Your question is Compare Monolith and Microservice Security. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
You are responsible for an application that started as a monolith and is being split into microservices behind an API gateway. The system handles customer account data and internal service-to-service requests, and your team has already seen one incident where a compromised service token was reused laterally. You need to explain how the architecture choice changes the security and infrastructure risks you must manage.
How would you compare the security and infrastructure implications of a monolith versus microservices in this system? What changes in trust boundaries, control placement, and failure handling would you expect as the architecture evolves?