“How would you respond to a critical security incident involving a potential data breach?” They want to see your approach to incident response, including detection, containment, investigation, remediation, and post-incident analysis. A strong answer should reference NIST's incident response framework (Identify, Protect, Detect, Respond, Recover) and include real-world troubleshooting steps.