i
Filter interviews by
Insecure deserialization can occur in various places such as web applications, APIs, and network services.
Web applications that accept user input and deserialize it without proper validation
APIs that deserialize data from external sources without proper security measures
Network services that deserialize data from untrusted sources
To validate a buffer overflow attack, I would analyze the program's memory usage, check for abnormal behavior, and use debugging tools.
Analyze the program's memory usage to identify any unexpected changes or overflows
Check for abnormal behavior such as crashes, unexpected output, or system instability
Use debugging tools like gdb or Valgrind to trace the program's execution and identify the source of the buffer ove...
An SQL query is a command used to interact with databases, allowing data retrieval, insertion, updating, and deletion.
SELECT statement retrieves data from a database. Example: SELECT * FROM employees;
WHERE clause filters records. Example: SELECT * FROM employees WHERE age > 30;
INSERT INTO adds new records. Example: INSERT INTO employees (name, age) VALUES ('John', 28);
UPDATE modifies existing records. Example: ...
VAPT involves identifying vulnerabilities in systems through testing and assessment to enhance security measures.
VAPT stands for Vulnerability Assessment and Penetration Testing.
Vulnerability Assessment identifies weaknesses in systems, while Penetration Testing simulates attacks.
Daily tasks may include scanning networks for vulnerabilities using tools like Nessus or OpenVAS.
Conducting manual testing to exploit vu...
A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
Acts as a barrier between a trusted internal network and untrusted external network
Can be hardware-based or software-based
Filters traffic based on IP addresses, ports, protocols, and other criteria
Examples include Cisco ASA, Palo Alto Networks, and pfSense
Port 443 is used for secure HTTP (HTTPS) communication over the internet.
Port 443 is the default port for HTTPS traffic, which encrypts data using SSL/TLS protocols.
It is commonly used for secure communication between web browsers and servers.
HTTPS ensures that data transmitted over the internet is encrypted and secure.
Many websites, such as online banking and e-commerce sites, use port 443 to protect sensitive in...
Nessus security tool provides vulnerability scanning and assessment capabilities for network security.
Nessus can scan networks for vulnerabilities and provide detailed reports on security issues.
It can identify misconfigurations, missing patches, and potential security threats.
Nessus can prioritize vulnerabilities based on severity to help organizations focus on critical issues first.
Common network protocols and their associated port numbers for TCP, UDP, FTP, HTTPS, and HTTP.
TCP (Transmission Control Protocol) is used for reliable communication, typically on port 80 for HTTP.
UDP (User Datagram Protocol) is used for faster, connectionless communication, often on port 53 for DNS.
FTP (File Transfer Protocol) operates on TCP port 21 for control and port 20 for data transfer.
HTTPS (Hypertext Trans...
PE and IDOR are both vulnerabilities in web applications, but they differ in their nature and impact.
PE (Parameter Tampering) is a vulnerability where an attacker can modify parameters in a request to bypass security controls or gain unauthorized access.
IDOR (Insecure Direct Object Reference) is a vulnerability where an attacker can access or manipulate data by directly referencing an object without proper authori...
Blind SQL Injection is a type of SQL Injection attack where the attacker does not receive any output from the application.
The attacker sends SQL queries to the application and observes the behavior of the application to determine if the query was successful or not.
Blind SQL Injection can be time-based or boolean-based.
Time-based Blind SQL Injection involves sending a query that will cause a delay in the applicatio...
I applied via Naukri.com and was interviewed in Jul 2024. There was 1 interview round.
Insecure deserialization can occur in various places such as web applications, APIs, and network services.
Web applications that accept user input and deserialize it without proper validation
APIs that deserialize data from external sources without proper security measures
Network services that deserialize data from untrusted sources
To validate a buffer overflow attack, I would analyze the program's memory usage, check for abnormal behavior, and use debugging tools.
Analyze the program's memory usage to identify any unexpected changes or overflows
Check for abnormal behavior such as crashes, unexpected output, or system instability
Use debugging tools like gdb or Valgrind to trace the program's execution and identify the source of the buffer overflow
...
I appeared for an interview in Oct 2024, where I was asked the following questions.
Known port numbers are standardized network ports used for specific protocols and services in computer networking.
Port 80: HTTP (Hypertext Transfer Protocol) for web traffic.
Port 443: HTTPS (HTTP Secure) for secure web traffic.
Port 21: FTP (File Transfer Protocol) for file transfers.
Port 22: SSH (Secure Shell) for secure remote login.
Port 25: SMTP (Simple Mail Transfer Protocol) for email sending.
posted on 26 Jul 2024
I applied via Approached by Company and was interviewed in Jan 2024. There were 2 interview rounds.
I am interested in working from the Mumbai location due to the vibrant work culture and opportunities for growth.
Exciting work culture in Mumbai
Opportunities for growth and development
Proximity to key clients and projects
Networking opportunities in a major business hub
Many scenario based questions, and how to handle team, customers and peers
I applied via Recruitment Consulltant and was interviewed in Nov 2023. There were 5 interview rounds.
VAPT involves identifying vulnerabilities in systems through testing and assessment to enhance security measures.
VAPT stands for Vulnerability Assessment and Penetration Testing.
Vulnerability Assessment identifies weaknesses in systems, while Penetration Testing simulates attacks.
Daily tasks may include scanning networks for vulnerabilities using tools like Nessus or OpenVAS.
Conducting manual testing to exploit vulnera...
I applied via Campus Placement and was interviewed in Dec 2023. There were 2 interview rounds.
It was an online mcq test with coding question as well
An SQL query is a command used to interact with databases, allowing data retrieval, insertion, updating, and deletion.
SELECT statement retrieves data from a database. Example: SELECT * FROM employees;
WHERE clause filters records. Example: SELECT * FROM employees WHERE age > 30;
INSERT INTO adds new records. Example: INSERT INTO employees (name, age) VALUES ('John', 28);
UPDATE modifies existing records. Example: UPDAT...
I applied via Naukri.com and was interviewed in Aug 2023. There were 2 interview rounds.
Nessus security tool provides vulnerability scanning and assessment capabilities for network security.
Nessus can scan networks for vulnerabilities and provide detailed reports on security issues.
It can identify misconfigurations, missing patches, and potential security threats.
Nessus can prioritize vulnerabilities based on severity to help organizations focus on critical issues first.
Privilege in Windows and Linux refers to the level of access and control a user or process has over system resources.
Privilege levels in Windows are typically categorized as Administrator, Standard User, and Guest.
In Linux, privilege levels are determined by user accounts and groups, with root being the highest level of privilege.
Windows uses User Account Control (UAC) to manage privileges and prevent unauthorized chan...
Port 443 is used for secure HTTP (HTTPS) communication over the internet.
Port 443 is the default port for HTTPS traffic, which encrypts data using SSL/TLS protocols.
It is commonly used for secure communication between web browsers and servers.
HTTPS ensures that data transmitted over the internet is encrypted and secure.
Many websites, such as online banking and e-commerce sites, use port 443 to protect sensitive informa...
Common network protocols and their associated port numbers for TCP, UDP, FTP, HTTPS, and HTTP.
TCP (Transmission Control Protocol) is used for reliable communication, typically on port 80 for HTTP.
UDP (User Datagram Protocol) is used for faster, connectionless communication, often on port 53 for DNS.
FTP (File Transfer Protocol) operates on TCP port 21 for control and port 20 for data transfer.
HTTPS (Hypertext Transfer P...
A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
Acts as a barrier between a trusted internal network and untrusted external network
Can be hardware-based or software-based
Filters traffic based on IP addresses, ports, protocols, and other criteria
Examples include Cisco ASA, Palo Alto Networks, and pfSense
I appeared for an interview before Jun 2024, where I was asked the following questions.
Organizations are enhancing their security posture through advanced technologies, threat intelligence, and proactive measures.
Increased adoption of Zero Trust architecture, ensuring strict identity verification for every user and device.
Growing use of AI and machine learning for threat detection and response, such as automated anomaly detection.
Emphasis on security awareness training for employees to mitigate human err...
I applied via Approached by Company and was interviewed in Feb 2023. There were 4 interview rounds.
I applied via LinkedIn and was interviewed in Mar 2023. There were 2 interview rounds.
Blind SQL Injection is a type of SQL Injection attack where the attacker does not receive any output from the application.
The attacker sends SQL queries to the application and observes the behavior of the application to determine if the query was successful or not.
Blind SQL Injection can be time-based or boolean-based.
Time-based Blind SQL Injection involves sending a query that will cause a delay in the application's r...
PE and IDOR are both vulnerabilities in web applications, but they differ in their nature and impact.
PE (Parameter Tampering) is a vulnerability where an attacker can modify parameters in a request to bypass security controls or gain unauthorized access.
IDOR (Insecure Direct Object Reference) is a vulnerability where an attacker can access or manipulate data by directly referencing an object without proper authorizatio...
I applied via Naukri.com and was interviewed before Aug 2022. There were 3 interview rounds.
Top trending discussions
The duration of Aujas Cybersecurity-NuSummit company interview process can vary, but typically it takes about less than 2 weeks to complete.
based on 25 interview experiences
Difficulty level
Duration
based on 286 reviews
Rating in categories
8-10 Yrs
Not Disclosed
2-12 Yrs
Not Disclosed
8-10 Yrs
Not Disclosed
Consultant
386
salaries
| ₹4.6 L/yr - ₹18.4 L/yr |
Senior Consultant
262
salaries
| ₹7 L/yr - ₹26.9 L/yr |
Associate Consultant
227
salaries
| ₹2.5 L/yr - ₹10 L/yr |
Security Consultant
123
salaries
| ₹5 L/yr - ₹15 L/yr |
Lead Consultant
87
salaries
| ₹13.9 L/yr - ₹36 L/yr |
ITC Infotech
3i Infotech
Sify Technologies
Microland