Your question is Auditing Infrastructure for Flaws. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
Describe your process for auditing a piece of infrastructure for security flaws. Explain how you define scope, identify trust boundaries and threats, inspect configurations and dependencies, validate controls, and prioritize findings. Include the evidence, tools, and retesting steps you would use to determine whether a flaw is exploitable and whether remediation is effective.