis
Add your answer
Q3. And also mostly they asked on networking topics by firewall and those things
Add your answer

It was easy, anyone can crack it

Q1. Tell me about yourself
Add your answer

Q1. What is CryptoGraphy
Ans. 
Cryptography is the practice of secure communication in the presence of third parties.
• It involves techniques for secure communication and data protection

• Uses mathematical algorithms to encrypt and decrypt data

• Examples include AES, RSA, and SHA

• Cryptography is used in various fields such as finance, military, and healthcare
Answered by AI
Add your answer
Q2. Difference between hashing and encryption
Ans. 
Hashing is a one-way process of converting data into a fixed-length value while encryption is a two-way process of converting data into a coded message.
• Hashing is used for data integrity checks and password storage while encryption is used for secure transmission of data.

• Hashing is irreversible while encryption is reversible.

• Hashing algorithms include MD5, SHA-1, SHA-256 while encryption algorithms include AES, RSA, DE...read more
Answered by AI
Add your answer

Q1. Examples for False Positive identified in SIEM
Ans. 
False positives in SIEM
• Misconfigured rules triggering alerts

• Legitimate traffic being flagged as malicious

• Inaccurate threat intelligence data

• Inadequate correlation rules

• Outdated signatures or patterns
Answered by AI
Add your answer
Q2. Explain cyber kill chain
Ans. 
Cyber kill chain is a framework that describes the stages of a cyber attack.
• It consists of seven stages: reconnaissance, weaponization, delivery, exploitation, installation, command and control, and actions on objectives.

• The goal is to identify and disrupt the attack at an early stage.

• For example, if an attacker is in the reconnaissance stage, organizations can implement measures to detect and prevent the attacker from...read more
Answered by AI
Add your answer