grceng.academy
Review lab 40 bonus XP

Challenge the evidence pack

Start labRead the room

Objectives

Review six independent claims. The pack's 'all compliant' cover page is not evidence. Reject four claims using the closest distinct reason code and accept the two supported claims.

Baseline: review decisions require verified access removal; emergency changes require authorization before execution; vulnerability closure requires verified remediation; monitoring requires collection and tested alert handling. Judge only each row's stated scope.

Verdicts are accept or reject. Every rejection needs one reason code from: access-not-removed | late-authorization | unverified-remediation | untested-monitoring.

Independent control claims

SO-1 | Access review closure: reviewer rejected a former administrator's rights. Ticket says complete, but the current entitlement export still shows those rights active.
SO-2 | Emergency change authorization: block executed at 10:00. First authorization was at 11:00; next-day retrospective review is offered as proof of preapproval.
SO-3 | Vulnerability closure: a high finding was marked fixed when next week's patch window was booked. No implementation or verification has occurred.
SO-4 | Monitoring effectiveness: an agent is installed, but no logs arrive and no alert-routing or triage test exists. Installation is offered as proof of detection.
SO-5 | Normal change authorization and execution: independent approval at 09:00 covers tested revision R8 and its rollback plan; the 10:00 execution receipt matches R8 and post-change checks pass.
SO-6 | Incident containment and recovery evidence: confirmed unauthorized access has an assessed severity and timestamped timeline; isolation, persistence removal, safe-service checks, and assigned lessons-learned actions are linked.

Checks the server runs (3)

  • Every line in the fixture carries a verdict
  • Accept and reject land on the right lines
  • Each rejection cites a valid reason code

Check names are all you see here: the expectations that decide pass or fail, and the reference solution, stay on the server.

Step-by-step hints

The guided walkthrough, in full. It is free: no XP cost, and it does not touch the paid hint ladder or the reveal gate.

  1. Step 1

    Read the request before the artefact

    Establish the claim and baseline before evaluating each independent row.

  2. Step 2

    Judge every line, including the boring ones

    Include every row once; a good evidence pack can contain both valid records and unsupported conclusions.

    Every line in the fixture carries a verdict

  3. Step 3

    Separate what is wrong from what is merely ugly

    Accept supported claims within their stated scope. Reject a directly contradicted claim rather than inventing missing facts.

    Accept and reject land on the right lines

  4. Step 4

    Say why, in the vocabulary the programme uses

    For rejected rows, identify the immediate control failure: retained rights, approval timing, premature closure, or unproven detection. Leave reasons empty for accepted rows.

    Each rejection cites a valid reason code

Rules summary

  • XP on pass

    40 bonus XP the first time every check goes green.

  • Paid hints

    2 available. Each costs 25% of the lab XP (about 10 XP).

  • Reveal solution

    Scores 0 XP and unlocks only after 3 check runs.

  • Attempt cap

    60 check runs per learner. The runner warns you in the last 10.

  • Drafts

    Your editor content is saved in this browser, so a reload will not lose work.

  • Walkthrough

    Always free and never penalised: use it before spending a hint.