42How do AI vulnerability-discovery agents find bugs, and how do you triage what they report?▼hardNewGoogle DeepMindAnthropicOpenAI◆ premiumThe model's guess is cheap; the proof is what matters. Strong answers describe the oracle that turns a hypothesis into evidence, and the triage that keeps maintainers from drowning.Open full answer →
01What is the difference between an event, an alert and an incident, and who decides when one becomes the next?▼easyNewCrowdStrikePalo Alto NetworksGoogleunlockedThree words every SOC uses and many candidates blur. The answer that scores defines each by what it obliges you to do, and names the decision that turns an alert into an incident.Open full answer →
02An EDR alert says a Word document spawned PowerShell with an encoded command on a finance laptop. How do you triage it?▼easyNewCrowdStrikeMicrosoftPalo Alto NetworksunlockedThe process tree tells most of the story in five minutes. Interviewers want an order of questions, the evidence for each, and a clear point at which you contain rather than keep looking.Open full answer →
17How do you triage a suspicious file safely, and how would you write a YARA rule that catches its family without false positives?▼mediumNewCrowdStrikePalo Alto NetworksGoogle◆ premiumHash lookups catch yesterday's file. A good rule targets what the family cannot easily change, and gets tested against a corpus of clean files before anyone trusts it.Open full answer →
18Your security operations agent reads logs, alerts and tickets. How do you stop attacker-controlled text in them from steering it?▼hardNew◆ premiumTrace field origin through telemetry, summaries and response proposals. Preserve evidence, verify current targets and playbooks, and test both missed threats and harmful containment.Open full answer →
21Design LLM-assisted phishing triage for a security team, and list its failure modes.▼mediumNew◆ premiumPreserve the source and limits of each signal, verify model claims and bind response actions to exact targets. A passing authentication result does not prove benign mail.Open full answer →