Find Interview Questions for Dashen bank s.c.

Agent-based monitoring involves installing software agents on the monitored devices to collect data and send it back to the monitoring system, while agentless monitoring collects data remotely without installing any software on the devices, typically using protocols like SNMP or WMI.

IT infrastructure monitoring is the process of continuously observing and managing the hardware, software, networks, and services that make up an organization's IT environment. It is important because it helps ensure system performance, identifies issues before they escalate, minimizes downtime, enhances security, and supports efficient resource management.

To set up an alerting escalation policy, follow these steps:

1. **Define Alert Criteria**: Identify the conditions that trigger alerts (e.g., CPU usage, downtime).
2. **Set Alert Severity Levels**: Classify alerts by severity (e.g., critical, warning, info).
3. **Establish Notification Channels**: Decide how alerts will be communicated (e.g., email, SMS, chat).
4. **Create Escalation Paths**: Outline who gets notified first and who to escalate to if the issue isn’t resolved within a set timeframe.
5. **Set Response Timeframes**: Define how quickly each level of escalation should respond.
6. **Document the Process**: Ensure all team members understand the escalation policy.
7. **Test the Policy**: Regularly test the alerting system to ensure it works as intended.
8. **Review and Adjust**: Periodically review the policy for effectiveness and make adjustments as necessary.

To monitor a Kubernetes cluster, you can use tools like Prometheus for metrics collection, Grafana for visualization, and Kubernetes Dashboard for a user-friendly interface. Additionally, consider using tools like ELK Stack (Elasticsearch, Logstash, Kibana) for logging and alerting systems like Alertmanager to notify on issues.

A Dockerfile is a text file that contains instructions for building a Docker image. It specifies the base image, application code, dependencies, and configuration needed to create a containerized application.

To maintain anonymity while performing ethical hacking, use a VPN to mask your IP address, employ anonymous browsing tools like Tor, avoid using personal devices or accounts, and ensure you have permission from the target organization before conducting any tests.

A SQL Injection attack occurs when an attacker inserts or "injects" malicious SQL code into a query, allowing them to manipulate the database. This can lead to unauthorized access, data leakage, or data manipulation.

To mitigate SQL Injection attacks, use the following methods:
1. Use prepared statements and parameterized queries.
2. Employ stored procedures.
3. Validate and sanitize user inputs.
4. Implement web application firewalls (WAF).
5. Limit database permissions for application accounts.

Some common tools used in ethical hacking include:

1. Metasploit
2. Burp Suite
3. John the Ripper
4. Nikto
5. Nmap
6. Wireshark
7. Aircrack-ng
8. OWASP ZAP
9. Nessus
10. SQLMap

COPY is used to copy files and directories from the host filesystem into the Docker image, while ADD can do everything COPY does but also supports extracting tar files and fetching files from remote URLs.