Your question is Execute Security Incident Response. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
You’re responding to a live security incident affecting a connected healthcare platform. You need to contain the issue quickly, understand scope, coordinate the right teams, and restore normal operations without creating more risk.
How do you approach incident response, and what tools would you use?