Scenario
Scenario
You are responsible for a microservices platform where internal services authenticate with mTLS and exchange customer and operational data through service-to-service APIs. A production service has started making unusual outbound calls, and a neighboring service is returning intermittent authorization failures. You suspect one workload may be compromised, but you cannot take the whole platform offline.
Incident Response Approach
Question
How would you investigate, contain, and recover from this incident while preserving service availability? Explain how you would reason about trust boundaries, identity, and blast radius, and how you would verify that your containment and recovery steps actually worked.
Practicing as: Software Engineer interview at ScienceLogicHi, I'll play your ScienceLogic interviewer for the Software Engineer role. Candidates describe these interviews as mostly positive and moderately difficult, so expect me to be friendly and conversational. Take your time with the question above and answer like we're in the room.
You are practicing as a guest. Sign up free to get your answer graded with AI feedback. Your draft stays right here.
