Who You Are:
• You are self-motivated, driven, and engaged. You're passionate about
testing and enjoy collaborating in a team-based environment.
• You have fun learning new technologies. You want to get to the bottom of
things, understand what's happening, and make a difference! You are someone
who doesn't give up when faced with complex problems.
• You have experience with software testing methodology.
• You enjoy creating test plans, finding defects, and crashing required
documentation.
• You have a consistent track record of building positive relationships with
technical engineers and non-technical customers.
• You possess superb verbal and written communication skills for
interacting with team members and providing detailed product documentation.
Basic Qualifications:
• Minimum 1-3 years of software QA experience with BSEE/CS or related
technical degree or equivalent experience.
• Minimum two years of experience with TCP/IP stack and
networking/security protocols
• Minimum two years of experience with one of the platforms: Windows,
macOS, and Linux or Mobile platforms – iOS/Android
• Minimum two years of experience with automation using Python.
Desired Skills
• Experience in testing VPN clients, firewalls, or other network/application
security products (Preferrable)
• Secure coding and encryption protocol experience
• Experience with regression testing and automation tools
• Experience working on security concepts such as SSL, Digital Certificates,
code signing, etc.
• Agile development process experience, and we know we're better
together.
Scenario-based Questions
31. You’re working with a team to configure a web server. How would
you secure the communication between the web server and a client?
• Discuss the use of SSL/TLS for secure communication.
32. You are tasked with improving network security for a company.
What are the first steps you would take to secure their network?
• Discuss the implementation of firewalls, VPNs, intrusion detection
systems, and network segmentation.
33. Your application relies on sending sensitive data over the
network. How would you ensure data privacy and integrity during
transmission?
-
• Talk about using encryption protocols like TLS and implementing data
integrity checks (e.g., hashes).
34. A client reports that they cannot access a website, but the server
is online. How would you troubleshoot this network issue?
• Steps could include checking DNS resolution, network connectivity, and
firewall configurations.
35. You are tasked with setting up a secure Wi-Fi network in an
office. What security protocols would you use, and why?
• Discuss the use of WPA3, strong passwords, and additional encryption
methods.
Practical Skills
36. How would you capture network traffic and analyze it for
potential issues?
• Discuss using tools like Wireshark, tcpdump, and what to look for when
diagnosing problems.
37. You’re facing slow network speeds in a local network. How would
you diagnose and resolve this issue?
• Troubleshooting steps might include checking for bandwidth bottlenecks,
faulty hardware, or incorrect configurations.
38. Explain how you would configure an SSL certificate on a web
server.
• Steps for generating, installing, and verifying SSL certificates.
39. If a server is not responding to a ping, what steps would you take
to troubleshoot the issue?
• Discuss checking firewall rules, routing issues, and network
configurations.
40. What are the steps you would follow to securely configure an
HTTP server (e.g., Apache, Nginx)?
• Discuss securing the server with SSL, limiting access, and ensuring proper
configurations.
TCP/IP Stack
1. What is the TCP/IP model, and what are the layers?
• Answer: The TCP/IP model is a conceptual framework used to understand
network interactions in seven layers. These layers are:
• Application Layer: Provides network services to end-users, such as
HTTP, FTP, and DNS.
• Transport Layer: Ensures reliable communication through protocols like
TCP and UDP.
• Internet Layer: Responsible for routing packets, including protocols like
IP.
• Network Access Layer: Handles the hardware and physical aspects,
including Ethernet and Wi-Fi.
2. What is the difference between TCP and UDP?
• Answer:
-
• TCP (Transmission Control Protocol) is connection-oriented, meaning
a connection is established before data is transferred. It guarantees reliable
data transmission, ensuring error correction, flow control, and retransmission of
lost data.
• UDP (User Datagram Protocol) is connectionless and faster, but it
doesn’t guarantee delivery or order, making it useful for real-time applications
like video streaming or VoIP where speed is more important than reliability.
3. What is a subnet mask, and how does it work?
• Answer: A subnet mask is used to divide an IP address into a network and
a host portion. It helps identify which part of an IP address refers to the network
and which part refers to the specific device (host) in the network. Example: For
the IP address [Link] with a subnet mask [Link], the network is
192.168.1 and the host is 1.
4. What are the differences between IPv4 and IPv6?
• Answer:
• IPv4 uses 32-bit addresses (e.g., [Link]), providing around 4.3
billion unique addresses.
• IPv6 uses 128-bit addresses (e.g.,
2001:0db8:85a3:0000:0000:8a2e:0370:7334), offering a significantly larger
address space (340 undecillion addresses). IPv6 is designed to replace IPv4 as
address depletion occurs.
5. What is ARP (Address Resolution Protocol), and how does it work?
• Answer: ARP is used to map an IP address to its corresponding MAC
address within a local network. When a device needs to send data to another
device on the same network, it uses ARP to find the MAC address corresponding
to the target IP.
6. What are the advantages of using NAT (Network Address
Translation)?
• Answer: NAT allows multiple devices on a local network to share a single
public IP address. It helps conserve public IP addresses and provides a layer of
security by hiding internal IP addresses.
7. What is a TCP three-way handshake?
• Answer: A TCP three-way handshake is used to establish a connection
between a client and a server. The steps are:
• SYN: Client sends a synchronization packet.
• SYN-ACK: Server responds with a synchronization acknowledgment
packet.
• ACK: Client sends an acknowledgment back to the server, completing the
connection.
8. What is the role of the transport layer in the TCP/IP model?
• Answer: The transport layer (Layer 4) is responsible for reliable data
transfer, error correction, flow control, and ensuring that data arrives in the
correct order. Key protocols include TCP (reliable) and UDP (unreliable).
9. Explain the difference between a router, a switch, and a hub.
• Answer:
• Router: Routes data between different networks (e.g., between your local
network and the internet).
-
• Switch: Operates within a single network to connect devices and forward
data based on MAC addresses.
• Hub: A basic networking device that broadcasts data to all connected
devices, with no filtering or addressing.
10. What is the difference between a public IP address and a private
IP address?
• Answer:
• Public IP: Can be accessed over the internet and is assigned by the
Internet Service Provider (ISP).
• Private IP: Used within a local network, not routable on the internet.
Private IP ranges are defined as [Link] – [Link], [Link] –
[Link], and [Link] – [Link].
Networking Concepts
11. What is DNS, and how does it work?
• Answer: DNS (Domain Name System) translates domain names (e.g.,
[Link]) into IP addresses (e.g., [Link]). This allows users to
access websites using human-readable addresses instead of numeric IP
addresses.
12. Explain the concept of a VLAN (Virtual Local Area Network).
• Answer: VLAN is a logical grouping of devices within a network, used to
segment traffic and improve security and performance. Devices in the same
VLAN can communicate as if they were in the same physical network, even if
they are physically separated.
13. What is the purpose of a DHCP (Dynamic Host Configuration
Protocol) server?
• Answer: DHCP dynamically assigns IP addresses to devices on a network.
It automates the process of assigning addresses and ensures that no two
devices receive the same IP.
14. What is a TCP window size, and why is it important in data
transmission?
• Answer: The TCP window size controls the amount of data that can be
sent before receiving an acknowledgment. It helps manage flow control and
ensures that the sender does not overwhelm the receiver.
15. What are the common IP routing protocols, and how do they
work?
• Answer:
• RIP (Routing Information Protocol): A distance-vector protocol using
hop count for routing decisions.
• OSPF (Open Shortest Path First): A link-state protocol that uses a
more complex algorithm to determine the best route.
• BGP (Border Gateway Protocol): A path-vector protocol used to route
data between different autonomous systems (networks on the internet).
16. What is a firewall, and how does it protect a network?
-
• Answer: A firewall is a network security system that monitors and
controls incoming and outgoing traffic based on predefined security rules. It
helps prevent unauthorized access to or from private networks.
17. What is the difference between a public key and a private key in
networking?
• Answer: Public and private keys are part of asymmetric encryption. The
public key encrypts data, while the private key decrypts it. The public key can
be shared openly, but the private key must remain secret.
18. What is a VPN (Virtual Private Network), and how does it work?
• Answer: A VPN creates a secure, encrypted connection over the internet,
allowing remote users to access a network as if they were physically present. It
ensures privacy by hiding the user's IP address and encrypting data.
19. Explain what a proxy server is and how it works.
• Answer: A proxy server acts as an intermediary between a client and a
server. It can improve security, anonymity, or performance by filtering
requests, caching data, or hiding the client's IP address.
20. What is an IP address class, and how are addresses classified?
• Answer: IP addresses are divided into classes (A, B, C, D, and E) based on
their address range:
• Class A ([Link] to [Link]) – large networks
• Class B ([Link] to [Link]) – medium-sized networks
• Class C ([Link] to [Link]) – small networks
• Class D and E are used for multicast and experimental purposes.
Security Protocols
21. What is SSL/TLS, and how does it secure communication over the
internet?
• Answer: SSL (Secure Sockets Layer) and TLS (Transport Layer Security)
are cryptographic protocols that provide secure communication over a
computer network. They encrypt data to ensure confidentiality and use
certificates to verify the identity of the communicating parties.
22. What is an attack vector in networking security?
• Answer: An attack vector is the method or pathway through which an
attacker gains access to a network or system to launch an attack. Examples
include phishing emails, unpatched software vulnerabilities, and insecure
network protocols.
23. What is a DDoS (Distributed Denial of Service) attack, and how
can it be mitigated?
• Answer: A DDoS attack floods a target system with traffic from multiple
sources, making it unavailable. Mitigation strategies include using firewalls, rate
limiting, and DDoS protection services like Cloudflare.
24. What are the differences between symmetric and asymmetric
encryption?
• Answer:
• Symmetric encryption uses a single key for both encryption and
decryption (e.g., AES).
-
• Asymmetric encryption uses two keys – a public key for encryption and
a private key for decryption (e.g., RSA).
25. What is a digital certificate, and how does it help ensure secure
communication?
• Answer: A digital certificate is a cryptographic credential issued by a
trusted Certificate Authority (CA). It validates the identity of a website or server
and enables SSL/TLS encryption for secure communication.
26. What is two-factor authentication (2FA), and why is it important?
• Answer: 2FA adds an extra layer of security by requiring two forms of
identification: something the user knows (password) and something the user
has (a phone, token, or biometric scan).
27. What is the role of an IPSec VPN?
• Answer: IPSec (Internet Protocol Security) is used to secure IP
communications by authenticating and encrypting each IP packet in a
communication. It’s often used in VPNs to create secure, encrypted connections
between two networks.
28. What is an SSL certificate, and how do you install it on a web
server?
• Answer: An SSL certificate ensures secure HTTPS connections. It can be
installed by obtaining the certificate from a CA and configuring the web server
(like Apache or Nginx) to use the certificate for SSL/TLS encryption.
29. What is the concept of a "man-in-the-middle" attack?
• Answer: A "man-in-the-middle" (MITM) attack occurs when an attacker
intercepts communication between two parties to eavesdrop or alter the data.
It can be prevented by using encryption (SSL/TLS).
30. What are some common network security best practices?
• Answer: Best practices include regularly updating software and patches,
using strong passwords and encryption, implementing network segmentation,
monitoring network traffic,
LAN:
A local area network (LAN) is a collection of devices connected together in one
physical location.
It is a small n/w which connect all the computer devices along with other
networking devices like HUB and switches so that they can communicate.
WAN stands for wide area network, which is a computer network that connects
multiple smaller networks over a large geographic area. WANs are made up of
local area networks (LANs) and other networks that communicate with each
other.
---------------------------------------------------------
DHCP:
Dynamically Host Configuration Protocol is n/w management protocol which is
used for automatically assigning IP addresses and other comm. parameters
such as subnet masks, default gateways, and Domain Name System (DNS)
addresses to devices on a network.
-
DHCP uses a client-server architecture to distribute IP addresses and other
configuration information to devices on a network
DHCP works on DORA process
DORA stands for Discover, Offer, Request, and Acknowledge:
Discover: The DHCP client broadcasts a message to find an available DHCP
server and request an IP address.
Offer: The DHCP server responds with an available IP address.
Request: The client chooses an offer and sends a message to confirm
acceptance.
Acknowledge: The DHCP server acknowledges the request and finalizes the IP
address assignment
-----------------------------------------------------------------
DNS: Domain name System
DNS servers translate domain names into IP addresses,allowing users to access
websites by typing in human-readable names instead of IP addresses.
-----------------------------------------------------------------------------------
Windowing Technique:
To reduce the no. of acknowledgements
Suppose in TCP/IP if we sent 5 segments to the Router while enabling TELNET.
For each segments the router sends the ack. So that the speed of operation is
slow. To reduce the no. of acks we use window. After 5 segs have been send
then router will send ack.
The no. of segments that are allowed to be sent from S to D before an ack is
sent back.
-----------------------------------------------------------------------------------------------------
OSI: open system interconnect
OSI model is a process which tells us how two applications communicate in a
n/w.
Appl
Presentation
Session
Transport
Network
Data link
Physical
---------------------------------------------------------------------------
TCP/IP: Transmission control protocol/Internet Protocol.
It is similar to OSI Model but OSI model is ref. model and the TCP/IP is pa
Practical(Upgraded version of OSI)
-
Application
Transport
Internet
Datalink
Physical
Network layer:
The network layer is a layer in the OSI (Open Systems Interconnection) model
that enables communication between devices on a network. It's responsible for:
Routing
Finding the best path for packets(IP Header + Data) to travel across a network.
The network layer uses network addresses, such as IP addresses, to route
packets.
Packet forwarding
Forwarding packets between networks using specialized hosts called routers or
gateways.
Logical addressing
Assigning a unique address to each host on the network.
Connectionless communication
Allowing data packets to travel from sender to recipient without the recipient
needing to acknowledge the packet
Data link layer:
The data link layer is a protocol layer in a computer network that manages how
data moves between devices on a network
Examples of data link layer protocols include Ethernet, Point-to-Point Protocol
(PPP), HDLC
Function:
The data link layer is responsible for the reliable transmission of data by adding
source and destination addresses, and error detection and control information.
It also handles how devices recover from collisions that can occur when
multiple devices try to send data at the same time.
Transport layer:
The transport layer is a layer in the OSI model and the Internet protocol suite
that manages network traffic between hosts and end systems. It's responsible
for ensuring that data packets are delivered accurately and reliably between
the sender and receiver.
Here are some of the functions of the transport layer:
Flow control: Prevents the sending of more data than can be reliably
transmitted
Addressing: Communicates with the correct application on the computer
Multiplexing: Ensures that multiple applications can use multiple network
connections
Establishing and terminating IP communication sessions: The transport layer is
where TCP/IP ports listen for incoming connections
-
Using standardized port numbers: Facilitates communication for well-known
applications
Some examples of transport layer protocols include TCP, UDP,
-------------------------------------------------------------------------------------------------
TCP and UDP:
connection oriented(The connection needs to be established before the data is
transmitted), Connection less
TCP is a reliable protocol,unreliable
Data retransmission can be done, No
Flow control can be achieved No
Windowing is used in TCP, No
Slower, Faster
Header size 20 Bytes, 8
http,https, telnet,ssh etc. DHCP, NTP, DNS etc
Segmentation, No segmentation
----------------------------------------------------------------
Routing:
It is a process of finding path on which data can pass from S to D.
Routing is performed by a special device known as a router.
A Router works at the network layer in the OSI model and internet layer in
TCP/IP model
Types:
Static
Dynamic
Static Routing
Static Routing is also known as Nonadaptive Routing.
It is a technique in which the administrator manually adds the routes in a
routing table.
A Router can send the packets for the destination along the route defined by
the administrator.
In this technique, routing decisions are not made based on the condition or
topology of the networks
Dynamic:
It is also known as Adaptive Routing.
It is a technique in which a router adds a new route in the routing table for each
packet in response to the changes in the condition or topology of the network.
Dynamic protocols are used to discover the new routes to reach the
destination.
If any route goes down, then the automatic adjustment will be made to reach
the destination.
---------------------------------------------------------------------------------------------------------------
----------
VLAN:Virtual
It is a small separate broadcast domain switch.
-
By default all ports of switch belong to a single broadcast domain. but with the
help of VLAN we can divide broadcast domain into multiple broadcast domains,
and the small broadcast domain is called VLAN.
Broadcast control is the main purpose of creating VLAN.
CAT7 is used for Ethernet
-------------------------------------------------------------------------------------
Data encapsulation:
Process of adding extra info with actual data before being transmitted across
the n/w.
Transport layer adds TCP/UDP Header then we called it segment
N/w layer adds IP Header then we called it packet
Data link adds ethernet header then we called it frame
---------------------------------------------------------------------------------------------------------------
------
A Virtual Private Network (VPN) is a service that creates a secure, encrypted
connection between a device and a network over the internet.
A VPN works by:
Encrypting data: VPNs encrypt data so that only authorized users can read it.
Masking IP addresses: VPNs hide the user's IP address, making it difficult for
others to track their location.
Creating a virtual tunnel: VPNs create a secure, encrypted connection between
the user and the internet by routing their data traffic through a virtual tunnel.
VPNs can be used for a variety of purposes, including:
Protecting data: VPNs help ensure that sensitive data is transmitted safely and
securely.
Accessing restricted content: VPNs allow users to access content that is
restricted in their region.
Remote work: VPNs allow users to work remotely while still keeping their data
secure.
-----------------------------------------------------------------------------------------
NAT:
N/w address translation
NAT is a protocol that is used to make comm. possible b/w the public and
private n/ws
Whenever NAT router will receive traffic on the inside interface NAT will
translate the source IP and vice-versa
-----------------------------------------------------------------------------------------
OSPF:
-
Open shortest path first. It is an open std. link-state routing protocol that uses
SPF algorithm to find the best path from S to D.
The states are Down, Init, 2-Way, Exstart, Exchange, Loading, and Full.
It is a layer 3 protocol that uses protocol num 89. OSPF maintains 3
tables(DB,neighbour,routing table)
---------------------------------------------------------------------------------------------------------------
--
STP:
Spanning Tree Protocol, a Layer 2 network protocol that prevents loops in
network topologies. It's used on bridges and switches to ensure that redundant
paths in a network don't create loops. The specification for STP is IEEE 802.1D.
What are the different STP port states?
Blocking: No data is sent or received; the port listens to BPDUs. Bridge protocol
Data unit
Listening: The port is listening for BPDUs but not forwarding data.
Learning: The port begins to learn MAC addresses but still doesn’t forward data.
Forwarding: The port forwards data frames and continues to learn MAC
addresses.
Disabled: The port is administratively shut down.
-------------------------------------------------------------------------------------------------------------
SNMP stands for Simple Network Management Protocol, an industry standard
protocol for monitoring and managing network devices on IP networks. It's a
part of the Transmission Control Protocol/Internet Protocol (TCP/IP) family and is
one of the most widely used network protocols
----------------------------------------------------------------------------------------------
syslog:
syslog stands for system logging protocol which is used to send system log or
event messages to a specific server. It is used to collect various device logs
from several machines in a central location for monitoring and review.
--------------------------------------------------------------------------------------------------------
Ping tests the reachability of a host on an IP network by sending ICMP Echo
Request messages and listening for ICMP Echo Reply messages.
---------------------------------------------------------------------------------------------------------------
-------------
ICMP (Internet Control Message Protocol) is used for diagnostic or control
purposes and is commonly used by network utilities like Ping and Traceroute.
------------------------------------------------------------------------------------------------------------
What is ARP?
ARP (Address Resolution Protocol) maps an IP address to a physical MAC
address within a local network.
How does ARP work?
-
When a device wants to communicate with another device, it sends a broadcast
ARP request asking "Who has this IP?" The device with that IP replies with its
MAC address.
-----------------------------------
What are the key components of a test plan?
Test objectives: What you aim to verify.
Scope: Features to be tested/not tested.
Test criteria: Entry and exit criteria.
Resources: Personnel, tools, and environment needed.
Schedule: Timeline for testing activities.
Test deliverables: Reports and documentation.
---------------------------------------------------------------
What is a MAC address?
48 bits, typically written in hexadecimal format (e.g., 00:1A:2B:3C:4D:5E).
A MAC (Media Access Control) address is a unique 12-digit hexadecimal number
that identifies a device on a network. It's used to ensure that data packets are
sent to the correct device, and is commonly used in networking technologies
like Wi-Fi, Ethernet, and Bluetooth
MAC address is the physical address, which uniquely identifies each device on a
given network. ·
--------------------------------------------------------------------------------------------------------
What is the difference between a switch and a hub?
A switch operates at Layer 2 and forwards traffic based on MAC addresses,
while a hub broadcasts traffic to all ports.
What are the main functions of a switch in a network?
Forwarding frames based on MAC addresses, filtering traffic, and creating
collision domains.
------------------------------------------------------------------------------------------------------------
An IP address uniquely identifies a device on a network. IPv4 is 32 bits,
structured in four octets.
IPv4 is 32-bit and limited to ~4.3 billion addresses. IPv6 is 128-bit and offers a
vastly larger address space.
---------------------------------------------------------------------------------------------------
Subnetting divides an IP network into smaller subnets, optimizing address
usage and improving network performance.
When a bigger network is divided into smaller networks, to maintain security,
then that is known as Subnetting. So, maintenance is easier for smaller
networks.
Subnetting is the process of creating a subnetwork (also known as a subnet)
within a network.
------------------------------------------------------------------------------------
-
A communication protocol called Address Resolution Protocol (ARP) is used to
determine a device's MAC (Media Access Control) address based on its IP
address.
ARP resolves IP addresses to MAC addresses for local network communication.
ARP poisoning/spoofing is a cyberattack that involves sending fake messages
over a local area network (LAN) to manipulate the Address Resolution Protocol
(ARP) cache.
Intercept, modify, or stop data being transmitted
Steal sensitive information
Launch additional attacks
Disrupt network performance
Damage infrastructure
---------------------------------------------------------------------------------------------------------------
---------------------------------------
SSL/TLS is a protocol that allows computers to communicate securely on the
internet. It stands for Secure Sockets Layer and Transport Layer Security.
SSL/TLS certificates allow web browsers to identify and connect to websites
using the SSL/TLS protocol.
SSL/TLS encrypts communications between a client and a server, such as a web
browser and a website. It ensures that data is transmitted privately and without
modifications, loss, or theft
---------------------------------------------------------------------------------------------------------------
------------------------------
Symmetric encryption uses the same key for encryption and decryption, while
asymmetric encryption uses two different keys, a public key for encryption and
a private key for decryption
---------------------------------------------------------------------------------------------------------------
--
A firewall is a network security device that monitors and controls traffic
between a network and the internet, or between a trusted internal network and
an untrusted external network. Firewalls can be hardware, software, or cloud-
based, and they use a set of security rules to decide which traffic to allow and
which to block.
Here are some ways firewalls help protect networks:
> Detect malicious activity
>Prevent unauthorized access
>Protect web applications
>Perform network address translation
Firewalls can perform network address translation (NAT), which hides internal IP
addresses and translates them to public IP addresses.
>Provide virtual private networks
-
Firewalls can provide virtual private networks (VPNs), which extend a private
network across a public network in an encrypted tunnel.
---------------------------------------------------------------------------------------------------------------
-----------------------
Tunneling is a technique that allows users to access network resources over a
public network, such as the internet, using a secure connection
Tunneling in computer networks is a way of communicating or transferring data
from one network to another through a process called encapsulation.
---------------------------------------------------------------------------------------------------------------
---------
An intrusion prevention system (IPS) is a network security tool (which can be a
hardware device or software) that continuously monitors a network for
malicious activity and takes action to prevent it, including reporting, blocking,
or dropping it, when it does occur.
An intrusion detection system (IDS) is an application that monitors network
traffic and searches for known threats and suspicious or malicious activity. The
IDS sends alerts to IT and security teams when it detects any security risks and
threats.
---------------------------------------------------------------------------------------------------------------
----------
I’ve spent the past three years as a Python Automation Engineer, primarily
focusing on test automation for web applications and API testing. I’ve worked
on various projects where I contributed in enhancing test frameworks and
developed scripts
I have extensive experience using Python and Selenium for automated UI
testing, Additionally, I’ve conducted API testing using tools like Postman and
Requests, ensuring the reliability and performance of our backend services."
I also contributed to increasing our test coverage from 60% to 85% through
diligent test case creation and automation.
I collaborated closely with developers and the QA team to identify test cases
and ensure seamless integration of automation into our CI/CD pipeline
I'm committed to continuous learning, Moving forward, I’m looking to deepen
my expertise in automation frameworks and possibly lead a team, helping
others grow in their automation skills while contributing to larger-scale projects.