IT SECURITY INTERVIEWS
CONTENTS CHAPTER 1: FINDING, INTERVIEWING FOR, AND GETTING THE JOB QUALIFICATIONS PURSUING A DEGREE THE PERFECT JOB THE INTANGIBLE BENEFITS THE TANGIBLE BENEFITS JOB SEARCH THE RÉSUMÉ COMPANY RECRUITERS PROFESSIONAL NETWORKING HEADHUNTERS TOOLS INTERVIEWING WHAT EMPLOYERS WANT PHONE INTERVIEWS ON-SITE INTERVIEWS MONEY TALKS COST OF LIVING RELOCATING ACCEPTING OR REJECTING THE OFFER SUMMARY NONTECHNICAL INTERVIEW QUESTIONS CHAPTER 2: KNOWING NETWORKS: FUNDAMENTALS INTRODUCTION QUESTIONS WHAT IS THE OSI MODEL? WHAT IS THE TCP/IP MODEL AND HOW DOES IT RELATE TO THE OSI MODEL? TELL ME ABOUT CISCO’S “STANDARD” ARCHITECTURE HOW DOES THE CONCEPT OF DEFENSE-IN-DEPTH SECURITY WORK WITH THE OSI MODEL? WHY DO WE THINK OF NETWORKING IN TERMS OF LAYERS? HOW DOES THE SPANNING TREE PROTOCOL WORK, WHAT IS ITS PURPOSE, AND WHAT ARE SOME OF THE TYPES? WHAT IS THE DIFFERENCE BETWEEN A BROADCAST DOMAIN AND A COLLISION DOMAIN? EXPLAIN HOW PORT SECURITY WORKS ON A SWITCH EXPLAIN THE TCP THREE-WAY HANDSHAKE AND RELATE IT TO THE TCP STATE DIAGRAM BRIEFLY DESCRIBE THE TCP AND UDP PACKET HEADERS WHAT WELL-KNOWN PORT NUMBERS ARE YOU FAMILIAR WITH? WHAT IS THE DIFFERENCE BETWEEN CLASSFUL AND CLASSLESS ROUTING? DESCRIBE VARIABLE-LENGTH SUBNET MASKING (VLSM) WHAT IS THE DIFFERENCE BETWEEN A ROUTED PROTOCOL AND A ROUTING PROTOCOL? DRAW THE DIAGRAM OF A TYPICAL OSPF NETWORK AND EXPLAIN GENERALLY HOW IT WORKS: DR, BDR, ELECTION, ASBR, ABR, ROUTE REDISTRIBUTION, AND SUMMARIZATION EXPLAIN BGP, THE DIFFERENCES BETWEEN BGP AND OSPF, WHAT PREFIXES ARE, AND WHAT ATTRIBUTES AND TYPES ARE USED IN BGP DESCRIBE ROUTING FILTERS AND WHAT THEY ACCOMPLISH RECOMMENDED READING CHAPTER 3: KNOWING SECURITY: FUNDAMENTALS ADJUST YOUR THINKING CORE VALUES ACCESS CONTROL DEALING WITH THE CIA ADDITIONAL CORE VALUES BASIC CONCEPTS DEFENSE IN DEPTH LAYERED DEFENSE MANAGING RISK THREAT IMPACT VULNERABILITIES LIMITING RISK DATA CLASSIFICATION AND LABELING DATA CLASSIFICATION DATA LABELING ETHICS IN INFORMATION SECURITY THE HACK BACK REACTING TO AN INCIDENT COMMUNICATION AND KNOWLEDGE TRANSFER MANAGERS USERS TRAINING DOCUMENTATION DAILY SECURITY RESPONSIBILITIES PATCHES AND HOT FIXES BACKUP AND RESTORE VIRUS PROTECTION PERIMETER SECURITY INTERVIEW Q&A CHAPTER 4: UNDERSTANDING REGULATIONS, LEGISLATION, AND GUIDANCE REGULATIONS, LEGISLATION, AND GUIDANCE DEFINED WHY DOES AN EMPLOYER CARE? THEY HAVE TO CARE THEY WANT TO CARE WHY SHOULD YOU CARE? GOVERNMENT- AND DOD-SPECIFIC INFORMATION UNITED STATES GOVERNMENT INFORMATION SECURITY DEPARTMENT OF DEFENSE AND NATIONAL SECURITY SYSTEMS COMMERCIAL INFORMATION SECURITY STATE-SPECIFIC CYBER SECURITY LAWS NATIONAL INFRASTRUCTURE PROTECTION INTERNATIONAL STANDARDS PUBLIC COMPANIES USING THIS INFORMATION IN THE INTERVIEW CHAPTER 5: KNOWING FIREWALLS: FUNDAMENTALS FIREWALL TECHNOLOGIES PACKET FILTER STATEFUL FIREWALL APPLICATION PROXY UNIFIED THREAT MANAGEMENT INTRUSION PROTECTION SYSTEM NETWORK ADDRESS TRANSLATION VIRTUAL PRIVATE NETWORKS MAJOR VENDORS CISCO JUNIPER NETWORKS CHECK POINT OTHER VENDORS DEVICE TYPES APPLIANCE SECURE ROUTER SERVER BASED MANAGEMENT CONFIGURATION COMPONENTS STAND-ALONE DISTRIBUTED GLOBAL MANAGEMENT DEPLOYMENT STRATEGIES BASIC DEPLOYMENT DMZ HIGH AVAILABILITY CHAPTER 6: KNOWING VIRTUAL PRIVATE NETWORKS GOALS AND ASSUMPTIONS THE CRYPTOGRAPHY OF VPNS SYMMETRIC KEY CRYPTOGRAPHY ASYMMETRIC CRYPTOGRAPHY HASH FUNCTIONS MESSAGE AUTHENTICATION CODES IP SECURITY REVIEW SECURITY PROTOCOLS AND MODES KEY MANAGEMENT WITH IKE SHORING UP THE TUNNEL BEST PRACTICE COMPLEXITY TRAP IMPLEMENTING IPSEC DESIGN CONSIDERATIONS DESIGN SCENARIOS ALTERNATIVES TO IPSEC TRANSPORT LAYER SECURITY (TLS/SSL) CHAPTER 7: KNOWING IDS/IPS/IDP EXPLAIN THE TYPES OF IDS AND IDP SYSTEMS AND PROVIDE SOME EXAMPLES OF EACH WHAT IS DEEP INSPECTION AND WHAT IS THE BENEFIT? WHAT ARE THE DIFFERENT MODES THAT A SENSOR CAN OPERATE IN? WHAT ARE THE LAYERS OF THE OSI REFERENCE MODEL AND WHERE DO IDP SYSTEMS OPERATE? HOW DOES AN IDS/IDP SYSTEM DETECT ATTACKS? WHAT ARE SOME OF THE PROBLEMS WITH AN IDP SYSTEM? WHAT IS A FALSE POSITIVE? WHAT IS A FALSE NEGATIVE? WHAT ARE SOME OF THE CHALLENGES YOU HAVE FACED WHEN LOOKING INTO IDP SYSTEMS? WHAT CAN YOU TELL ME ABOUT DIFFERENT ATTACK CATEGORIES? WHEN WOULD A TCP HOST SWEEP BE CONSIDERED AN ATTACK? WHAT IS THE DIFFERENCE BETWEEN A WORM AND A TROJAN HORSE? WHAT CAN YOU TELL ME ABOUT THE BACK ORIFICE TROJAN HORSE EXPLOIT? WHAT CAN YOU TELL ME ABOUT BOT EXPLOITS? WHAT CAN YOU TELL ME ABOUT BUFFER OVERFLOW EXPLOITS? EXPLAIN EVENT CORRELATION DEMONSTRATE HOW WELL YOU KNOW THE WIRESHARK (AKA ETHEREAL) ANALYZER AND USE IT TO DECOMPOSE AN ATTACK WHAT INTRUSION DETECTION AND PREVENTION PRODUCTS DO YOU HAVE EXPERIENCE WITH? WHERE IS THE PROPER PLACE TO DEPLOY AN IPS? MENTION THE PROS AND CONS OF YOUR CHOICE(S) HOW WELL DO YOU KNOW SNORT RULES? HOW WELL DO YOU KNOW SNORT CONFIGURATIONS? WHAT QUESTIONS DO YOU WANT TO ASK ME? CHAPTER 8: EVERYTHING YOU EVER WANTED TO KNOW ABOUT WIRELESS BUT WERE AFRAID THEY’D ASK THE FUNDAMENTALS WHAT DO ALL THESE LETTERS MEAN? IEEE AND THE WIFI ALLIANCE A BRIEF HISTORY OF WIRELESS SECURITY WIRELESS CARDS AND CHIPSETS PRISM (2, 25, AND 3) HERMES ATHEROS BROADCOM AIRONET INTEL WIRELESS DRIVERS FOR LINUX MADWIFI IPW VARIANTS WLAN-NG HOSTAP WLAN DETECTION (WARDRIVING) WARDRIVING TOOLS ACCESS POINTS VERSUS CLIENTS USING WARDRIVE DATA TO COMPROMISE NETWORKS WIRELESS SECURITY WIRED EQUIVALENT PRIVACY (WEP) WIFI PROTECTED ACCESS (WPA) ROGUE WIRELESS DEVICES WHAT IS A ROGUE ACCESS POINT? WHAT IS A ROGUE CLIENT? HOW DO YOU DETECT A ROGUE WIRELESS DEVICE? HOW CAN YOU BECOME A ROGUE ACCESS POINT? CHAPTER 9: FINDING YOUR POSTURE HISTORY OF INFORMATION SECURITY MODERN INFORMATION SECURITY SECURITY OBJECTIVES DETERMINING THE SECURITY POSTURE RISK ASSESSMENTS VULNERABILITY ASSESSMENTS THREAT ASSESSMENTS AUDITS SELF-ASSESSMENTS PRIORITIZING THE VULNERABILITIES DEVELOPING A MITIGATION ROADMAP RESOURCE ALLOCATION FOR THE ROADMAP VULNERABILITY MANAGEMENT PATCH MANAGEMENT IS A START TRACKING PROGRESS COST AVOIDANCE VERSUS RETURN ON INVESTMENT CHAPTER 10: TOOLS ENUMERATION, PORT SCANNING, AND BANNER GRABBING SUPERSCAN NMAP SNMP SCANNING SNSCAN NET-SNMP SOLARWINDS WIRELESS ENUMERATION KISMET KISMAC AIRMAGNET VULNERABILITY SCANNING NESSUS SAINT IBM INTERNET SCANNER SOFTWARE (ISS) EEYE RETINA NETWORK SECURITY SCANNER HOST EVALUATION CIS SCRIPTS BASTILLE MBSA PASSWORD COMPLIANCE TESTING JOHN THE RIPPER CAIN & ABLE NGSSQL CRACK APPLICATION SCANNING WEBINSPECT WIKTO SURU APPDETECTIVEPRO NGSSQUIRREL ORASCAN NETWORK SNIFFING TCPDUMP SNOOP WINDUMP WIRESHARK PENETRATION TESTING ETTERCAP BIDIBLAH METASPLOIT CORE IMPACT CANVAS LEARNING VMWARE PARALLELS VIRTUAL PC CYGWIN ADDITIONAL RESOURCES