CyberCertPrepSecurity FundamentalsCareer AwarenessEASYFree question
During a cybersecurity job interview, a candidate is asked to explain how they would investigate a suspicious process on a Linux system. What approach demonstrates competence?
- A.B. A systematic approach: check the process details (ps, /proc), examine network connections (ss/netstat), review file handles (lsof), check the binary hash against threat intel (VirusTotal), and examine logs - explaining your reasoning at each step
- B.A. Immediately delete the process
- C.C. Say you would Google it
- D.D. Restart the computer
Why A is correct
Interviews test methodology, not memorization. A good response demonstrates: systematic investigation approach, knowledge of relevant tools (ps, lsof, ss, strace, strings), understanding of what to look for (unexpected network connections, suspicious parent processes, unsigned binaries), and communication skills (explaining reasoning). Practice on platforms like TryHackMe and document your investigation processes.
Know someone studying for Security Fundamentals? Send them this one.