RE: Interview Questions

["BARRETT,WILL" <BARRETW () airproducts com>]

If you are going to do that why bother?  Chances are pretty good that
the person you are interviewing has already passed certification so why
ask them again?  Personally I find this kind of interview insulting and
it definitely indicates that the company either doesn't know about
security, or more likely doesn't care enough about it to make it worth
my while to work there.  Bad interview techniques = bad hire = bad
security.

A better solution in my opinion is to ask questions based on a real
world scenario, such as, "recently a wireless initiative was passed down
by management and we are going to roll out global wireless access to our
company in the next year.  What would you suggest as some things that we
would want to do in order to keep our network secure as we deploy this
technology?"   The is no "right" answer that would apply to every
company.  However the guy you want to hire will ask some more questions
about what you want to accomplish with this deployment before offering
his suggestion.  Also, even from the candidates you do not hire, you may
get some ideas that you hadn't considered.

Just my opinion

-Will Barrett

-----Original Message-----
From: revnic () gmail com [mailto:revnic () gmail com] 
Sent: Tuesday, August 22, 2006 2:45 PM
To: security-basics () securityfocus com
Subject: Re: Interview Questions

get some tests from TestKing and compile a list of questions.


regards,

Revnic Vasile

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has
designated Norwich University a center of Academic Excellence in
Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------