Lesson 15 — Advanced

Top 50 Cybersecurity Interview Questions

Ye hai wo 50 questions jo cybersecurity mein sabse zyada poochhe jaate hain — interviews, TCS/Infosys rounds aur exams ke liye. Har ka 1-line answer. Inhein padh lo, poore course ka revision ek saath ho jaayega.

⏱ 20 min• Advanced• All lessons

Foundations & CIA (Q1-13)

WHAT

Ye 50 sawaal cybersecurity ke core hain — CIA se lekar incident response aur IT Act tak. Har ka 1-line answer, poore course ka condensed revision.

WHEN

Interview se ek din pehle, exam se raat ko, ya placement drive se pehle — jab bhi fast aur deep revision chahiye.

WHERE

TCS/Infosys/Wipro technical rounds, Security+/CEH mock tests, college viva — sab jagah yahi question pattern ghoomta hai.

Sabse pehle wale questions — har entry-level interview ka gate yahi hai:

Q1. Cybersecurity kya hai?  -> system/data ko unauthorized access se protect
Q2. CIA triad?               -> confidentiality, integrity, availability
Q3. Confidentiality kya?     -> sirf sahi log dekhein (encryption)
Q4. Integrity kya?           -> data badla na ho (hashing/signature)
Q5. Availability kya?        -> jab chahiye tab mile (backup, DoS defense)
Q6. AuthN vs AuthZ?          -> identity (kaun) vs permission (kya)
Q7. Non-repudiation?         -> baad mein mana nahi kar sakte (signature)
Q8. Threat vs vulnerability? -> potential harm vs uski kamzori
Q9. Risk formula?            -> likelihood x impact
Q10. Attack surface?         -> wo points jahan attack ho sakta hai
Q11. Insider threat?         -> andar ka banda (employee/vendor)
Q12. APT?                    -> advanced persistent threat (targeted, chhupa)
Q13. Zero-day?               -> flaw jiska patch abhi nahi tha

Tip: Ye 12+1 interview ke foundation hain. Har ka 1-line answer muh zubaan par — confidence turant badhta hai.

Threats & Malware (Q14-25)

Q14. Malware types?         -> virus, worm, trojan, ransomware, spyware, rootkit
Q15. Virus vs worm?          -> virus=host file, worm=network se khud
Q16. Trojan?                 -> useful dikh kar install hota hai
Q17. Ransomware?             -> data encrypt + ransom; defense = backup
Q18. Spyware vs adware?      -> chupke record vs annoying ads
Q19. Phishing?               -> fake message se credentials churaana
Q20. Smishing / vishing?     -> SMS se / call se phishing
Q21. DoS vs DDoS?            -> ek source vs hazaaron (botnet)
Q22. MITM?                   -> beech mein attacker; defense = TLS/VPN
Q23. SQL injection?          -> input query ka structure badal de
                               defense = parameterized queries
Q24. XSS?                    -> page pe script inject; defense = encoding
Q25. Brute force?            -> password guess trials; defense = rate limit+MFA

Defenses & Tools (Q26-38)

Q26. Symmetric vs asymmetric? -> ek key vs public+private key
Q27. AES kis type ka?          -> symmetric (bulk data)
Q28. RSA kis type ka?          -> asymmetric (key exchange/sign)
Q29. Hashing vs encryption?    -> one-way vs key se reversible
Q30. Passwords kaise store?    -> hash + salt (bcrypt/Argon2)
Q31. Digital signature?        -> hash + private key; verify public se
Q32. Firewall kya hai?         -> rules se traffic allow/block
Q33. IDS vs IPS?               -> detect+alert vs block (inline)
Q34. VPN?                      -> encrypted tunnel (WFH access)
Q35. WEP vs WPA3?              -> WEP broken vs aaj ka strongest
Q36. MFA ke factors?           -> know/have/are (alag category 2+)
Q37. OWASP 2021 ka #1?         -> A01 Broken Access Control
Q38. Nmap / Wireshark?         -> network map / packet analysis

Defense framing: Interview mein har sawaal ka defense wala answer bhi do — sirf attack describe karna kaafi nahi. Example: SQLi batao + parameterized queries bolo.

IR, Law & Practice (Q39-50)

Q39. Incident vs event?       -> incident = impact wala event
Q40. IR phases?               -> prep, identify, contain, eradicate,
                                 recover, lessons learned
Q41. Containment?             -> affected system ko alag karna
Q42. Volatile data?           -> RAM pehle (power jaate hi gaya)
Q43. Chain of custody?         -> evidence ka handling record
Q44. 3-2-1 backup?            -> 3 copies, 2 media, 1 offsite
Q45. IT Act kab?               -> 2000 (amended 2008)
Q46. Section 66C?              -> identity theft (3 saal + 1 lakh)
Q47. Section 66?               -> computer offences (3 saal + 5 lakh)
Q48. Fraud report kahan?       -> 1930 + cybercrime.gov.in
Q49. Ethical hacking?          -> permission lekar vuln dhhoondna
Q50. White vs black hat?       -> authorized/legal vs unauthorized/illegal

Bonus (aajkal poochha jaata hai): "Zero Trust kya hai?" — verify never trust, har access pe check. Aur "AI se phishing?" — voice cloning/Deepfake ke liye extra verification (call cut, second channel se confirm).

Roz 10 questions revise karo — 5 din mein poora set muh zubaan par.
Follow-up ke liye ready raho: "ek example do" har sawaal ke peeche aata hai.
Defense angle: har attack sawaal ke saath fix bhi bolo — interviewer yahi sunna chahta hai.
Bol ke practice karo: aaina ke saamne ya dost ko suna ke — tongue fit hogi.

Exercise

Question: CIA triad ke 3 components comma se likho.

Question: IR ke phases mein attack ko alag karne wala phase ka naam? (containment/eradication)

Question: IT Act kis saal aaya? (sirf number daalo)

Common mistakes

Sirf ratna, concept na samajhna: Ye answers concepts se aate hain. Base clear hai toh ratne ki zarurat nahi — khud bol paoge, follow-up sawaal bhi face kar paoge.
Ek line ka answer de dena: Interview mein thoda detail chahiye. 1 line + ek example = complete answer. Example ke bina answer adhoora lagta hai.
Bol ke practice na karna: Padhne se yaad hoga, bolne se aayega. Aaina ke saamne ya dost ko suna ke practice karo — tongue fit ho jaayega.

Desi example: Interview day checklist

Interview se pehle ye 5 zaroor revise karo — sabse zyada poochhte hain:

1. CIA triad + AuthN/AuthZ farak
2. Virus vs worm vs trojan + ransomware defense
3. Symmetric vs asymmetric + hashing
4. Firewall vs IDS/IPS + OWASP ka naam
5. IR phases + IT Act (66A struck down)
Ye 5 = 80% interview coverage

Exam mapping (TCS / Infosys / Certifications)

TCS NQT: security basics se 5-8Q (CIA, malware, ports, crypto).
Infosys/Wipro: conceptual — explain karna padta hai, ratta kaam nahi aata.
Security+/CEH: isi list ke topics core domains hain.
Trap: definitions exact wording mein poochhi jaati hain — key terms yaad rakho.

Lesson complete?

Course complete! Cybersecurity master kar liya — ab real practice ke liye labs (TryHackMe, CTF) aur certification (Security+/CEH) ki taraf jao. Defence hamesha strong rakho!