Question 1

Explain how virtual memory is implemented using page tables.

Accepted Answer

Page tables map virtual pages to physical frames; include multi-level page tables or inverted page tables to manage memory efficiently. Tests security mindset and practical Operating Systems skills in real scenarios. Senior candidates must understand underlying principles beyond tool usage. Evaluate ability to analyze risk and propose preventive measures. Ask about real incident handling to distinguish theoretical knowledge from hands-on experience.

Question 2

How to handle very large capture files efficiently?

Accepted Answer

Use ring buffers, capture file splitting, and filter during capture; use command-line tools for slicing. Tests security mindset and practical Wireshark skills in real scenarios. Senior candidates must understand underlying principles beyond tool usage. Evaluate ability to analyze risk and propose preventive measures. Ask about real incident handling to distinguish theoretical knowledge from hands-on experience.

Question 3

How is credential harvesting handled responsibly?

Accepted Answer

Collect proof-of-concept artifacts, report hashed/cleartext findings, and avoid exfiltrating sensitive user data. Tests security mindset and practical Metasploit skills in real scenarios. Senior candidates must understand underlying principles beyond tool usage. Evaluate ability to analyze risk and propose preventive measures. Ask about real incident handling to distinguish theoretical knowledge from hands-on experience.

Question 4

How to decrypt HTTPS when using RSA key?

Accepted Answer

Provide server private key in Preferences → Protocols → TLS for RSA key exchange (limited to non-ECDHE). Tests security mindset and practical Wireshark skills in real scenarios. Senior candidates must understand underlying principles beyond tool usage. Evaluate ability to analyze risk and propose preventive measures. Ask about real incident handling to distinguish theoretical knowledge from hands-on experience.

Question 5

How to optimize Burp performance when scanning large applications?

Accepted Answer

Segment scan scope, tune scan speed, and use distributed/enterprise scanning where available. Tests security mindset and practical Burp Suite skills in real scenarios. Senior candidates must understand underlying principles beyond tool usage. Evaluate ability to analyze risk and propose preventive measures. Ask about real incident handling to distinguish theoretical knowledge from hands-on experience.

Question 6

Explain how TCP flow control works (sliding window).

Accepted Answer

TCP uses a window size advertised by receiver; sender can send only that much unacknowledged data; window changes dynamically. Tests security mindset and practical Networking Fundamentals skills in real scenarios. Senior candidates must understand underlying principles beyond tool usage. Evaluate ability to analyze risk and propose preventive measures. Ask about real incident handling to distinguish theoretical knowledge from hands-on experience.

Question 7

How does Burp detect SSRF vulnerabilities?

Accepted Answer

By injecting external URLs/payloads and monitoring out-of-band collaborator callbacks or server behavior. Tests security mindset and practical Burp Suite skills in real scenarios. Senior candidates must understand underlying principles beyond tool usage. Evaluate ability to analyze risk and propose preventive measures. Ask about real incident handling to distinguish theoretical knowledge from hands-on experience.

Question 8

Explain the working of Diffie-Hellman key exchange.

Accepted Answer

Two parties exchange values derived from a large prime and generate a shared secret. Tests security mindset and practical Encryption skills in real scenarios. Senior candidates must understand underlying principles beyond tool usage. Evaluate ability to analyze risk and propose preventive measures. Ask about real incident handling to distinguish theoretical knowledge from hands-on experience.

Question 9

Explain the concept of secure multi-party computation.

Accepted Answer

Allows multiple parties to compute a function jointly without revealing private inputs. Tests security mindset and practical Encryption skills in real scenarios. Senior candidates must understand underlying principles beyond tool usage. Evaluate ability to analyze risk and propose preventive measures. Ask about real incident handling to distinguish theoretical knowledge from hands-on experience.