Specialization Track

Cybersecurity & InfoSec Interview Questions & Answers

Application security, penetration testing, cryptography, network defense, and OWASP Top 10 mitigation.

Intermediate 1251 views

Explain SQL Injection (SQLi) vulnerabilities and defense mechanisms (Prepared Statements vs ORM)

SQL Injection (SQLi) is a critical web security vulnerability (OWASP Top 10) where an attacker interferes with database queries by injecting malicious SQL fragments through user input fields. The Vuln...

Verified Model Solution View Full Answer

Easy 0 views

How do authentication, authorization, and accounting differ?

Authentication establishes who or what is making a request. Authorization determines which actions that identity may perform on a particular resource. Accounting records relevant activity for monitori...

Verified Model Solution View Full Answer

Easy 0 views

What is least privilege, and how would you apply it to a database-backed application?

Grant each identity only the permissions needed for its purpose and duration. A web application usually should not connect as a database administrator. Give its runtime account the necessary data oper...

Verified Model Solution View Full Answer

Medium 0 views

Why do parameterized queries prevent SQL injection more reliably than escaping user input?

Parameterized queries send values separately from the SQL statement structure, so a malicious value is interpreted as data rather than executable SQL syntax. Escaping depends on database, encoding, an...

Verified Model Solution View Full Answer

Medium 0 views

How do XSS and CSRF differ, and what controls address each?

Cross-site scripting runs attacker-controlled script in a trusted application’s browser context, often through unsafe rendering. Use context-appropriate output encoding, safe DOM APIs, sanitization fo...

Verified Model Solution View Full Answer

Medium 0 views

A user changes an invoice ID in the URL and sees another customer’s invoice. What failed?

The application has an object-level authorization failure: it accepted an identifier without confirming the requester may access that specific invoice. Query within the authenticated user’s permitted ...

Verified Model Solution View Full Answer

Medium 0 views

What would you do first after discovering an exposed production API key in a public repository?

Treat the key as compromised and promptly revoke or rotate it through the service’s supported process, coordinating dependent services to avoid unnecessary disruption. Review access logs for misuse, i...

Verified Model Solution View Full Answer

Other Categories

Software Engineering & OOP 8 AI & Machine Learning 12 Data Structures & Algorithms 11 IT Staffing & Recruitment 9 JavaScript & Web Technologies 7 Cybersecurity & InfoSec 7 Python Programming 13 Data Science & Analytics 6 Java 18 Full Stack Web Development 13 SQL & Relational Databases 12 Computer Networks & OS 13 Cloud & DevOps Engineering 6 HR Interview 14 Data Science & Machine Learning 6 General 21 .NET 12 C++ and C 18 Networking 11 Windows 11 Unix / Linux 17 Visual Basic 8 Hardware 13 Database 9 Testing 19 Web Development 12 x86 13 Designing 6 Programming 2 Marketing 1 BPO 3 Customer Support 0 Technical Support 1 CCNA 3 Aptitude 1 FAQ 19 Engineering 3 Manufacturing 2 Backend 0

Practice Placement MCQs

Test your aptitude, quantitative reasoning, and core programming skills under timed conditions.

Start Placement Test