CYBER SECURITY - HOW TO INTERVIEW PERFECTLY (2021) | Cybersecurity Interview Questions and Strategy

[@JoshMadakor]

🔒Hands-On Cybersecurity / SOC Analyst Training (REAL EXPERIENCE)🔒 joshmadakor.tech/cyber

[@pjones7707]

I had a zoom screening interview for a cybersecurity position. I watched this video as part of my preparation. The screening interview consisted of the 5 questions you covered. Word for word. Thank you. They invited me for a full interview.

[@destinymccloney1218]

Did you get the job!?

[@Stoneface_]

​@destinymccloney1218 probably not because he hasn't responded yet but hopefully I'm wrong

[@yohangelmorales615]

Hey, did you get the job?

[@CFH298]

Also, here’s what I’ve been doing with the interview questions Josh posted: - Printed out the questions. - Went to a random number generator online and input up to 144 max numbers. - Hit 5-10 random questions per day. If I can’t explain something in layman’s term or stumbled upon a question, I’d try my best to answer by stating “I don’t know...but”. After, I’d research the question and formulate an answer for next time. I’m planning on expanding this by finding more interview questions online specific to the job role I’m going for.

[@JoshMadakor]

Dang I missed this comment. Good work!, that is a great approach with the "can't explain something in layman's terms"

[@DJKadilac]

Possibly the most INFORMATIVE video on KZbin. No ads, no sales pitches, just knowledge! 💯

[@JoshMadakor]

Really appreciate that. thank you :)

[@rreed336]

One of, if not the best cyber interview examples I've seen on KZbin. Appreciate it Josh. SOC interview coming up in a few days.

[@JoshMadakor]

Thanks so much! glad you liked it! hope the interview went well!!!

[@HouseJunk1e]

I love the way you do this. No annoying music in the background. No annoying intro that goes on far too long. Straight to the point! Perfectly/eloquently done and spoken. and you made me laugh. SUBBED! LIKED!

[@JoshMadakor]

Sheeesh, thank you so much for the kind words and feedback. Also thanks a LOT for the sub! I'll put out some more content after I finish my current endeavors lol 😂

[@yaparker22]

One of the best video's where someone post interview questions. This one is the most useful. I interviewed for an ISSO position last year. If I've watched this video prior, I might have that position today.

[@PacoPatron]

I just to listen to many podcasts but the one I always go back to is Security Now with Steve Gibson, great video thanks.

[@JoshMadakor]

Hey Paco! Thanks for watching and thanks for the recommendation!!

[@bernardoandrescartesromero3050]

thank you sir, you deserve a thump up, i have to say that my interview it´s in 3 days, and i have to study hard both my english and about cibersecurity

[@squid13579]

THN , bleeping computer are also great for cyber security related news.🔥👍

[@ianself1594]

MS in Information Assurance… on the money with the info- thank you for being REAL

[@Wokeafricantvs]

I feel blessed being able to understand all you have talked about. Thankful for my bootcamp.

[@jakethundersnake]

I was listening to this while preparing for a Japanese speaking cybersecurity position. When you started speaking Japanese at the end after the credits had rolled it freaked me out lol. Great video still relevant.

[@JoshMadakor]

Lmao, I forget that I used to do that sometimes haha. Thanks for watching that far :P

[@jakethundersnake]

@@JoshMadakor No problem! Had one of those questions come up in the interview after. Still relevant.

[@CFH298]

I’m looking into DoD contracting as a Cybersecurity engineer or an ISSO. Super pumped for this video and I’m glad to see that me talking out loud isn’t crazy!

[@JoshMadakor]

Awesome, good for you! You planning to work overseas? And yeah, the talking out loud to yourself is definitely underrated lol

[@CFH298]

@@JoshMadakor Not at the moment but I have been sent offers for a Cybersecurity specialist working with the RMF, eMASS, ACAS, etc over in Qatar haha! Still stateside as I’m transitioning out of the military though. Just passed the CISSP and treating it as knowledge gained instead of letters after my name, will never let my ego get in the way....and it meets pretty much all DoD 8140/8570 IAT & IAM II/III checkboxes. Also, it would be pretty cool to hear more stories of interviewing candidates and resume reviews from your perspective as an interviewer. Keep up the great work!

[@JoshMadakor]

@@CFH298 Sounds like you have yourself setup pretty good for when you get out. Congrats on CISSP as well. Overseas is really tempting with that OCONUS tax exemption, haha. I'll probably do some resume reviews or something like this in the near future. Thanks for watching :)

[@sandsandeeps]

Just wanted to say a big thanks for sharing the doc! Your video is awesome-tons of valuable stuff in there. Really appreciate it, man!

[@ayodejifewa8292]

Wow Josh you are a blessing. Been following you some months now and you have helped in numerous ways as I transition to Cybersecurity from engineering. Thank you soooooo much. Keep soaring

[@JoshMadakor]

Hey, thank you so much for the kind words, I'm glad the content has been helpful!! Good luck with the transition, sounds like you're gonna have no problem :P

[@ianself1594]

Im trying to do the same , any suggestions- I hold an MS in information assurance

[@jaco1521]

You give really valuable advice. Much appreciated, thank you!

[@ÍrisRodriguesdosSantos-k6t]

I have an interview this afternoon and I'll definitely be applying this knowledge!

[@destinymccloney1218]

Hiiii, how did that interview go?

[@STON3D1_Stonks]

dude you're the best. I watched your video on how to set up a home lab and have been a fan ever since lol keep ascending!

[@JoshMadakor]

Thanks so much, it means a lot! I'm glad it was helpful :)

[@sarjisalazar7731]

Thanks Josh! Been watching all your vids related to Cybersecurity Interview questions to prep for my upcoming interview. Really great content

[@JoshMadakor]

Thanks so much Sarji, I hope you get it!!!

[@C6TTiX]

Another home run! Josh, you continue to set the bar for what all channels should strive for. Your advice is invaluable, and it is a gold mine for those pursuing information technology careers. I hope that you consider teaching one day. Thanks again for sharing and helping build my foundation!

[@JoshMadakor]

Thank you so much, seriously. I really appreciate it and I hope I can keep making good stuff. I actually did teach as an adjunct faculty at a college recently for a couple quarters, but I wasn't /THAT/ big on the content, and it's not really scalable. I hope to release some udemy courses or something one day, or just keep doing youtube--not sure. Thanks so much for watching though, I really do appreciate it.

[@SangNguyen-hh8fs]

Thank you for sharing the security interview questions. Do you have the answer version to these questions that you could share?

[@CodyCookMusic]

You're a god send man

[@rudrachaturvedi3324]

The voice behind OSCP video trainings..

[@abepeterson]

I really think studying while on a walk is a good idea. You get rid of a lot of distractions around you that way.

[@JoshMadakor]

I actually practice interviews like this. It's a good suggestion :)

[@ODailStewartJA]

This Channel is going to blow up I can tell ... Good content keep it up

[@JoshMadakor]

Lol thanks so much :)

[@ODailStewartJA]

@@JoshMadakor No problem ... I’m currently looking to Start the Masters program you did at WGU in May ... your content has been the best motivation to just go for it

[@brianseagers2620]

"You want them to judge you by the content of your character, Not necessarily the color of your Luis Vuitton belt" - Josh Madakor 2021 😆 I second that notion!!

[@cagefighter58]

I noticed at the end you spoke a different language. Very cool! What language if you don't mind me asking. Also thanks for the video applying for jobs rn and getting ready to graduate

[@JoshMadakor]

Haha thanks! The language was actually Japanese lol. I used to say dumb stuff at the end of all of my videos in Japanese :P Good luck with the job hunt and congrats on graduating!

[@nkafupynpoint4254]

Great presentation Josh. I am glad you stumbled on your videos. The insight behind the curtain is a game changer.

[@iuto9185]

Really good insides !! You deserve more likes and visibility than that 😌

[@JavierHernandez-qi5pi]

Awesome Video, helped out a lot!!! Thank you! Also you should start your own podcast.

[@JoshMadakor]

Thanks so much! Glad it was helpful. I thought about it, but I need to drop something else first, lol

[@Jae_hoffa]

Great information

[@adjeleya1787]

Great video, clear and easy to follow. I love your videos because I am learning a lot . Thanks for all you do.

[@JoshMadakor]

Great to hear! I really appreciate the feedback, ad thank you for watching!

[@cryptoidman]

Dude, you absolutely ROCK! What awesome advice given with super clear professional delivery and articulation. Absolute joy to listen to your videos man! Thank you! All the best!

[@JoshMadakor]

Hey Paul, I really appreciate it a lot :(. I'll continue to do my best!

[@ankithakur8838]

Really great tips .. 👍🏻 thank you Josh

[@freddya.1178]

Thank you soo much Josh, for this content and valuable information. I am trying to transition from my audit career into Information Security [cybersecurity] and your insights/knowledge has helped me greatly. Keep up the good works; you are changing lives. I now feel confident to move forward.

[@JoshMadakor]

Thanks so much, I'm really glad the content has been useful and impactful, I'm really glad to hear it! I will definitely upload more once I finish up the current degree!

[@fhacim6568]

Your channel has been really helpful so far, preciate you !

[@JoshMadakor]

Super glad to hear it, thanks so much for watching my stuff!

[@yolandadarricarrere2529]

You are awesome! Great presentation! Kudos!

[@JoshMadakor]

Thank you so much: I really appreciate that!! 😀🥹☺️

[@Cybermonk3y]

Josh, thank you for such a great video along with some tips and sample resumes. Just a thought can you do a video or provide a list of all the cyberattacks that one should know for attending interviews. Like ransomware attacks that should be prepared and any other big cyber attacks. Might be helpful for someone who is starting their career. Thank you and waiting for more videos from you!

[@JoshMadakor]

Hey, thanks for watching. This is a great suggestion for a video. I will add it to my list of Q&As. In the meanwhile, check out OWASP TOP 10. You should probably know all of these attacks before attending interviews. I've been asked about most of these vulnerabilities :)

[@franklinomoaghe1422]

You are just awesome man. What can I say just awesome. Really am learning a lot it’s like live experience and practice all in one. God bless you man. I am truly a fan. I pivoted from an admin career to IT/ Cyber. I can truly say your channel is making it a lot easier. Kudos my brother. I am truly grateful.

[@tjuansmith6793]

Awesome resource bredren

[@JoshMadakor]

Sheesh, thank you!

[@skylarcarter]

Good video great content. The link to the interview questions was boss!

[@JoshMadakor]

Glad you liked it! Hope it helps :)

[@GoldenbestNo.1]

Thank you Josh

[@JoshMadakor]

Ayy, thanks for watching! :)

[@kevinc6316]

Good Information, I can not wait to prepare it.

[@JoshMadakor]

Thanks! I'm glad it was helpful

[@gokhan677]

You are great Guy

[@JoshMadakor]

Lol thanks so much, really appreciate that

[@crash_override9435]

Dang I'm not even first! I'm about to binge watch your entire channel! I'm also a Seattle local. I started in IT for a year in 2007 and never went back (due to recession). Well, my love for tech is only growing stronger. I'm just so apprehensive at which WGU degree to start with.... Go for easy, or go for the best fit. I just don't know! I think dev ops/cyber security would be best fit for interests. Wow has tech changed since setting up Active Directory domains and Exchange servers .. lol. Oh man, so much information to absorb about current state of IT as an Industry.

[@JoshMadakor]

Yooo Hello from a fellow Seattle person. I started part-time in 2007 too! And there is soooooooooooo much stuff to learn it's kind of hard to not get overwhelmed. I kinda just try to stick to whatever interests me these days. Gotta lower that stress. Thanks for watching by the way, much appreciated.

[@takaoda5266]

最後のかわいいw Every morning, I look forward to seeing a new video from you. Have a great day from lockdown Tokyo.

[@JoshMadakor]

Man, thank you haha. I still can't believe people watch these, I really do appreciate it. I try to upload every Monday and Thursday. I'm still pretty new, so it takes awhile haha. Stay safe over there! 日本のコンビニマジで行きたい、気に入ってるスナックはなに？lol

[@takaoda5266]

@@JoshMadakor 気に入ってるスナックはなに？lol > 蒲焼さん太郎。これは日本の宝

[@JoshMadakor]

@@takaoda5266 It looks good! Looks like Unagi sort of. My wife saw me googling this and said she likes it lol

[@notsojoerogan]

Thank you Josh for these videos. I got out of the Marine Corps late last year and have gotten my sec + and Azure fundamentals since then. I'm working on my CISSP (that's how I found you) and I'm super nervous for the interviews I'll start having here shortly. This video specifically is giving me the confidence that I can nail it as long as I put the work in over this next month or so

[@JoshMadakor]

Awesome, and congrats on getting out. Thanks for watching and good luck with your interviews! interviewing and job success is just a function of time and effort so I'm sure you'll make it if you go hard and keep at it. Good luck!

[@myway8950]

I am in the same boat as you, Joe! I am a bit scared. These concepts are very new to me and I am barely able to answer without googling.

[@francisjohn4599]

Thank you so much Josh, this is an amazing video, been following your videos all the way :) thanks

[@konulaslanova2608]

Thank you Josh. It was so helpful.

[@cmzshalom]

thank you for this information 🙌🙏💯

[@JoshMadakor]

Of course!! Thank you for watching!

[@ZERO_TO_IT_HERO]

Great tips!

[@JoshMadakor]

I'm honored man. Thank you 👏 lol

[@kwistoffer9672]

Thanks a lot Josh, this information is very useful!

[@JoshMadakor]

No problems, I'm glad you found it useful! Good luck if you are job hunting!

[@ll_kobee288]

Wow! This is so informative thank you appreciate this!!

[@jamilejbrown8665]

Thank you 🙏🏽 what sites you recommend to use to actually practice

[@hongtrinh5569]

Amazing content! Thank you for all your advice 🙏

[@JoshMadakor]

No problem! thanks so much for watching! I will post some more videos once I finish up my current degree... maybe in a couple months. I'm so tired rn lol.

[@Britt-q1q]

Great information as always, thank you !

[@JoshMadakor]

Thank you so much, and thank you for watching :)

[@rocklife7198]

Amazing Tips

[@learnwithjeel1185]

You are genious

[@tbone7509]

Great Video!!! I was still puzzled on the strict interpretation of CIA's letter A. Isn't Availability closely related to Access Control? It seems similar to CIS; if one says Computer Information Sciences and not Systems does the difference really matter in the general sense?

[@GreenKC]

Thank god I found this video I was going to walk in blind to my interview 😂

[@vinodpudsserichatoth169]

Dear Josh: Thank you very much indeed for the great content. It is clearly evident in the video the amount of efforts you put in and the involvement to deliver such great content. Subscribed, thanks again.

[@JoshMadakor]

Thank you so much for the sub and watching. I appreciate the kind words :). I do try to put some effort so I tend to get tired. I'm taking a break from uploading right now, but I'll try to start again once I finish my BS CS at WGU. Sometimes I wish I was just doing KZbin full time so I could just laser focus 😩. Lol maybe one day. Thanks again!

[@brittanywashington5194]

Would you mind answering interview questions 27, 33, 34, and 37? I don't have professional experience in cybersecurity, but I did get the CompTIA Security+ cert and I've been using online resources to further my training, so I have a basic understanding, I just can't find concrete answers for the aforementioned questions.

[@JoshMadakor]

I'll make a video response to this one day, but I'll give some short answers here, sorry it took so long: 27) Start a chain of custody once you acquire the hard drive. Take a forensic image of the hard drive, but be sure to use a write-blocker to prevent further writes to the disk. Take a hash of the image and store it with the evidence in the evidence locker. Be sure to maintain your chain of custody. (you can look these terms up, there is probably a more rigorous answer out there) 33) This is a long ass answer but I'll do my best to summarize. Identify the organization's critical assets (important data) that need protecting and identify any regulatory compliances that must be met (HIPAA if you're storing health information, PCI if you're processing payment card information). Next, perform a gap analysis; see where you are now, and what you need to implement in order to meet regulatory compliance and/or sufficiently security your stuff. Also look at potential risks to the business and it's assets and calculate the probability of those being realized (google, "how to calculate risk in infosec"). For the people you'd involve, would be all the stakeholders, such as the CIO/CISO, department heads, and asset owners of all the systems in question. In order to decide on mitigation efforts, there are many approaches to this, but one method is to focus on "low-hanging" easy wins, and then work on closing the more difficult gaps once you get your process down. "Closing gaps" might refer to implementing various controls to meet compliance, standing up a securing training program or vulnerability management program. It just depends on what the org needs. 34) Just describe the risk matrix where you measure risk as the product of impact and likelihood. Just google "infosec risk matrix, how to measure risk" and there will be some nice graphs and Explanations of what I'm talking about. 37) For me, it would be implementing a vulnerability management program, where I was required to work with several different departments' managers and technical staff. A) I held several initial meetings with management across the different departments to spread awareness and to let people know what was coming. B) My key tactics included making sure nobody was ever "surprised" by my asks and let people feel like they had a voice to impact the program I was responsible for. I also made my asks for people as easy as possible and was fully transparent with people. C) I had to watch out for unresponsive departments and people who were unwilling to onboard to the program. This was a bit of a mess, but I hope it's helpful for now :)

[@cyberspacemanmike]

I can see nicking him for "access control" but "accessibility" is more valid than the classical "availability" CopmTIA answer. Accessibility is inclusive of availability whereas the converse doesn't hold true. And if the interviewer is holding onto the wrong answers for dogmatic reasons, it's the interviewers that's the problem.

[@Moose185]

How would you answer the question of why do you want to work in cybersecurity? Thanks.

[@dad7101]

Very very good

[@rajdipdeysarkar4553]

Sir please make a video on how to get a job in cybersecurity as a fresher What are the skill and certificates degree

[@JoshMadakor]

I will add this to the list of videos to make :) Thanks for watching!

[@qonib]

Thank you Josh for all these great videos. I have a question about degrees from WGU. Which one do you think is better, Cybersecurity or Cloud computing?

[@JoshMadakor]

Thanks for watching!!! Which do I think is better for what? haha. They are both good but: Cloud Computing is slightly easier: kzbin.info/www/bejne/fna0k3WVmp2Ig6M Cybersecurity is slightly more marketable: kzbin.info/www/bejne/eX7Hhphro5uLb68 (not released yet, 11/21) Hope this helps!

[@qonib]

thank you Josh.

[@eugeneopoku-mensah3433]

Regarding the RCE Vulnerability, do you recommend giving details like how you verify and contain the vulnerability? Can you provide such details

[@levihunter4417]

Hey there I’m 23, I’ve been a forklift driver for most of my work career. I have a friend who wants me to go get a cyber security technology degree at our local community college I’m really just stuck on what to do. I was thinking is I go get my associates, then go through your schooling to get higher schooling. What do you think about that theory ? And knowing that is there anything you would tell your younger self knowing what you know. Thanks for your time.

[@JoshMadakor]

Hey, thanks for watching. Cyber Security is a cool career and can be fun. It's quite a massive field so you kind of have to figure out which area(s) you like, and go for that that. There are a lot of ways to get into the field, but if you are unsure and just want to test things out, community college is a great option if you happen to have the time and money for it. After you start college, you can always re-evaluate what you want to do at any time along the way. Advice to my younger self would be, get as much experience as you can, as soon as you can. You can always generate your own experience, even without a normal job. (For example: kzbin.info/www/bejne/i5LWeYOHZbt1hcU ) I would also tell myself to STICK WITH WHAT YOU LIKE DOING. I kind of "went with the flow" too much and ended up in program management, which I hate. I would rather do technical stuff and be an individual contributor. There are a lot of ways to get into the field, so just keep your mind open keep improving. Also, when you first start, consider expanding your job search to include IT as well, just so you can start getting that experience, then you can work your way into Cyber Sec. I have a few videos on how to get a job in IT and how to interview well, so maybe check those out when you get time. Thanks again for watching, and good luck with college, it sounds fun!

[@levihunter4417]

@@JoshMadakor thanks so much for your help

[@JoshMadakor]

@@levihunter4417 np!

[@LimaFoxtrot_98]

God Madakor

[@JoshMadakor]

Lmao, first time seeing this. Apparently you're the first person to ever say this on the internet, lol. www.google.com/search?q=%22God+Madakor

[@becomeyou7498]

Hi Josh I'm having a interview in this Friday on vulnerability manangent can you please share some more technical questions for me?

[@JoshMadakor]

Hey! I have a whole series of interview questions. Here’s one of the videos, I also think there are more links in the comments section! Cyber Security Interview Questions and Answers | Vulnerability Remediation and Incident Response kzbin.info/www/bejne/mYqco6GhjN9qhMk

[@overproof1460]

Thanks

[@ricardoandresinfantesoto1247]

Thanks Josh, do you know if there are code challenges for cybersecurity roles?

[@Meta-Drew]

DoS your own business - sounds like the "shoot the hostage" of cybersecurity

[@JoshMadakor]

That's really hilarious actually lmao. It's true hahaha

[@kryptonitetakeko5267]

I've been trying to get into cybersecurity for the past 2 years. Got myself into training and courses, but still unable to passed the interview guess i need to stop.

[@shikeemaloney821]

Do a leading step go into networking then jump into cyber

[@JoshMadakor]

Hey! I would highly recommend to start working in "normal" IT first if you aren't already. There are cybersec components of every It job, so once you start working, latch onto those, keep studying, and get a cert or two, then keep applying to security roles :)

[@RealDarkBlade]

Show up in a suit for the interviews...and in the job always with teeturtle tees

[@JoshMadakor]

Lmao haha

[@gilfernando7623]

most interviews are subjective. they really depend on the company. It is good to prepare for an interview, but you just do not know what questions they gonna ask you!

[@JoshMadakor]

Big true here! imo, even if you go in perfect, there is still a "50% chance" (random percentage) that you won't get the job. So I try to do as much as I can to maximize my chances :>

[@gilfernando7623]

@@JoshMadakor I have been to many cybersecurity interviews and i have not yet passed them. Interviews may start with usual questions like tell me about yourself and why do you wanna leave your company, then they start with technical questions not the usual ones that you everyone knows like IDS vs IPS. Also, some companies will interview you twice. First round and second round. You may pass first round and fail on the second one! However, I do not advise anyone to give up. Instead, You should be persistent and believe that you will pass one day!

[@suburbanninja4883]

Can you reformat the spreadsheet? The pictures are covering up the words.

[@JoshMadakor]

Okay, I think I fixed it! Sorry about that. You can also go to "File", then "Save a Copy", then you'll be able to modify it :)

[@suburbanninja4883]

Arigatōgozaimashita 😀@@JoshMadakor

[@Josh-sg3pc]

Hello Josh, my name is also Josh

[@JoshMadakor]

Hello Josh, nice name you've got 😂

[@Chris-uq5qt]

I don't see the questions in the description

[@JoshMadakor]

Oh my gosh, sorry, I deleted them by accident. Thanks for pointing it out :). I added them back, but here you go as well: ▶ Interview Questions: docs.google.com/spreadsheets/d/12CD9GOZG0ib2ElQfUFJPk5KjFqMZiU1ZdXYXcFiNm10/edit?usp=sharing

[@ScullyBrewing]

how would you answer a question you dont know the answer to?

[@JoshMadakor]

Hey Dylan, I'll make a shorts response to this later ^^ So depending on what the question was, if they asked me about “A”, I might say something like “Oh I haven’t had a chance to dive too deeply into ‘A’ yet, but I do know about ‘B’ and ‘C’, which are kind of related.” That’s kind of one way to answer, and another way to answer, is kind of convey that you know how to find the answer. For instance if somebody asks me about Microsoft Group Policy or they ask me about some service in Azure or something I might say something like, “Oh I haven’t really had a chance to dive too deep into that service yet-it is on my list of things to do, but if I were to do something with it, I would definitely go review Microsoft Docs “Getting Started” page and best practices.” Because at least it kind of shows you’re aware of how to learn that knowledge and where to get it if you don’t have it already. It’s infinitely better than saying, “I don’t know!” or not saying anything at all, right? So try to talk about something similar, or if you don’t know at all, just let them know where you’d go to find the information if you had to. But yeah, that was a really good question!

[@ll_kobee288]

🐐🐐

[@JohnJohn-sf1df]

Josh speaking Japanese is cool.

[@TheMoogleee]

Are we all just going to ignore that last bit of the video ?? Tf was that? . Do we have to learn how to speak in Japanese too for cyber security ? 😂

[@JoshMadakor]

Hahahaha, thanks for watching to the end. Hilarious comment lol

[@Ufa-o1t]

He forgot to mention if you not a Oreo or just all our white forget it 😭 another thing 99 percent of people in cyber just ended up there they didn't actually pursue a security career so if you black it's goin to take at least 2 years and 3k applications for one entry level interview 😂

[@FlyRenegade_]

super video, so helpful

[@JoshMadakor]

Glad you liked it!!