How to answer the major outage interview question

The short answer

Interview Coach asks this question in these words:

Tell me about a major outage on your watch. What did you do in the first hour, and after?

Pick one outage that hit the business while it was your responsibility. Say what the impact was and how it was found. Then walk through what you did yourself in the first hour and who you told, and end with what changed afterwards so it would not repeat. Interviewers listen hardest to the first hour: priorities, communication, calm.

What the interviewer is checking

The question checks two things: how you behave under pressure, and whether your organization learns. Both halves of "in the first hour, and after" matter. The bank lists three things a strong answer does:

  • Describes the impact and how it was found. Stores that could not take cards, a plant that stopped, staff locked out of email. Found by monitoring, a call, or a customer.
  • Says what you did yourself and who you told. The bridge you opened, the vendor you called, the executives you told, in order. And who decided what.
  • Names what changed afterwards so it would not repeat. A failover test, a monitoring rule, a contract change. Something that makes the same outage less likely.

Avoid an answer about technology only. The interviewer is hiring a manager: people, decisions, communication.

A structure that works

Interview Coach describes a setback answer in four parts:

  1. Situation. What was at stake and what went wrong. Here: the outage, its impact and how it was found.
  2. Ownership. Your own part in it, without blaming others. Here: the part that was yours, including anything you could have caught earlier.
  3. Action. What you did once you saw the problem. Here: the first hour and the days after.
  4. Learning. What you do differently since, with one example. Here: what changed so it would not repeat.

The answer check reads the answer for a situation set before the action, at least two actions said with I, a result near the end, and a learning: what you do differently since, said in words such as "since then" or "I now". It does not ask for a figure, though one helps the interviewer. It also reads the balance between "we" and "I", the length of a spoken answer, and words that weaken an answer: filler, hedges, weak ownership and vague claims.

Answers as written, and what the check says

Illustrative, not a real client. Each answer below was sent on its own through the answer check of Interview Coach. All of them are also marked short for a spoken answer, because each is one or two sentences; the table shows the other finding, word for word, and one way to fix it.

Answer as writtenWhat the check saysWhat to change
When card payments stopped in every store, the incident bridge was opened and the vendor and the store directors were called, and payments recovered by noon. Since then, the vendor runs a failover test every quarter.No sentence says what you did yourself, with I.Say which steps were yours, with I.
When card payments stopped in every store, I opened the incident bridge, and payments recovered by noon. Since then, the vendor runs a failover test every quarter.Only one first person action found. Say what you did yourself.Add the second step that was yours, in order.
When payments stopped, we checked links, we called stores, we logged times, we tested fixes and we sent updates. I opened the bridge and I called the vendor, and payments recovered. Since then, the vendor runs a failover test every quarter.Mostly we and the team. The interviewer cannot tell which part was yours.Give the team one sentence, then say what you did yourself.
I opened the incident bridge and I called the vendor and the store directors, and payments recovered by noon. Since then, the vendor runs a failover test every quarter.No context is set before the action. Add what was at stake.Open with what failed and who it hit.
When card payments stopped in every store, I opened the incident bridge and I called the vendor and the store directors. Now I ask the vendor for a failover test every quarter.No result is named. Say what changed.Say how it ended: service back, cause fixed.
When card payments stopped in every store, I opened the incident bridge and I called the vendor and the store directors, and payments recovered by noon.No learning is named. Say what you do differently since.End with what changed afterwards, in one sentence.
When card payments stopped in every store, I basically opened the incident bridge and I called the vendor and the store directors, and payments recovered by noon. Since then, the vendor runs a failover test every quarter.Filler words found.Drop the filler word.
When card payments stopped in every store, I think I opened the incident bridge and I called the vendor and the store directors, and payments recovered by noon. Since then, the vendor runs a failover test every quarter.Hedging or weak ownership words found.Drop "I think" and say what you did.

The check never adds a figure or a learning for you. If the outage was caused by your own change, say so plainly.

An illustrative answer

Illustrative, not a real client. Every figure is invented. This answer gets all nine marks of the reflection check: length, situation, own action, team versus me, result, learning, and no vague words, filler or hedges.

On a Saturday morning in December, card payments stopped in all 86 stores of a home goods retailer where I ran IT operations. The service desk saw it first from store calls. I opened the incident bridge within ten minutes, I called the payment network vendor, and I asked the store operations director to switch stores to the offline card mode we had tested in the summer. Payments recovered at noon, two hours and forty minutes after the first call; the vendor's primary data center had failed and the switch to the second site had not started on its own. I sent the executive team updates every thirty minutes. My own gap was that we had never asked the vendor to prove the failover. After the review, I put a quarterly failover test into the contract, and since then the vendor has run it four times, each one recorded in the service report.

Why it works. The impact and the detection are clear, the first hour is a sequence of decisions, communication is regular, the manager owns a gap, and the change is contractual and proven since.

What the check cannot see

The answer check reads the words of your answer, not the outage behind them. This answer, sent on its own, gets every mark except length:

When payments stopped, I opened the bridge and I called the vendor, and payments recovered. Since then we test failover quarterly.

Every mark but length. An interviewer would ask: what was the impact, how long, who did you tell, and what was your part in the cause? The first hour is the question, and it is one sentence here.

Choosing your story

  • Pick an outage on your watch. The question says "your watch". A story from another team invites the follow-up "and what did you do?"
  • Show the first hour in order. Bridge, vendor, business, customers. Sequence shows priorities.
  • Own a gap. Something you could have caught earlier makes the learning believable.
  • End with a lasting change. A test, a contract term, a monitoring rule that still exists.

Your resume is where an interviewer looks for these stories, and a line such as "ran 24x7 IT operations" invites this question. Get a free AI review of your resume and see which lines Reed flags first.

Prepare the follow-up questions

  • What did you tell the business while the cause was still unknown?
  • How did you decide when to switch to the workaround?
  • What did the review find that you did not expect?

Check your answer with Interview Coach in Claude

This question is in the IT manager track of the Interview Coach question bank. Write your answer the way you would say it and ask for a check.

  • It reads the answer for a situation, your own action said with I, a result, and a before and after figure or a named record.
  • It flags filler, hedging, weak ownership and vague claims, and says when the answer is short or long for a spoken answer.
  • It does not judge whether the story is true or good, and it never adds a figure you did not give.

Your answers start from your resume. The free review quotes your own lines and flags the 5 to fix first, so you know which lines an interviewer may question.

Free in Claude, no account. We do not store the text you send through it.

Questions

What if the outage was caused by my team's change?

Say so plainly. A manager who owns a self-inflicted outage and fixed the change process is a strong hire. Hiding it is the weakest possible answer.

Is this question only for IT managers?

It is in the IT manager track of the Interview Coach question bank. Technical program managers and service delivery leads meet it too.

Does Interview Coach know whether my story is true?

No. Interview Coach runs in Claude and checks the structure of an answer by fixed rules: a situation, your own action, a result, a learning. It does not judge whether the story is true or good. You decide what to say.

Keep going

Last updated: October 14, 2026