OpenCyber AcademyLesson map
Lesson 10. Map, example, EX056.
flowchart TD
A["The note allows a policy review"] --> B["The note forbids trying passwords"]
B --> C{"Is a pass or a fail filed?"}
C -->|No| D["Leave the result blank"]
C -->|Yes| E["That grade is not among the findings"]
Permission to look is not a grade, and it is not permission to guess.
Logical drawing
allowed
read the e-book password-policy page
forbidden
try passwords
staff findings
sticky note, expiry calendar, warning advice
no policy pass and no policy fail
Learning outcomes
After this chapter, you should be able to:
- Keep the policy review inside the signed note.
- Keep password guessing outside it.
- Leave the review without a pass or a fail.
10.1 An allowed look is not a score.
The signed note lets Leo review whether the e-book account page uses a strong password policy. The same note forbids trying passwords. When he writes the staff summary, the three earlier findings are the sticky note, the expiry calendar, and the advice not to click through certificate warnings. A policy grade is not one of them. No minimum length, no lifetime, and no screenshot of the page is in the file. A classmate who marks the policy "strong" is filling a blank. A classmate who tries a member password "to see" has left the note. Leo may say the review was permitted. He may not say how it came out.
10.2 Worked example
Lesson table; scroll horizontally to read all columns →
| What someone cites | What the file holds | Decision |
|---|---|---|
| Review the password policy | Inside the note | Keep the permission |
| Try passwords | Outside the note | Keep the ban |
| Three findings in the summary | No policy grade | Leave the grade unwritten |
| "The policy passed." | Not recorded | Refuse |
Synthetic case. No minimum length is invented for the e-book page.
Errors and limits
A blank grade is still a blank. It is not a quiet pass and not a quiet fail.
Apply
- EX056 — Did the policy pass? Leo was allowed to review the e-book password policy and forbidden to try passwords. The staff summary lists three findings and no policy grade. What result do you record?
Show marking criteria
Rubric: 3 = no pass and no fail is in the file; the review stays allowed; trying passwords stays forbidden; do not invent a length or a screenshot;; 2 = the grade stays blank;; 1 = one boundary;; 0 = none.