https://github.com/LetsDefend/SOC-Interview-Questions https://github.com/Luizfsn/Soc-Interview-Questions-and-Answers https://github.com/abhinavkakku/Cyber_Security_Interview_Questions More on reddit.com

Main question is how to get to an interview in the first place, sigh... More on reddit.com

Have you ever done any scripting or programming? What languages specifically? Have you had any experience in debugging? Have you done much via the Linux terminal? What do each of these commands mean? (mkdir,ls,mv,passwd,grep) What is the difference between an IPS and an IDS? How do you stay up-to-date with cybersecurity news? What is the difference between SHA-256 and AES-256? What is the difference between asymmetric and symmetric encryption? What is the difference between an incident and a problem? Describe the major incident process from your current workplace. Explain the concepts behind Confidentiality, Integrity and Availability. How do organizations get compromised and what the most common vectors of attack? A colleague has just finished deploying a new web-server. What steps would you take to secure it after the initial install? What is defence-in-depth? What does a 'layered' approach to security' mean? What protocols (other than basic communication protocols) would you expect to see on a managed network? (e.g DNS) What services would you expect to run on the following ports (80,443,53,22,21,123). Can you describe the difference between UDP and TCP? (if so what is a TCP handshake?) Can you explain how Kerberos works? What is MAC/IP address? What steps would your web browser have to take in order to resolve google.com? What is the purpose of sub-netting and why is it used? What steps would you take to troubleshoot network connectivity to a remote host? How would you approach a problem you had never seen before? What would you do once the problem had been solved? How does a computer tell the difference between a word document and a music file? Is the process the same for both Windows and Unix? If you’re on a Windows computer and you needed to assign a new IP address, how would you go about doing this if you only had access to command line? How would you go about terminating a non-responsive program in a Windows environment, and is this process the same for Unix? What is a LAN / MAN / WAN / WLAN / WWAN / VLAN? More on reddit.com

I will say that if anyone can answer all of these questions in detail then they’re probably overqualified for a L1 SOC job. More on reddit.com