All language subtitles for 1. Scenario Based Questions

Scenario based questions plays a very vital role during the interview, because I interview always ask

some questions related to scenario based questions.

Now here a very important thing.

Is that how you reply all those questions?

Let's say we have just an example or definitely these type of questions.

They always ask that if there is some DDoS attack, then how you can mitigate how what will be your

plan, right?

So you can read out these things that we can document the Australians plan, recognize the DDoS attack

activity and we cannot assume that only largescale volumetric attacks are the problem site and we can't

even rely on the traffic monitoring thresholds and we even IP or firewall and definitely there is a

very special thing is that we can we have to engage the mitigation provider.

And pair time to mitigation with successful attack protection.

So apart from that, guys, we can we can make one of the scrubbing center to mitigate the DDoS attack.

So now what is that scrubbing center?

So scrubbing silver, we can say, is one of the dedicated machines that receives all network traffic

and it filters all the network traffic.

In the form of good traffic and bad.

So generally it passes only the good traffic, which is not malicious in respect to this data packets.

Now in our second we have suppose the server is compromised with the malware.

What steps will you take to secure a server?

Well, these are the protections you can take.

These are the protection you can take just after.

Before that compromise version of the server.

Right.

And even after the confirmation of the server.

But along with that, you will have to, you know, isolate that machine, that server machine.

You will have to isolate that server machine.

I forgot to mention here those points here, you have to isolate it and you have to investigate whether

there is something malicious or not.

If there is something malicious found, you will have to clear all those things and you will have to

check other parts of the network which machines were connected to this server.

Right.

And you have to clear all those things.

So once you you get to know all those things, then you have to secure again, make a secure password.

You can make the user that you use to manage the system.

You can remove or remove the remote access from default.

You can configure firewalls for remote access.

These are the things you can do.

And after doing these things, you can take that away in the you in your network.

One more saw this scenario based questions we have.

Suppose there is a no use case for BitTorrent, right?

There is no quality.

We have made any use cases for BitTorrent.

Then how we can analyze that traffic.

So that is quite very simple.

We see BitTorrent or you can say peer to peer.

This software generally works on port number 688126, eight, eight, nine, and sometimes it's six

nine.

So now what you can do.

You can check the sim locks directly and you can filter out the port numbers with the help of port number,

obviously.

And you can also check the firewall logs.

And there also you will you will have to keep the filter with the help of port number.

And then you will get to know in the in the raw data or you can see the payload that the IP address,

the URL and the port number, these things you will get.

And with the help of these, that will be very easy to know that whether it's a torrent or not because

you once you will search on the Google, you will get to know that this IP is delivered through some

tools.

Something appear to be a connection.

Now let's say our data breach on the network.

So what is the first thing you do when the attack occurs on the network?

So this one is very important one.

Basically, they they just ask this question just to know that what action you can take.

So what was the incident response plan in place or your organization?

Right.

So investigate the incident.

That is the first part.

If the breach is valid, then we have to inform the management.

That's quite very simple.

And then identify the suspected, you know, the root cause of the incident.

So this one, we have to find out.

And then if we get to know where something is malicious and something is affected, then we need to

isolate that effective system and get the cause of the breach.

Then implement policy, procedure, procedures, procedures, whatever the things they is there, perform

period technology, audit or risk assessment combined with network penetration testing to identify weaknesses

in the system.

So that's what comes in the role.

Now, how do you keep devices secure if they are on public Wi-Fi?

So, well, the first prescription for this is users should use their own mobile hotspot.

If they can't use it, then just tell to the user that they are they should connected with the VPN because

once they will connect with European, every data is going to be encrypt through it and it will communicate

through a tunnel.

So through that, the communication will be secure.

So that's it, guys, and we'll meet in the next video with the roles and responsibilities and same

questions, which is very important.

This part is very important.