grceng.academy
Review lab 40 bonus XP

Review the quarterly boundary evidence

Start labRead the room

Objectives

The network lead claims the quarterly review is complete because every row has an attachment. Judge whether each independent row supports its stated claim; no row supplies missing evidence for another.

Reject a row for its single primary defect: broad-access for unrestricted initiation, detection-not-prevention for an alert-only blocking claim, incomplete-coverage for a missing observation period, or missing-approval for an unapproved access change. Accept rows that substantiate their stated limited claim.

Verdicts are accept or reject. Every rejection needs one reason code from: broad-access | detection-not-prevention | incomplete-coverage | missing-approval.

Six independently sampled review rows

NSA-1 | Claim: approved web access only. Deployed source Internet, destination DMZ web host, TCP 443; named owner, approval, and successful allow/deny tests attached.
NSA-2 | Claim: least privilege. Deployed first rule permits every source, destination, and service indefinitely; owner and approval exist.
NSA-3 | Claim: exploit blocked. Mirrored alert-only sensor reported a signature; event has no forwarding action. Full-period records exist.
NSA-4 | Claim: rule safely unused over 90 days. Zero hits reported, but collection was disabled for 70 days; owner and approval exist.
NSA-5 | Claim: authorized new admin access. Narrow rule and complete tests exist, but no approval was requested or recorded.
NSA-6 | Claim: reviewed database dependency remains justified. Exact application-to-database tuple, named owner, current approval, full 90-day flow coverage, signed decision, and deployed snapshot attached.

Checks the server runs (3)

  • Every line in the fixture carries a verdict
  • Accept and reject land on the right lines
  • Each rejection cites a valid reason code

Check names are all you see here: the expectations that decide pass or fail, and the reference solution, stay on the server.

Step-by-step hints

The guided walkthrough, in full. It is free: no XP cost, and it does not touch the paid hint ladder or the reveal gate.

  1. Step 1

    Read the request before the artefact

    Read each claim beside its supporting facts. A complete-looking row can still overstate what those facts establish.

  2. Step 2

    Judge every line, including the boring ones

    Account for each fixture row exactly once, including rows whose limited claims are adequately supported.

    Every line in the fixture carries a verdict

  3. Step 3

    Separate what is wrong from what is merely ugly

    Compare each claim with its permission scope, inspection placement, observation window, and change authority. Do not invent missing facts.

    Accept and reject land on the right lines

  4. Step 4

    Say why, in the vocabulary the programme uses

    For each rejection, identify the one contradicted assertion and select the corresponding defect category from the brief.

    Each rejection cites a valid reason code

Rules summary

  • XP on pass

    40 bonus XP the first time every check goes green.

  • Paid hints

    2 available. Each costs 25% of the lab XP (about 10 XP).

  • Reveal solution

    Scores 0 XP and unlocks only after 3 check runs.

  • Attempt cap

    60 check runs per learner. The runner warns you in the last 10.

  • Drafts

    Your editor content is saved in this browser, so a reload will not lose work.

  • Walkthrough

    Always free and never penalised: use it before spending a hint.