I can tell in 2 minutes whether someone actually understands networking.
I just ask:
“Explain what happens when you type a URL into your browser.”
Most people give me one sentence.
There are at least 10 steps.
And every single one is an attack surface.