Non-critical alert at 3am
An alert fires at 3am for a non-critical degradation (something's off, but users may not be significantly affected). How do you decide whether to wake people up or wait until morning?
What a strong answer looks like
Stop the bleeding first (mitigate), then form hypotheses from real signals. Separate root cause from symptom, communicate status as you go, and close with what prevents a repeat.
0:00 of about 20 min
Which questions mattered is sealed until you submit. Telling you now would just be handing over the edge cases.
Run or narrate your approach, then ask the coach.