Whenever you're ready, walk me through how you'd approach this.
Describe a time you identified a security gap; what was your process for remediation?