Cybersecurity & Ethical Hacking interview questions and answers

The CIA triad stands for Confidentiality, Integrity and Availability — the three core principles of information security.

A vulnerability is a weakness. A threat is something that could exploit it. Risk is the likelihood and impact of the threat exploiting the vulnerability.

SQL injection is an attack where malicious SQL is inserted into input fields to manipulate a database. It is prevented with parameterised queries and input validation.

A firewall monitors and controls network traffic based on security rules, blocking unauthorised access while allowing legitimate communication.

Symmetric encryption uses one shared key for encryption and decryption. Asymmetric encryption uses a public key to encrypt and a private key to decrypt.