Network Security and Exploitation Questions

Deep understanding of common network protocols and the security issues that affect them, including the Transmission Control Protocol and Internet Protocol stack as well as application and infrastructure protocols such as the Domain Name System, Dynamic Host Configuration Protocol, Kerberos, Lightweight Directory Access Protocol, Remote Desktop Protocol, Secure Shell, and Server Message Block. Candidates should be able to identify protocol level vulnerabilities, misconfigurations, and common exploitation techniques such as man in the middle attacks, Domain Name System spoofing, protocol downgrade attacks, credential relay and pass the hash style attacks, and weaknesses in authentication and session management. Expect familiarity with protocol analysis and active testing tools and techniques, for example packet capture and analysis, traffic inspection, and custom packet crafting using tools and libraries. Also discuss defensive controls and mitigations including encryption, mutual authentication, certificate validation, secure configuration, network segmentation, and monitoring and detection strategies.