DevOpsInterviewPrep logo
← DevSecOps & Supply Chain Security / 22
mediumNewUberMicrosoftPhonePe

Attackers are spamming push approvals at 2am and someone will eventually tap accept. What is your plan?

Push approval is a weak factor and fatigue is its predictable failure mode. Stop the campaign with number matching and rate limits; end the attack class with passkeys, device gating and a hardened helpdesk.

Updated Sep 2026 · Grounded in researched DevOps, SRE and platform engineering interview loops, written to a senior-engineer editorial bar, and never padded to hit a word count.

Push approval is a weak factor and fatigue is its predictable failure mode. Stop the campaign with number matching and rate limits; end the attack class with passkeys, device gating and a hardened helpdesk.

20 answers per topic instead of 10, and your progress kept · no cardor unlock all 390 remaining answers · ₹2,000 / $25
UP NEXT ON YOUR JOURNEY
Next in this trackDesign the break-glass accounts we will need when SSO is down. What does good look like?Next in this trackOur security exception list only grows. Design a risk-acceptance process that does not rot.Next in this trackTraffic spikes keep taking us down. When does CDN DDoS protection suffice, and when is it not enough?
DISCUSSION · 0

Nothing here yet. Say how you would answer it.