Skip to content
AI Security

Interview question · Network Security & Protocols

How do you find out what your organisation exposes to the internet, and keep that list accurate?

Attackers scan the whole internet continuously and know your forgotten test server before you do. The answer is an inventory built from several sources, compared with what is actually listening.

easyNewPreparation tags: Amazon, Google, Palo Alto NetworksUpdated Nov 2026

Attackers scan the whole internet continuously and know your forgotten test server before you do. The answer is an inventory built from several sources, compared with what is actually listening.

Make your first attempt

What would you say before reading the answer?

  1. 01 State the assumptions your answer depends on.
  2. 02 Explain the mechanism and choose a control.
  3. 03 Name a condition that would change your decision.

The worked answer includes an approach, scoring criteria and follow-up questions. Compare the reasoning with your own.

10 answers per topic instead of 5, plus saved progress and bookmarks · costs nothingor unlock all 529 remaining answers · $25

Every worked answer in all 17 topics, every lesson in every course, the full concept curriculum, the complete practice-test bank, and the downloadable security field guides.

6 months · One payment · No auto-renewal

What if · the follow-ups in this answer

The answer works through 6 follow-ups like an interviewer would

After an incident through a forgotten test server, a company realises it does not know what it exposes to the internet.

  1. Where does the inventory start?
  2. How do you discover what exists from outside?
  3. What does every exposed service need?
  4. What deserves priority?
  5. How do you keep it current?
  6. How would you build exposure management?

Each rung has a nudge, a model answer, the principle that carries over and the weak answer to avoid. Premium opens every answer and ladder.

UP NEXT ON YOUR JOURNEY
Next in this trackWith most traffic encrypted, what can network monitoring still detect, and how would you design it?Next in this trackExplain the network stack layer by layer: what lives at each layer, how it is attacked, and which control works there.Next in this trackHow does NAT actually work, how do peers get through it, and why is 'we are behind NAT' not a security control?
DISCUSSION · 0

No comments yet. Share a correction or a different way to answer it.