Prep Room
Coach note

Interviewers ask this kind of question to surface how you think, not what you remember. The strongest answers are specific, calmly told, and end on what changed.

Create an account or sign in to see model answers and concept guides, and to track the questions you’ve practiced.

Judgment & ambiguity · When to escalate

During a routine engagement at a client, your team notices what looks like unauthorized access in the client's logs — possibly an active breach, possibly a false positive from a misconfigured tool. It's their environment, not yours to remediate. What's your move?

0of ~160 wordsAbout a minute spoken
Type your answer

Voice isn’t supported in this browser. Type your answer in the box.

Create a free account to get more critiques.

Your answer
Your answer appears here as you speak.
Model answerFree with an account

A possible active breach is never something I sit on to confirm — the cost of being wrong by staying silent is a compromise that spreads while I deliberate.

The full answer: structure, worked example, likely follow-up.

Practice more

Thousands of questions, calibrated to your role. Your progress is saved across every session, with model answers and full breakdowns.

© Prep Room. This question is part of the Prep wiki. You’re welcome to quote it with a link to this page.