Prep Room
Coach note

Interviewers ask this kind of question to surface how you think, not what you remember. The strongest answers are specific, calmly told, and end on what changed.

Create an account or sign in to see model answers and concept guides, and to track the questions you’ve practiced.

Judgment & ambiguity · When to act

Your agency's IT team flags anomalous activity that might be a breach of a system holding constituent data, but the evidence is early and isolating the system now would take a public service offline. When do you act, and how far?

0of ~160 wordsAbout a minute spoken
Type your answer

Voice isn’t supported in this browser. Type your answer in the box.

Create a free account to get more critiques.

Your answer
Your answer appears here as you speak.
Model answerFree with an account

On a possible breach of constituent data, my bias is to contain first and confirm second, but 'contain' doesn't have to mean pulling the whole service offline.

The full answer: structure, worked example, likely follow-up.

Practice more

Thousands of questions, calibrated to your role. Your progress is saved across every session, with model answers and full breakdowns.

© Prep Room. This question is part of the Prep wiki. You’re welcome to quote it with a link to this page.