This question came to mind when I read this excellent post: https://danielmiessler.com/study/infosec_interview_questions...