Interview questions / Cyber Security Analyst
Cyber Security Analyst interview questions
These are questions Cyber Security Analyst candidates often hear, with a short note on what a strong answer covers. Reading them helps; saying your answers out loud helps more.
Walk me through how you'd respond to a suspected phishing compromise.
Contain, investigate scope, remove access, notify, and learn. Keep the order clear.
Explain the difference between authentication and authorisation.
Give a one-line definition of each and an example of a bug in each.
What logs would you look at to investigate a suspicious login?
Name identity provider logs, VPN, endpoint and email logs, and what you'd look for.
How would you explain a security risk to a non-technical manager?
Translate it into business impact and a clear ask.
What is the principle of least privilege and how have you applied it?
Give a concrete example of reducing access.
Tell me about a vulnerability you found or fixed.
Use STAR and say how you confirmed the fix.