<a id="ch-20"></a>

## Chapter 20 — What the food bank note can say

<!-- open-cyber-academy:lesson-figures:start ch-20 -->
### Lesson map

Lesson 20. Map, example, EX066.

```mermaid
flowchart TD
  N["A food-bank note"] --> Q{"Does the sentence replace a print, fill a blank, or close the review?"}
  Q -->|Yes| R["Reject it"]
  Q -->|No| K["The note may cite that line"]
```

Twenty lessons meet a planning minimum. They leave the food bank's open items open.

### Logical drawing

```text
may stay
    both lab prints, in their own order
    13:46, 13:48, and about 13:50
    14:20, 14:25, 14:30, Wednesday 15:10, Thursday in the report
    list v1 with no invented date
    the Tuesday line and the Wednesday addition
    chapter 4's closing line, quoted once:
    Compare against a baseline, decide clean-up from evidence, report plainly and turn lessons into changes.
must not be added
    a full digest, a phone number, a payment amount
    the word clean, a donations result
    admin-was-used as a measured fact
    a merged lab, the word secure
```
<!-- open-cyber-academy:lesson-figures:end ch-20 -->

### Learning outcomes

After this chapter, you should be able to:

1. Repeat both embedded prints and the open clocks.
2. Reject a note that replaces a print or fills a blank.
3. Name the following subject while this review stays open.

### 20.1 A note may quote the files. It may not improve the files.

A food-bank note may say what was measured. From the hash script, keep the three rows in dict order, with the prefixes `0edf30e2fa30`, `3e5d3b83407c`, and `ffcab6e8630a`, and do not call a `no match` row clean. From the startup script, keep `baseline: 3 today: 5` and the NEW lines in character order, AlertPopup then TemplateUpdater, with no MISSING line. From the clocks, keep 13:46, 13:48, and about 13:50 as three traces. Keep 14:20, 14:25, and 14:30 on Tuesday, 15:10 on Wednesday for the clean-computer change, and Thursday only in the report.

The blanks stay blank. No full digest, no phone number, no payment amount, no calendar date for list v1, no donations result, and no measured use of administrator rights are available to copy. The installer stays off the USB stick. The client list stays unopened. Tomás's phone stays outside the scope. dfir-attack-lab is a supplementary repository, and neither script measured a control from it.

Chapter 4 already closed on its own sentence. The drawing above quotes that sentence once. This note does not reopen it as a finished review. Quoting the embedded lines is the note's whole permission. Polishing either script into a cleaner result is outside it.

### 20.2 Worked example

| Leaving-note sentence | Why it fails or stands | Decision |
|---|---|---|
| "Both prints remain, and about 13:50 stays beside 13:48." | The files plus the added clock | May stay |
| "15:10 was a clean computer, and Thursday is the report." | Precaution and prose | May stay |
| "The labs were merged, the photo was clean, and admin rights were used." | Replaces the files and the judgment | Reject |
| "Twenty lessons make the food bank secure." | The review is still open | Reject |

> **Synthetic case.** The note is a classroom page about Riverside Food Bank. It is not a letter to clients.

### Errors and limits

Twenty English lessons meet Riverside Food Bank's planning minimum and leave this review open. A fresh Thursday-restore question can still earn its own later food-bank lesson. These English chapters do not publish another language edition. Digital forensics stays this course. Threat intelligence and OSINT is the learner's following subject. Open items at the food bank stay open on that turn. These chapters do not call Riverside Food Bank finished, and they do not award a credential.

### Apply

- **EX066 — Four claims.** A classmate's food-bank note reorders the NEW lines, prints a full digest and a phone number, calls `photo.jpg` clean, reports a donations result, says administrator rights were used, and says twenty lessons make the food bank secure. Which claims do you reject, and what do twenty lessons meet? *Rubric:* 3 = reject the reordered NEW lines, the full digest, the phone number, the word clean, the donations result, the admin-was-used claim, and the secure claim; keep both prints, 13:46, 13:48, about 13:50, Wednesday 15:10, and Thursday only in the report; twenty lessons meet the planning minimum and leave review open;; 2 = reject the closings and keep the prints;; 1 = one claim;; 0 = none.

<!-- open-cyber-academy:chapter-navigation:start ch-20 -->
### Continue studying — lesson 20 (chapter 20 of 20)

[← Chapter 19](#ch-19) · [Course chapter index](../SUBJECTS.md) · [Next course via chapter index →](../SUBJECTS.md)

The chapter index leads to the next course in the study path.
<!-- open-cyber-academy:chapter-navigation:end -->

<a id="worked-results"></a>

## Worked answers

<a id="answer-ex066"></a>
**EX066.** Reject the reordered NEW lines, the full digest, the phone number, the word clean, the donations result, the admin-was-used claim, and the claim that the food bank is secure. Keep both prints, 13:46, 13:48, about 13:50, Wednesday 15:10, and Thursday only in the report. Twenty lessons meet the planning minimum and leave review open.

<a id="references"></a>
