Some of the questions are - Difference between Multiple infosec framework / regulations / standards (i.e., HIPAA, NIST, ISO 27001, SOC2) Walkthrough the process of how to perform risk assessment How would you prepare prior for meetings with customer or client or vendor in regard to risk assessment