How would you answer an interview scenario involving policy-based authorization?

In an interview scenario involving policy-based authorization, first clarify scale, security, availability, data-consistency, and recovery requirements. Explain the design and tradeoffs, describe how failures are handled, show how the solution is monitored and tested, and finish with deployment, rollback, and operational considerations rather than describing only the framework or tool configuration.