We recently had a situation occur where a security problem occurred on our network and the person who detected it wasn't directly responsible for resolving it, even though they had the skills to do so. How would you have handled this situation?
This type of question is known as a 'behavioral question'. It is meant to determine how you react to a common scenario and if your response is compatible with the company's policies. The best way to answer this type of question is to describe how you performed in a similar situation in your current or previous position. You can use the 'STAR' method to answer this - Situation, Tactic, Action, Result.
"I had to face a similar situation recently at my current job. I discovered a threat to one of our customer's network security, but it wasn't within the scope of my job to notify the network administrator since they worked on another team. I could have easily just asked one of our team members to log in and fix the problem, but this would have gone against our company's policy. Instead, I notified the manager of the other team, identified the issue and suggested a way to resolve it. The manager appreciated my help, and his team quickly fixed the problem. He even let my manager know how I had helped."
