How would you go about breaking into a database-based website?
This question aims to determine if you are familiar enough with hacking practices to prevent them. The interviewer wants to make sure that you know how hackers try to break into a network and compromise an organization's information. This understanding will allow you to effectively use the tools and processes designed to prevent this. Knowing the solution is not enough. Employers expect you to thoroughly understand the problem so you can deploy the appropriate countermeasures when necessary.
As an information security manager, you should be familiar with hackers' methodologies and techniques to break into organizations' IT systems. However, since this field is continually evolving, you should update your knowledge of the more recent discoveries about hackers' techniques. The more current your knowledge, the more likely you will impress the interviewer and receive the job offer.
"I work hard to keep myself updated on the new ways hackers are developing to break into an organization's network and compromise its information assets. I even go as far as to set up test environments in which I can try these techniques so I understand how they work. I can then deploy countermeasures within the test environment to ensure that they will be effective without impacting the organization's data security or day-to-day operations. Some of the techniques I've learned about include SQL injections, denial of service attacks, and other hacking practices."
