Celonis interview question

Secure design of a cloud based application, and finding security vulnerabilities.