How would you answer an interview scenario involving attack surface analysis?

In an interview scenario involving attack surface analysis, first clarify scale, security, availability, data-consistency, and recovery requirements. Explain the design and tradeoffs, describe how failures are handled, show how the solution is monitored and tested, and finish with deployment, rollback, and operational considerations rather than describing only the framework or tool configuration.