Performance-based
Three walkthroughs in the shape of a PBQ. The scene is public so a search can land here. The points a grader would award sit on Lab & Exam Sprint and Pass Desk.
18 min
A 40-person clinic runs one flat /16. Imaging, the front desk, and the guest Wi-Fi all share it. Overnight a workstation encrypts local shares. Nothing has left the building yet. You have a firewall that can host three new zones and one spare switch.
Draw the zones you would create before the next clinic day, name the one host you isolate first, and say which traffic you would still allow so nurses can read schedules.
12 min
A VPN gateway log shows 400 failures for one account from one ASN in six minutes, then one success, then a new device registration from a city the user has never used. The user’s password was in a breach dump last year. MFA is SMS.
Name the attack pattern, the control that failed, and the single change you would make before the next business day.
10 min
A warehouse lists four purchases: badge readers on the cage door, cameras over the dock, a nightly immutable backup, and a guard who checks badges while the reader is waiting on a part.
Label each purchase preventive, detective, corrective, or compensating, and say which one still works when the badge reader is powered off.