Cyber Security Interview Questions You Must Know (Part 2)

[@JonGoodCyber]

Watch my entire playlist on Cyber Security Interview Preparation: kzbin.info/aero/PLErQ2qAXz3rrMDlGQDHFit-behgq3Krtl Here are a few general resources on preparing for interviews: Amazing Interview Answers: amzn.to/36oLh9J

[@benjaminschweizer8764]

This series is really great. I'm a junior level cloud security engineer preparing for some interviews. Ice definitely had some of these or versions of similar types of archetypal questions. Thanks for publishing these.

[@JonGoodCyber]

I'm glad that you enjoyed the video and thank you for sharing!

[@epann2921]

Good and accurate content. I've had several of those questions. SQL injection, brute force, etc.

[@JonGoodCyber]

Thank you for sharing! I definitely see a lot of questions from all of my interview videos showing up.

[@brandhark7935]

Jon you are awesome man. Thank you for making these 2 videos!

[@JonGoodCyber]

Glad you like them! Also, there are actually 3 videos on interview questions (not 2).

[@DailyLifestylesolutions]

Good Information Jon Good. I am new and switching over to IT/CyberSecurity. I found this information/video to be very useful

[@JonGoodCyber]

Glad it was helpful!

[@nishchaymanhas1878]

This was surprisingly easy lol . Thanks

[@JonGoodCyber]

Glad it helped!

[@doriansego6809]

This was brilliant! Thank you, subbed!

[@JonGoodCyber]

Awesome, thank you!

[@cemen777]

Hi Jon. Thank you for your channel! Can you please share tips and possible Q and A for a Sr. IAM Analyst position? I m in IT support role currently and trying to get into IT Security. Appreciate it!

[@JonGoodCyber]

Although at this time I don't have Q&A specifically for IAM roles, certainly the questions that I do have are in-scope. For IAM specifically, it's important to understand account lifecycles, least privilege, onboarding/offboarding just to name a few areas.

[@mateenshaikh694]

Thanks, John for sharing the content it is really valuable from an interview perspective. Can you please explain how to answer any attack scenario during the interview? example Malware complete DFIR road map, how the Incident responder handle it?

[@JonGoodCyber]

I'm glad that you enjoyed the video! I would relate an attack to the Lockheed Martin Cyber Kill Chain ( www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.html ) and the NIST SP 800-61 on Incident Handling ( nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-61r2.pdf ). If you can connect both of those to your response then you definitely understand not only the attack but also the response.

[@JTvlogs984]

I got my CyberSecurity interview today and i'm bricking it !!!!

[@JonGoodCyber]

Awesome and good luck! I'm not sure what you mean by "bricking it?"

[@JTvlogs984]

@@JonGoodCyber British slang soiling my underpants!! Had the interview and shall find out asap,! Will keep you posted! Thanks for the help really appreciate it.

[@marklampo8164]

Make sure you present the "concept" that you can prevent catastrophic losses caused by X, Y, and Z (ransomware, DDOS, legacy hardware and unpatched firmware, tuning to avoid alert fatigue, malware analysis, etc.) with your hands on and troubleshooting experience from your home lab and daily exposure from your News updates and Mentorship Community.

[@JonGoodCyber]

Certainly the more information that you can use to demonstrate your knowledge is usually better. Additionally, if you present a problem then also being able to provide a solution is always a better strategy even if it's not the best strategy it will at least show that you are thinking critically!

[@JTroyHollingsworth]

Hi. Great resource!

[@JonGoodCyber]

Glad it was helpful!

[@xileets]

Watching these to review and prep for interviews. It's funny because I think the must used phrase in my Masters program was, "It depends."

[@JonGoodCyber]

Awesome and I hope that they help! It often does depend because a lot of what we do to secure an organization is based on the situation and might not always be right or wrong.

[@TheRRC86]

John, you videos are way too good, just a piece of advise: please speak slowly. You have some audience that does not speak English fluently (like me) and sometimes is hard to understand your words, other than that, GREAT JOB!!!

[@JonGoodCyber]

I'm glad that you enjoyed the video! It's a challenge to not lose people by going too fast and on the flip side having people disengaged if it's too slow...all while trying to keep the video at a reasonable length! If you have questions feel free to ask them here (or Discord), and also check out my career coaching sessions because I want to make sure that I can help people as much as possible.

[@somcybersecurity7045]

Mitre attacks are my weaknesses but others I have good experience 😍☝️🙏

[@JonGoodCyber]

Awesome!

[@NuclearQuinn]

Hi I know this isn't super relevant to this video but I just came across your channel and wanted to ask for some advice. I have been considering studying cyber security for a few months now. I know some of the basics of it and I am generally decent at most things that involve networking and network security, but I am nervous of the overwhelming amount of info to learn. Is there any thing to start out on and work with to see if I would be interested in the study of cyber security? I don't want to chose a degree that long term won't satisfy me. Thanks for any help from anyone.

[@JonGoodCyber]

First, visit my Getting Started page ( www.jongood.com/getstarted/ ) and grab a free copy of my eBook. I provide a roadmap of skills and certifications that you would want to learn to be successful in Cyber Security. Second, I would search on KZbin for "day in the life of" videos for Cyber Security. This will give you people talking about what they do on a daily basis in their job. Third, look at some of the articles that I have shared ( www.jongood.com/news ) and see if they interest you at all. Fourth, you can try to search KZbin videos on Hack The Box and Try Hack Me because typically hacking is pretty interesting to people brand new to the field. Make sure that you don't get overwhelmed by these videos because it's not representative of most Cyber Security jobs and they are going to be way more technical than where you are at...but again it's kind of fun to see some of the cool stuff that goes on.

[@NuclearQuinn]

@@JonGoodCyber I will definitely look into all of it I just want to say a thank you for spending the time to help me out. It is greatly appreciated.

[@PerezTheDev]

Also, remember to take it one day at a time and have a little fun with it. If you go down one area but eventually don't like it, you still take all of that information with you!

[@rachidmarhoum1486]

a big thanks from Casablanca

[@JonGoodCyber]

You're welcome!

[@STUTOBER]

Hi reading all the publications for all 7 steps of the risk management framework help me know more about tools used?

[@JonGoodCyber]

Tools for what exactly? Specifically for RMF, there are lots of tools depending on which part you're talking about but a lot of GRC platforms like Archer will help manage the overall process. If you get into an industry that requires RMF compliance, they have their own tool but you won't get experience with it unless you're in that industry.

[@STUTOBER]

@@JonGoodCyber Tools like Nessus and Qualys for network scanning. So I just wanted to know in order to understand and use these tools I have to get in to industry first?

[@JonGoodCyber]

Vulnerability scanning tools are not the only types out there but a lot of open source options do exist. I recommend checking out my video on Nessus ( kzbin.info/www/bejne/rmmamJWdhqlnm8k ) because they do have a home version that you can use. A full suite like Qualys won't be cost effective to use at home. Honestly, there are hundreds if not thousands of tools out there but as you progress you'll naturally be exposed to different options through certifications and training courses.

[@STUTOBER]

@@JonGoodCyber thanks

[@cybersandoval85]

Awesome stuff

[@JonGoodCyber]

Glad that you enjoyed the content!

[@TravisChambers-er9qn]

very informative

[@JonGoodCyber]

Glad you think so!

[@ismailch2553]

Please lmk how to take start Because I want to go college but I wanna do this job without paying grants to colleges. Thanks

[@JonGoodCyber]

The best place to start is my Getting Started page ( www.jongood.com/getstarted/ ). That will answer a lot of your initial questions.

[@afiavison]

These are good questions, but can you write those questions here, please?

[@JonGoodCyber]

I'm glad that you enjoyed them. I'm not sure what you are talking about as the questions are already broken down for this video.

[@JCK119]

Thank you.

[@JonGoodCyber]

You're welcome!

[@bunny-cu9ni]

These questions always irk me because they test rouge memorization and not ability to collect and collate information. They act like you need to know everything instead of the truth which is I'm gonna google it real quick so I don't screw up

[@JonGoodCyber]

It's true that there are some things that you're just going to have to memorize because they are foundational pieces of knowledge. Typically, entry level interviews are much heavier in fact-based questions because the candidate has little to no experience to pull from so the answer to any other type of question has little value. As you climb the ladder to higher positions, interviews start to switch into behavioral questions based on your experience. Management level positions have very minimal fact-based questions, if any.

[@JoseRodriguezFrio]

Computers have no loyalty, lol

[@JonGoodCyber]

Whoever holds administrator credentials or system/root access makes the rules!

[@caseyralston2614]

Some of these questions...way too technical based. The fact that cybersecurity is way more then linux, and pen testing or scans and no one talks about the documentation parts is insane. Cookie cutter questions and answers for a SOC or Pen tester type.

[@JonGoodCyber]

You are accurate in that some job interviews will talk about documentation but typically they are based on your actual experience and there are way too many scenarios for me to cover in a single video. The best interviews that discuss documentation will have a practical portion where you are required to write a report or provide written answers to questions but those are outside the scope of this video.

[@asimatahir9272]

🙂

[@JonGoodCyber]

Thank you for watching!

[@southfloridadventure]

Try to speak more clearer. Some of your words are blurry.

[@JonGoodCyber]

Thanks for watching!

[@viral_codes]

I know 80-90% of these questions also good experience in pentesting,i have also found security vulnerabilities in many tech companies like Vodafone, Airtel, leetcode (even in Tesla,nokia,sony but marked as duplicate),still i am not eligible because i don't have 4-6 years of experience 🥲🥲

[@JonGoodCyber]

These questions are absolutely applicable to all areas of Cyber Security! You aren't eligible for what? There is no set requirement for years of experience to get into Cyber Security but if you've already been doing bug bounties, that is real world experience that you can highlight on your resume/cv.

[@viral_codes]

@@JonGoodCyber not eligible to apply for that job,cuz currently i am in my final year of computer science engineering,and don't have 3-6 years of industry experience, and there are very few job openings which doesn't require experience

[@JonGoodCyber]

Never assume that employers will immediately reject you. I tell people to apply to any entry level IT and Cyber Security job that lists 3 years of experience or less and start getting experience with whichever door opens. I coach and help people get into entry level Cyber Security jobs with no experience all the time so it's entirely possible.