Network Security and Threat Detection Questions

Design and defensive operations for protecting networked systems and detecting network based attacks. Topics include virtual private cloud and subnet design, firewall and access control rules, web application firewalls, distributed denial of service mitigation, intrusion detection and prevention, network segmentation and microsegmentation, zero trust network principles, detecting and investigating lateral movement and suspicious network flows, packet capture and flow analysis, and integration with central logging and detection pipelines. Candidates should be able to explain architectural trade offs, detection strategies, and how network controls fit into overall incident response.