TCS Security Analyst Interview Questions, Process, and Tips for Experienced

MITRE ATT&CK is a framework for understanding attacker behavior and tactics.

• MITRE ATT&CK provides a comprehensive list of tactics, techniques, and procedures (TTPs) used by attackers.

• It helps security analysts understand and categorize threats based on real-world observations.

• Security analysts can use MITRE ATT&CK to map out potential attack scenarios and improve defense strategies.

Types of Injection include SQL injection, XSS injection, and command injection.

• SQL injection: attackers insert malicious SQL code into input fields to manipulate the database

• XSS injection: attackers insert malicious scripts into web pages viewed by other users

• Command injection: attackers execute arbitrary commands on a server by manipulating input fields

SQL Injection is a type of cyber attack where malicious SQL code is inserted into input fields to manipulate database queries.

• SQL Injection occurs when attackers input malicious SQL code into input fields, tricking the application into executing unintended SQL commands.

• To prevent SQL Injection, use parameterized queries or prepared statements to sanitize user input.

• Input validation and limiting database permissions can...read more

Answering questions related to nmap, IP addresses, firewall, and ping scan.

• Nmap uses various protocols such as TCP, UDP, ICMP, and ARP.

• Public IP addresses are globally unique and routable on the internet, while private IP addresses are used within a private network and not routable on the internet. Private IP ranges include 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16.

• To check connected devices and open ports, use the...read more