Your question is Real-Time Security Scenario. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
Tell me about a real-time security scenario you handled and what you did step by step to contain the issue.
Use a genuine incident you personally worked on, without disclosing confidential customer or employer information. Explain the initial signal, affected assets, containment decisions, communication, evidence preservation, eradication, recovery, and how you verified the incident was closed. Be prepared to identify the relevant MITRE ATT&CK or STRIDE techniques and the monitoring that supported each decision.
