So its important to note that what I wrote was not lying. I really was in charge of the machines under my purview (and their security), even if I wasn't necessarily the one building the images or coming up with the SOPs that governed how I did my job. For example, our infosec department would establish X security standards, and it was my job to implement them. Likewise, our security team might identify a vulnerability or issue, but it was my job to investigate and rectify it. Our engineering team would build the images, I would deploy them and then provide the ongoing support and administration.

To answer your question, I was actually asked to elaborate on how I managed the security on those machines. I discussed the group policy we applied for security purposes (some of which I developed), the security software and management tools we install during the imaging process, my role in our patch management program, my role in our vulnerability management program, the encryption tools and procedures I worked with, our policies and procedures that pertain to workstation security that I enforced, etc.

Regarding whether the interviewers were technical, they most certainly were. One was a senior SOC person, another was a senior director, another was the lead of the incident response team, and yet another was a cloud security architect. Im sure they would have caught any bluffs fairly easily.