Attack Surface Analysis Questions

Techniques for identifying, documenting, and prioritizing the attack surface of systems and applications. Topics include asset identification, entry point enumeration across network interfaces, APIs, user interfaces, supply chain components, physical interfaces, and human factors such as social engineering. Candidates should be able to visualize attack paths, model attacker capabilities and preconditions, estimate impact and likelihood, and recommend controls to reduce or mitigate exposed surface area and privilege escalation paths.