M1 / F3
Encryption means we reached the right owner.
A padlock on TrackPort looks like proof the phone is talking to Riverstone.
Go deeper: F3
Read the correction ↗✳ Learn / Common mistakes
The claim, then the correction.
These pages are a wrong turn you can send someone back to. They do not replace the field lessons. Finish any three and you should be able to name the lesson each one points at.
M2 / F4
Authentication proved which human was present.
A successful MFA prompt for jordan.h looks like Jordan was holding the phone.
Go deeper: F4 · S1
Read the correction ↗M3 / F5
Zero trust is a product we bought, or the contractor VLAN.
A vendor slide and a new VLAN both get the label because the network diagram changed.
Go deeper: F5
Read the correction ↗M4 / F2
CVSS alone is the patch order.
Two scanner rows with the same high number look like a fair queue, and the higher number looks more urgent.
Go deeper: F2 · S2
Read the correction ↗M5 / F7
The alert title is the incident fact.
“Impossible travel for jordan.h” is short enough to paste into a payroll email.
Go deeper: F7 · S1
Read the correction ↗M6 / F8
The framework spreadsheet means we are secure, or certified.
A completed grid of categories looks finished, and the word framework sounds like a certificate.
Go deeper: F8
Read the correction ↗M7 / F6
A backup on a writable share is a restore plan.
The 02:00 copy finished, so the warehouse looks recoverable.
Go deeper: F6
Read the correction ↗M8 / S4
The model’s text is authority.
LanePay wrote “Priya approved” in a sentence that sounded like a finance decision.
Go deeper: S4 · G3 · G2 · G1 · G4
Read the correction ↗