Whenever you're ready, walk me through how you'd approach this.
Walk me through the OWASP Top 10 vulnerabilities and explain how you would mitigate SQL injection or Cross-Site Scripting (XSS). Explain the underlying attack paths, the controls you would implement in application code and infrastructure, and how you would verify those controls through testing and monitoring.