11How would you secure remote access: a traditional VPN or zero-trust network access? What attacks target each?▼mediumNewGoogleMicrosoftCisco◆ premiumA VPN answers 'are you allowed on the network?'. Zero-trust access asks 'may this user, on this device, reach this application right now?'. The interview tests whether you can explain why the second question is safer.Open full answer →
25Design secure VPN remote access: authentication, split vs full tunnel, DNS leaks, access after connect, and protecting the gateway.▼hardNewPalo Alto NetworksCiscoMicrosoft◆ premiumThe VPN gateway is the one internet-facing system that grants network access to whoever passes its login. Treat it like that and most design choices answer themselves.Open full answer →
33How is securing an industrial control system different from securing IT, and how would you protect a plant you cannot patch for a year?▼mediumNewMicrosoftCiscoPalo Alto Networks◆ premiumIn a plant, availability and physical safety outrank confidentiality, and the controllers may be older than the security team. The scored answer adapts IT habits instead of copying them.Open full answer →