Network Security Interview Questions

Your firewall has an explicit rule allowing inbound port 443 to your web server. Users access the site without problems. But your logs show a significant volume of inbound 443 traffic being blocked. A junior admin is confused: "We already have a rule allowing port 443 inbound - why is anything still being blocked?" What is happening and how do you explain it?

A certificate for your public website expires, causing an outage. Investigation shows the renewal was "someone's manual process" and that person was on vacation. Leadership wants to know how to prevent this. How do you design certificate lifecycle management to prevent future outages?

You're conducting a security assessment of a manufacturing facility that uses OPC UA between SCADA systems and PLCs. The client is concerned about ransomware reaching operational technology. Describe your assessment approach.