Cybersec Analyst Interview question

[CS1983]

Question: Anyone ever seen anything like this? Know potentially what to expect?

Background:

I have an in-person interview coming up for a Cybersec Analyst position out of state at a major company in a specific industry sector, in a geographical area heavy with industry presence. Already passed the phone interview, which was extremely low on technical questions. When I asked him if he had any further questions based on my resume or the job requirements, he said he either asked them or I answered them without him having to ask (I suppose that could be good?). He further stated he will be moving me forward to an in-person interview and HR will coordinate the flight, etc.

The manager said their in-person interview is as follows:

Technical Lab: Windows workstation, basic troubleshooting and fact finding. This is pass/fail. If failed, interview terminates immediately.

Lunch: Get to know the team/they get to know me

Incident Response-based panel interview:. This is not pass/fail per se, but more of "how do you think and react?" scenario gaming.

-----

I asked him if the technical portion would be getting into stuff like PowerShell or anything super sysadmin-ish. He stated no, it would be just basic troubleshooting and it shouldn't be hard if I've done that level of work in the past.

Job requirements are fairly standard for such a position: AD knowledge, incident response, technical handling of security incidents, file permissions, knowledge of Linux and Windows OS, etc.

He stated there are two other candidates.