Interview Questions

1. What is the difference between the ASA firewall operating in Routed Mode and Transparent Mode ?

    Ans  :  A firewall in a routed mode is a routed hop and acts as a default gateway for hosts that connect to one of its screened subnets. . A transparent firewall, on the other hand, is a Layer 2 firewall that acts like a "bump in the wire," or a "stealth firewall," and is not seen as a router hop to connected devices.

2. How to control ARP Traffic in Transparent mode of ASA Firewall ? 

    Ans :  ARP Inspection is used to control ARP Traffic

3.  What is mean by Stealth Firewall ?

Ans  :

4.  What are called Non-IP Traffic?

Ans : AppleTalk, IPX, BPDUs, and MPLS

5. What happen when you change the mode of firewall from Routed to Transparent ?

Ans : When you change modes, the adaptive security appliance clears the configuration because many commands are not supported in both modes.

6. what are the different types of NAT supported by ASA ?
Ans :  i. Static NAT

         ii. Dynamic NAT
        iii. Static PAT
        iv. Dynamic PAT
         v. Identity NAT
        vi. Static Identity NAT
       vii. NAT Exemption
  

7. What is mean by Load Balancing?
In firewall, load balancing means the two firewall are configured in such a way that both the firewall will process the client request based on specific algorithm ( such as Round Robin Algorithm ) 

8. What is the use of VPN ?
       VPN is used to create a seperate tunnel between two users to have a secure connection which means the data is encapsulated before sending.

9.  What is the use of Proxy ARP ?
 Ans :  Proxy ARP feature will enable the device to answer the ARP queries for the network address that is not on that network

10. What is mean by Policy Based NAT?

11. Can you explain about OSI Model ?
   Ans :  OSI model is develpoped to have a common reference model for communication between devices of different vendors. It consists of seven layers 
       The bottom layer in OSI model is  ''Physical Layer '' which is responsible for forming a physical interfaces between devices which allows for transmission of data in raw bit stream.
       The second bottom layer is " Data Link Layer"  which is responsible for


12. What do you mean by Access List?
  Ans :  Routers ,Cisco ASA firewall provide traffic filtering capabilities using the access-list . Access list consists of ACE ( Access Control Entries ). An ACE is a single entry which permits or deny based on Protocol , Source and Destination address and can also be used source and destination port numbers

Cisco ASA supports mant Access list types
1.  Standard Access List
2.  Extendd Access List
3.  Ethertype Access List
4.  Web based Access List
5.  IPv6 Access List

13.  Differnce between TCP and UDP

	TCP	UDP
Acronym for:	Transmission Control Protocol	User Datagram Protocol or Universal Datagram Protocol
Function:	As a message makes its way across the internet from one computer to another. This is connection based.	UDP is also a protocol used in message transport or transfer. This is not connection based which means that one program can send a load of packets to another and that would be the end of the relationship.
Usage:	TCP is used in case of non-time critical applications.	UDP is used for games or applications that require fast transmission of data. UDP's stateless nature is also useful for servers that answer small queries from huge numbers of clients.
Examples:	HTTP, HTTPs, FTP, SMTP Telnet etc...	DNS, DHCP, TFTP, SNMP, RIP, VOIP etc...
Ordering of data packets:	TCP rearranges data packets in the order specified.	UDP has no inherent order as all packets are independent of each other. If ordering is required, it has to be managed by the application layer.
Speed of transfer:	The speed for TCP is slower than UDP.	UDP is faster because there is no error-checking for packets.
Reliability:	There is absolute guarantee that the data transferred remains intact and arrives in the same order in which it was sent.	There is no guarantee that the messages or packets sent would reach at all.
Header Size:	TCP header size is 20 bytes	UDP Header size is 8 bytes.
Common Header Fields:	Source port, Destination port, Check Sum	Source port, Destination port, Check Sum
Streaming of data:	Data is read as a byte stream, no distinguishing indications are transmitted to signal message (segment) boundaries.	Packets are sent individually and are checked for integrity only if they arrive. Packets have definite boundaries which are honored upon receipt, meaning a read operation at the receiver socket will yield an entire message as it was originally sent.
Weight:	TCP requires three packets to set up a socket connection, before any user data can be sent. TCP handles reliability and congestion control.	UDP is lightweight. There is no ordering of messages, no tracking connections, etc. It is a small transport layer designed on top of IP.
Data Flow Control:	TCP does Flow Control. TCP requires three packets to set up a socket connection, before any user data can be sent. TCP handles reliability and congestion control.	UDP does not have an option for flow control
Error Checking:	TCP does error checking	UDP does error checking, but no recovery options.
Fields:	1. Sequence Number, 2. AcK number, 3. Data offset, 4. Reserved, 5. Control bit, 6. Window, 7. Urgent Pointer 8. Options, 9. Padding, 10. Check Sum, 11. Source port, 12. Destination port	1. Length, 2. Source port, 3. Destination port, 4. Check Sum
Acknowledgement:	Acknowledgement segments	No Acknowledgment
Connection:	TCP is a connection-oriented protocol.	UDP is a connectionless protoc

Cognizant - Interview Questions for Network Admin

Dear all,
       I have attended interview for the post of Network Admin on 31st August 2013. I would like the share the experience with you , that's why i am posting the list of interview questions asked to me.

I am just posting just the technical questions alone

1. What is mean by stuck in active in EIGRP ? 
2. What is mean by Feasible Sucessor ?
3. What  is it located ?
4. What are the metrics used in EIGRP ?
5. What are the default values of Metric ?
6. What is the Multicast address used in EIGRP ?
7. What do you mean by unequal cost load balancing ?
8. what is the formula to calculate metric ?
9. what is the condition for feasible distance ?
10. next come to OSPF , What do you mean by LSA in OSPF ?
11. What are the different states in OSPF ?
12. when will the database description packet gets exchanged ?
13. what are the contents in database description packet  ?
14. What do you mean by Type 6 LSA ?
15. In a site to site vpn how many phases are there ?
16. What are the parameters of Phase 1 ?
17. If the authentication method in phase 1 mismatch ,how will you identify ?
18. How will check the configured Access-List is working or not ?
19. What is the use of having Security Zones in ASA Firewall ?
20. What are the parameters you will check if i cannot able to communicate from inside  n/w to outside n/w through the ASA firewall ?
21. How will you check whether NAT is happening or not ?

Dell Sonicwall - Interview Questions

Hi readers ,
     This time i would like to share another interview experience of mine in my blog

Company Name -  Dell Sonicwall
Job Title             -   Network Security Engineer
Work Location   -  Chennai
Interview Mode  -  Telephonic

1. Can you explain about you , your educational background and Technical Background ?
2. Explain about DHCP process ?
3. What is the use of ARP Protocol ?
4. scenario -  There are two brand new systems with windows seven operating system .In one of the system      
    i have created a file and saved it to the desktop. Now my question is what are the minimum software and  
    hardware requirments required for me to get the file in another system.
5. What do you mean by proxy ARP ?
6. What is mean by SSL Handshake ?
7. what is the difference between STP and RSTP ?
8. Can you explain about VPN ?
9.  What is mean by TCP Handshake ?
10. what is mean by iterative query ?
11. Scenario -  In a router there are two routing protocol EIGRP and OSPF , by default the router will
      choose which route .

Syntel Corportion - Network Engineer Interview questions

Hi , i have attended Telephonic interview last week for Information Security Domain in Syntel Corporation, chennai . So i want to share my experience because i think it may be helpful to those who are searching job.

The questions i was asked during the interview are

1. The common question in all the interviews is " Tell about yourself ?"
2. Difference b/w Router and Firewall ?
3. Whether Firewall can able to terminate the network ?
3. Difference b/w the access-list in the router and Firewall ?
4. What is the port number used by Ping Command ?
5. Can you explain about the media layer in OSI model ?
6. How DHCP Works ?
7. what is the purpose of SRV Records in DNS ?
8. Router and Firewall works in which layer of OSI model ?
9. What is the use of NSLOOKUP command ?
10. what is the difference between AD in windows server 2003 and 2008 ( interms of security side)
11. What are the things you will observer , if you are asked to do firewall auditing ?
12. How will you contribute yourself to Information Security ?
13. Tell some commands you used for troubleshooting in windows or linux environment ?