Do you believe SSL provides adequate data encryption?
Interviewers like to ask your opinion about the effectiveness of different network security practices. This gives them an idea of which of these practices you prefer and whether these are the same as the ones used by their organization. They also expect you to be able to justify your opinion using well-reasoned logic and experience with the technology.
When answering a question in which the interviewer asks your opinion, be prepared to justify or validate your answer. The interviewer is likely to ask you a follow-up question about why you believe what you stated is true. They are probably more interested in your ability to defend your answer than they are in your opinion.
"While many security professionals use SSL to encrypt data, I believe that this is not enough. SSL only verifies the sender's identity and does not offer hard data encryption. It is only designed to validate the node you are communicating with is who they say they are. Therefore, I employ additional protection for both the data-in-transit and the data-at-rest in the environments I manage and secure."
