Pentest Interview Questions (Junior / Senior / Principal)

[@rafinrahmanchy]

I would like to add some more question *Explain the OWASP Top 10 *How many phases are there in Pentest and what are them? *Black Box, White Box and Grey Box Pentesting *Explain the CIA triad *Differences between Security Engineer, Security Analyst and Security Architecture *Differences between a Red Team and a Blue Team *Difference between Pentester and Red Teamer *What is CVSS? *Difference between CVE and CWE *Difference between Security Testing and Penetration Testing *Which pentest methodology/standard(OWASP, OSSTM, NIST, ISSAF) do you follow? *Difference between attack vector and attack surface *Difference between Penetration Testing and Vulnerability Assessment

[@Hacksplained]

Thank you for adding those :)

[@AmanKumar-tm8id]

@@Hacksplained difference between encryption vs hashing

[@rafinrahmanchy]

@@AmanKumar-tm8id this is not a proper question to ask. Hashing itself is an encryption algorithm.

[@adityaasalkar4487]

do you have list of question relating mobile app security testing for interview?

[@rafinrahmanchy]

@@adityaasalkar4487 study OWASP Mobile Security Testing Guide

[@shravanbhagavatula1042]

some of them asked to me: what is a TCP 3 way handshake? what are the different flags of TCP? You have an email which looks suspicious,how do you determine that it is a phishing mail? what is data exfiltration? once you have the ports and services listed out,where do you go to check out the exploits for that app/service(in Kali linux and outside Kali linux) different types of XSS and differences between them explain any one the OWASP TOP 10 attack in detail

[@Hacksplained]

Those are good ones 👌🏼 Did you get the job?

[@ghaithsaffo]

I'm surprised about how good this video is, it's way too underated, I hesitated to click on the video because of the views, but never mind that. This video is super helpful

[@sajid.muntasir]

Knowing the answer to these questions will immediately boost our confidence in the next interview, Inshallah. I was curious to know if pen testers are required to interact with customers when they work for a pen testing company ? If yes, how often?

[@SuperMuha2]

Great video! Really loved how informative it was. One question though: What’s the best way to exercise with an experienced interviewer to kind of simulate 1-on-1 a real interview? I think this would be a huge help to many people.

[@Hacksplained]

I guess usually you start by attending interviews led by an experienced colleague. See and listen what he's doing and learn from that. We also had an interview training at my company teaching us basic interview behaviour (e. G. Don't use your phone during an interview, don't constantly write sth down,...) There are many YT videos around about general interview training though. You can totally use those for your needs.

[@the-beagle888]

I’m a big fan of your videos, you’re an excelent professional and youtuber. I really like your explanations about web security and pentesting. Thank you a lot 😊

[@hacklearndaily]

Thanks for this video, this make so much sense now after giving my first interview.

[@Hacksplained]

You are welcome 🤙🏼

[@frkangungor]

You are a gift to us. Thanks for everything.

[@Hacksplained]

Thank you very much 😇

[@okami4683]

I've failed to get through several practical interviews - they set up a VM that I remote into, with a faux network and ask me to fill in a worksheet. I have the ability to do those things with time, but they usually only a lot about an hour. You gotta practice this stuff to pass these interviews. So, set up your own lab, or find one online to practice with. After practicing, I went through another interview process. Got through the first with HR, then the second with the IT manager (just asking about situations, terms, etc), and finally, the dreaded practical before an interview with the final hiring manager. This is usually where I screwed up. But after practicing this stuff, I was ready and could complete it all.

[@chrisbitus1328]

What kind of labs did you practice?

[@lIlIllll1]

Great video! I have my first pentesting interview this week im quiet nervous!

[@Hacksplained]

You got this! All the best :) Fingers crossed!!!

[@strongleongch]

Same thing, but mine this day

[@animalmgsavage9346]

Did you get the job ????!!!??

[@pavlisharma6454]

hey can you please tell me about any practicals an interviewer can ask for a junior security tester as a fresher

[@Saw-o3h]

How would technical part of the interview be like? Can you talk about it ?

[@kalendra.ethicalhacker]

I applied for a job as penetration testing , for my online interview , I want to show by bug bounty hunting skills , my hall of fames , how I do testing by screen sharing , is that helpful

[@mosk53]

dude don't giving the answers was a great idea, it helps learning a lot

[@danabakassarina7233]

Hello, What can you say about Amazon interview?

[@Hacksplained]

I don't know. I never had an interview with them. Sorry 🙏

[@Satish_Rayala]

Read the answers as well😁

[@nixcutus]

Great video

[@Hacksplained]

Thanks 😇

[@StefanRows]

Good video!

[@Hacksplained]

Cheers Stefan 🤙🏼🤙🏼

[@linxploit]

Please post the questions in the comment or Description

[@cloufish7790]

Hah, even though I probably can answer every one of Junior questions, its no use in the economic-pandemic crisis, because there's no junior positions... :/

[@Hacksplained]

I wouldn't necessarily say that. Covid brought jobs to the most remote ends of the world as companies start transitioning to more fully remote positions. You will get a job, fingers crossed 🤞🏼

[@trustedsecurity6039]

Even as a junior you need to have at least OSCP, it is better if you have a blog or a github for example, it shows how much you like this field. It is this or knowing people in companies, that's networking.

[@ebothandle1570]

Pls may help me answer the questions

[@GoldnLion]

Where’s the answers

[@andreadistasi8842]

You are not giving answers... 😅😅