Review the transport acceptance notes

Objectives

Six transport acceptance notes await approval. The change lead says anything encrypted can pass and that renewal is complete as soon as a CA issues a replacement.

Judge each note as written against authenticated transport and complete lifecycle evidence. Reject each defective note using its single primary reason.

Verdicts are accept or reject. Every rejection needs one reason code from: no-forward-secrecy | identity-bypass | tunnel-boundary | inventory-gap.

Reasons: no-forward-secrecy = static key transport claimed to provide forward secrecy; identity-bypass = trust or identity validation disabled; tunnel-boundary = protection claimed beyond tunnel endpoints; inventory-gap = issuance substituted for deployed-listener evidence.
SP-1 | TLS 1.2 uses static RSA key transport. Accept the claim that later server private-key theft cannot decrypt recorded sessions.
SP-2 | TLS 1.3 validates the server chain, SAN, time and usage. Negotiated parameters and wrong-name rejection tests are retained. Accept server authentication.
SP-3 | Both peers present certificates, but validation accepts any issuer and skips SAN checks for the server. Accept mutual authentication as secure.
SP-4 | A site-to-site tunnel ends at the core gateway. The application hop beyond it is plaintext. Accept the claim that the VPN encrypts that final hop too.
SP-5 | The CA issued a renewal. No listener has been probed, and neither owner nor expiry is tracked. Close the renewal control as complete.
SP-6 | Daily discovery includes standby listeners; records carry owners and expiry dates. Thirty-day alerts and post-deployment serial probes cover every listener. Accept lifecycle evidence.

Step-by-step hints

The guided walkthrough, in full. It is free: no XP cost, and it does not touch the paid hint ladder or the reveal gate.

1. Step 1

   Read the request before the artefact

   Treat each note as an independent approval decision; do not assume a neighboring note repairs missing evidence.

2. Step 2

   Judge every line, including the boring ones

   Account for every numbered note, including those whose evidence is sufficient. Do not invent extra items.

   Every line in the fixture carries a verdict

3. Step 3

   Separate what is wrong from what is merely ugly

   Trace what each observation actually proves. Separate issuance from installation, authentication from encryption, and packet routing from cryptographic boundaries.

   Accept and reject land on the right lines

4. Step 4

   Say why, in the vocabulary the programme uses

   Choose the defined reason that matches the primary defect in a rejected claim. A supported claim needs no invented defect.

   Each rejection cites a valid reason code

Rules summary

• XP on pass

  40 bonus XP the first time every check goes green.

• Paid hints

  2 available. Each costs 25% of the lab XP (about 10 XP).

• Reveal solution

  Scores 0 XP and unlocks only after 3 check runs.

• Attempt cap

  60 check runs per learner. The runner warns you in the last 10.

• Drafts

  Your editor content is saved in this browser, so a reload will not lose work.

• Walkthrough

  Always free and never penalised: use it before spending a hint.