Sixty seconds before the interview.
STRIDE, the OWASP Top 10, and the SLSA levels — the three structures worth having cold. Cover the answers and test yourself first.
STRIDE
Spoofing · Tampering · Repudiation · Info Disclosure · Denial of Service · Elevation of Privilege
OWASP Top 10
A01 Access Control · A02 Crypto · A03 Injection · A04 Insecure Design · A05 Misconfig · A06 Vulnerable Components · A07 Auth · A08 Integrity · A09 Logging · A10 SSRF
SLSA levels
L1 Scripted build · L2 Hosted + signed provenance · L3 Tamper-resistant platform · L4 Two-person review + hermetic
Quick questionQuick answer
Default K8s pod-to-pod network policy?Allow everything — must be explicitly restricted
Vault's "killer feature"?Dynamic, short-lived, auto-expiring secrets
Best PCI-DSS scope-reduction strategy?Never touch raw card data — tokenize
SOC 2 Type I vs Type II?Point-in-time design vs. sustained 6-12mo operation
If any answer didn't come immediately, that's a direct pointer back to which module's slides to re-read.