TCS iON Security Engineer Interview Questions and Answers

Vulnerability management is the practice of identifying, classifying, prioritizing, and mitigating security vulnerabilities in systems and software.

• Identifying vulnerabilities in systems and software

• Classifying vulnerabilities based on severity

• Prioritizing vulnerabilities based on risk level

• Mitigating vulnerabilities through patches or other security measures

SAST stands for Static Application Security Testing and DAST stands for Dynamic Application Security Testing.

• SAST involves analyzing the application's source code for security vulnerabilities before it is compiled and deployed.

• DAST involves testing the application while it is running to identify vulnerabilities from the outside.

• SAST is more focused on finding potential security issues in the code itself, while DAST is ...read more

Threat modelling is a structured approach to identifying and prioritizing potential security threats to a system.

• Involves identifying potential threats to a system

• Prioritizing threats based on likelihood and impact

• Helps in designing appropriate security controls

• Common methodologies include STRIDE and DREAD

• Example: Identifying potential threats to a web application such as SQL injection, cross-site scripting, etc.