<a id="ch-06"></a>

## Chapter 6 — Three with a second step is not seven

<!-- open-cyber-academy:lesson-figures:start ch-06 -->
### Lesson map

Lesson 06. Map, example, EX052.

```mermaid
flowchart TD
  A["Fourth field true on three rows"] --> B["Print says MFA on 3"]
  B --> C{"Does 3 mean every account?"}
  C -->|No| D["Keep the four no-MFA lines"]
  C -->|Yes| E["That reading invents four flags"]
```

The count is a tally of one column. It is not a promise about the other rows.

### Logical drawing

```text
second step on
    owner email, card payments, accounting
second step off, and printed
    orders mailbox, shop admin, social page, supplier portal
not the same number
    checklist after: 7/8
```
<!-- open-cyber-academy:lesson-figures:end ch-06 -->

### Learning outcomes

After this chapter, you should be able to:

1. Name the three rows that already have a second step on the account print.
2. Keep the four `no MFA` lines.
3. Refuse to read 3 as 7.

### 6.1 The column counts flags, not wishes.

On the account list, the second-step flag is true for Rosa's own mailbox `owner@shop`, for card payments `rosa.m`, and for accounting `rosa.m`. Those are the three. The print therefore says `MFA on 3` out of `accounts 7`. The other four rows are printed, not implied: the orders mailbox, the online shop admin, the social page, and the supplier portal. Card payments and accounting share the label `rosa.m` and still are two services, both already flagged on, both used by Rosa alone. Nothing in that arithmetic says the four printed gaps grew a second step. The checklist's `after: 7/8` counts checklist items, not these seven rows, so it cannot be substituted for `MFA on 3`. Turning the four false flags to true would be a different list. This run does not contain that list.

### 6.2 Worked example

Say "three rows" when you mean the account column, and "seven items" only for the checklist.

| Claim | What the account print supports | Decision |
|---|---|---|
| "Three rows already have a second step." | `MFA on 3` | May stay |
| "Four named rows are printed without one." | The `no MFA` lines | May stay |
| "3 of 7 means the same as 7 of 8." | Different denominators | Refuse |
| "Flip the four flags." | No second run | Refuse |

> **Synthetic case.** The flags are synthetic columns. No second step is being switched on in this lesson.

### Errors and limits

A small numerator is easy to round upward. Here the printed gaps are the point of the count.

### Apply

- **EX052 — What does 3 count?** A classmate says MFA on 3 means every account now has a second step, because the checklist later reached 7 of 8. Which rows does 3 actually count, and which lines stay? *Rubric:* 3 = three rows only, owner email, card payments and accounting; the four no-MFA lines stay; 3 is not 7; the checklist 7/8 does not rewrite the account column;; 2 = keep MFA on 3 and the four lines;; 1 = the count only;; 0 = none.

<!-- open-cyber-academy:chapter-navigation:start ch-06 -->
### Continue studying — lesson 06 (chapter 06 of 20)

[← Chapter 05](#ch-05) · [Course chapter index](../SUBJECTS.md) · [Chapter 07 →](#ch-07)

Continue to the next authored lesson.
<!-- open-cyber-academy:chapter-navigation:end -->

## Worked answers

<a id="answer-ex052"></a>
**EX052.** Three rows only: the owner email, card payments, and accounting. The four no-MFA lines stay. 3 is not 7. The checklist score of 7/8 does not rewrite the account column.
