Judge the standards evidence pack

Objectives

Judge six independent, narrow claims. Accept evidence that supports only the stated purpose. Do not infer full certification or PCI compliance.

Baseline: stage 1 establishes readiness, not certification. The SoA needs justified Annex A exclusions. Segmentation exclusions need tested isolation. Post-authorization verification-code retention is prohibited even when encrypted.

Verdicts are accept or reject. Every rejection needs one reason code from: readiness-not-certification | unjustified-exclusion | untested-isolation | prohibited-retention.

EV-1 | A stage 1 readiness report is offered as the sole proof that ISO certification has been awarded. No stage 2 assessment or certification decision exists.
EV-2 | The SoA excludes a necessary physical control with the note "cloud" and no further rationale, despite scoped offices and local equipment. Claimed purpose: adequate exclusion justification.
EV-3 | A VLAN diagram alone is offered as proof of effective isolation for a PCI scope exclusion; no configuration review or isolation tests exist.
EV-4 | Encrypted card verification codes remain in debug logs after authorization. The team claims encryption makes this compliant.
EV-5 | A stage 2 sample traces an applicable access control through the risk treatment plan, SoA implementation status, approved configuration, completed review records and interviews. The claim is limited to implementation evidence for that sampled control.
EV-6 | The merchant scope record lists PAN flows, connected and security-impacting systems, provider responsibilities, approved firewall rules and current isolation tests from relevant excluded networks. The claimed office exclusion matches the tested boundary and no other security influence exists.

Step-by-step hints

The guided walkthrough, in full. It is free: no XP cost, and it does not touch the paid hint ladder or the reveal gate.

1. Step 1

   Read the request before the artefact

   Read each independent claim and its baseline before assigning a verdict.

2. Step 2

   Judge every line, including the boring ones

   Include all six evidence identifiers once.

   Every line in the fixture carries a verdict

3. Step 3

   Separate what is wrong from what is merely ugly

   Separate readiness from certification and document claims from tested operation. Accept the two limited claims supported by relevant evidence.

   Accept and reject land on the right lines

4. Step 4

   Say why, in the vocabulary the programme uses

   Use the closest supplied reason code for each rejection. Accepted claims do not need a rejection reason.

   Each rejection cites a valid reason code

Rules summary

• XP on pass

  40 bonus XP the first time every check goes green.

• Paid hints

  2 available. Each costs 25% of the lab XP (about 10 XP).

• Reveal solution

  Scores 0 XP and unlocks only after 3 check runs.

• Attempt cap

  60 check runs per learner. The runner warns you in the last 10.

• Drafts

  Your editor content is saved in this browser, so a reload will not lose work.

• Walkthrough

  Always free and never penalised: use it before spending a hint.