"Whenever I decide to step outside of the company guidelines and take a risk, I always balance what would occur if something went wrong against what would happen if I did not take any action. An example of this was when one of our networks was experiencing high latency issues. I knew that a recently developed router would help address this. However, it was not on the company's approved hardware list yet. Nevertheless, I purchased the router from the supplier, installed and configured it. The latency issue was resolved, and we added the router to the approved list of equipment we could use. The risk for this issue was minimal, just the cost of the router and the time spent configuring it. However, the upside was resolving the latency issue and improving the performance of the network quicker than if we had waited for formal approval of the router."

You should demonstrate why you felt it was appropriate to take the risk and what your actions achieved when answering this question. You may also want to discuss what would have happened if you had not taken action or if the risk you took negatively impacted the company.