Interview Series Top AppSec Job Interview Question 2
AppSec interview questions
How to win job
Penetration testing job interview questions
AppSec job interview questions answer
top 50 cybersecurity interview questions and answers
Check out Interview Series Playlist: • Interview Series
Question: What are some questions you would ask a customer during a web app pentest scoping call?
Answer: Many questions would depend on a demo of the application, however here are a few general ones:
1. How much functionality does the app contain (e.g. no. of "pages")?
2. How complex is the functionality (e.g. any learning curves, lengthy processes, etc.)?
3. How many different roles are there / should be tested?
4. Which environment is being tested (e.g. dev, staging, prod)?
5. Do our accounts have access to test/dummy data?
6. Are there any access restrictions (e.g. VPN, IP block)?
7. Are there any custom protocols being used (e.g. proprietary encoding/encryption)?
8. Is there any rate limiting, WAF/IPS in place?
9. Are there any out of scope areas, or vulnerabilities which should not be tested (e.g. Denial of Service)?
By Tib3rius
#jobinterview #shorts