Cryptography and identity security interview preparation
Crypto and identity questions filter out candidates who pattern-match on words like "encrypted" without knowing what property is being protected. You will not be asked to implement a cipher. You will be asked to pick the right primitive, spot a misuse, and explain what an authentication flow actually proves.
Commonly asked for: Security Engineer, IAM Engineer, Application Security Engineer.
What this domain covers
The skills a crypto & identity round is built to test
- Matching a cryptographic primitive to the property it actually protects
- Spotting a misused primitive, like a fast general-purpose hash standing in for a password hash
- Explaining what a TLS certificate or an OAuth or OIDC token actually proves
- Reasoning about how MFA gets bypassed in the real world
- Evaluating session and token handling for revocation and storage risk
By the numbers
The crypto & identity track
Missions in this domain
6 missions
Difficulty range
1 to 8 of 10
Time per mission
5 minutes
Interview Lab bank
8 questions for crypto & identity
Interview Lab
Rehearse the round, scored
Encryption, hashing, authentication, and access control. A free account unlocks the full crypto round in the Interview Lab, with every prompt, rubric, and model answer included.
Locked
Inside the Crypto & Identity Interview Lab round
Pick-best and structured response
Choose the strongest option under time pressure, or write a short structured answer across evidence, impact, remediation, and tradeoff.
Ordering rounds
Sequence the correct steps of an investigation or a response, the same judgment call an interviewer is actually grading.
Scored rubrics and model answers
Every round is graded against a written rubric, with a full model answer to compare against once you submit.
A free account unlocks the full round, every prompt, rubric, and model answer included.
Practice
Practice the reasoning interviews actually test
The crypto & identity mission track puts you in front of these scenarios and makes you commit to a finding, which is the same move the interview asks for.
Guest missions
Four missions are playable with no account and no setup, including a proxy investigation and a cloud IAM misconfiguration.
Open /tryCrypto & Identity missions
The full library groups missions by domain, so you can work the Crypto track end to end. Requires an account.
Open the mission libraryInterview Lab
Answer scenario prompts in your own words and get scored on structure: evidence, impact, remediation, tradeoff.
Open the Interview LabOther domains