Quick Knowledge Checks

Quick Checks are short, single-scenario exercises for a spare few minutes, lighter than a full Decision Lab. Six are live below — pick any one and go.

Spot the phishing clue

From: "IT Support" <helpdesk@company-verify-account.com>
Subject: Your mailbox is 98% full, verify now to avoid suspension

What is the single biggest red flag here?

This is one clue out of many. Phishing Hunter walks through a full investigation.

Choose the correct firewall placement

Network layout:
Internet
   ↓
   ???
   ↓
Internal LAN (finance servers, employee workstations)

Where should the firewall go?

Classify one SOC alert

02:14:07 — Failed login for user "admin" from IP 41.222.13.9 (external, unrecognized country)
47 attempts in 60 seconds. Account not yet locked.

How should you classify this alert?

Identify the risky permission

A new note-taking app requests these permissions on install:
Camera · Storage · Contacts · Location (while using app) · Device Admin (full device control)

Which permission is the biggest red flag for a simple note-taking app?

Classify a document

File: "Q3_Customer_List.xlsx"
Contains: full names, email addresses, phone numbers, and partial payment card numbers for 12,000 customers.

How should this document be classified?

Select the best incident action

Your laptop screen shows a ransom note. Files on the shared drive are visibly being renamed and encrypted right now, in real time.

What's the first action you should take?