TCS Cyber Security Associate Interview Questions and Answers

Q1. Owasp top 10 in detail
Ans. 
OWASP Top 10 is a list of the top 10 most critical web application security risks.
• Injection: SQL, NoSQL, OS, LDAP injection

• Broken Authentication: Weak passwords, insecure session management

• Sensitive Data Exposure: Insecure data storage, lack of encryption

• XML External Entities (XXE): Parsing XML input from untrusted sources

• Broken Access Control: Unauthorized access to sensitive functionality

• Security Misconfiguration: De...read more
Answered by AI
Add your answer
Q2. XSs in detail with payloads
Ans. 
XSs (Cross-Site Scripting) is a type of security vulnerability where attackers inject malicious scripts into web pages viewed by other users.
• XSs allows attackers to execute scripts in the victim's browser, potentially stealing sensitive information.

• There are three types of XSs: Stored, Reflected, and DOM-based.

• Preventing XSs involves input validation, output encoding, and using security headers like Content Security Po
Answered by AI
Add your answer

Reasoning ability, Numerical ability and Verbal ability questions were asked in aptitude.

Q1. Technical questions were asked from the Programming languages I mentioned in the Resume.
Add your answer
Q2. Basics in C, C++ and SQL.
Add your answer

Q1. General questions were asked.
Add your answer
Q2. About the firm Why do you wish to join our firm? Where will you see yourself in 5 years? Tell something that is not in the resume about you? Say us a reason why we need to recruit you? What if we recruit ...read more
Add your answer