<a id="ch-20"></a>

## Chapter 20 — What the food-bank note can say

<!-- open-cyber-academy:lesson-figures:start ch-20 -->
### Lesson map

Lesson 20. Map, example, EX066.

```mermaid
flowchart TD
  N["A leaving note"] --> Q{"Does the sentence replace the matrix, fill a blank, or close the review?"}
  Q -->|Yes| R["Reject it"]
  Q -->|No| K["The note may cite that line"]
```

Twenty lessons meet a planning minimum. They leave the food bank's open items open.

### Logical drawing

```text
may stay
    the five printed rates
    3 of 12 and worst FB07
    the later 12 of 12, labelled as prose
must not be added
    a rewritten matrix, a day count, a recovery key
    a STIG score, a policy file, a firmware version
    a claim the food bank is secure
```
<!-- open-cyber-academy:lesson-figures:end ch-20 -->

### Learning outcomes

After this chapter, you should be able to:

1. Repeat the quick-check print and the open blanks.
2. Reject a note that replaces the print or fills a blank.
3. Name the following subject while this review stays open.

### 20.1 A note may quote the file. It may not improve the file.

A leaving note may say what was measured. From the only embedded run, keep `updates<=14d   10/12`, `encrypted       8/12`, `standard user   8/12`, `screen lock    11/12`, `backup<=7d      9/12`, and `laptops passing all five: 3/12; worst: FB07`. Keep the zeros on the keys already derived from those lists. The narrative may say, as narrative, that updates were later brought inside fourteen days, that everyday accounts became standard, that encryption and backups were finished, and that a later reading of the same five questions was twelve of twelve. Those sentences do not replace the dictionary.

The blanks stay blank. No serial string, no overdue day count, no vulnerability identifier, no EPSS value, no password, no recovery key, no firmware version, no platform-configuration value, no Secure Boot state, no STIG or benchmark score, no application-control policy, no sign-in log, no leaver name, no Windows version, and no currency amount are available to copy. The front-desk computer stays outside the denominator. Fourteen email accounts stay an unlisted count. The TPM that was switched off stays an unnamed older laptop. `FB07` stays the worst first-run row and the kind of device in the replacement note, without absorbing that unnamed laptop. Source-address filtering, container tooling, and a device-management product were not rows in this check. The food bank did not record them as passed.

Chapter 4's closing sentence stays in chapter 4. A later note may not treat that close as a finished monthly quick check, as a replaced matrix, or as a review that has ended. The note's job is to keep a reader from correcting the first print into a happier file.

### 20.2 Worked example

| Leaving-note sentence | Why it fails or stands | Decision |
|---|---|---|
| "The embedded print is 3 of 12, worst FB07." | The script | May stay |
| "A later reading of the same five questions was described as 12 of 12." | Prose, labelled | May stay |
| "The script was edited to 12 of 12 and a recovery key was attached." | Replaces the file and fills a blank | Reject |
| "Twenty lessons make the food bank secure." | The review is still open | Reject |

> **Synthetic case.** The note is a classroom page about Fenwick Community Food Bank. It is not a notice to clients.

### Errors and limits

Twenty English lessons meet Fenwick Community Food Bank's planning minimum and leave this review open. A fresh crate question can still earn its own later Fenwick lesson. These English chapters do not publish another language edition. Systems, endpoints and hardware security stays this course. Cloud and container security is the learner's following subject. Open items at the food bank stay open on that turn. These chapters do not call the food bank secure, and they do not hand anyone a qualification.

### Apply

- **EX066 — Four claims.** A classmate's leaving note rewrites the matrix as 12 of 12, adds a recovery key and a firmware version, reports a STIG score and a code-integrity policy, and says twenty lessons make the food bank secure. Which claims do you reject, and what do twenty lessons meet? *Rubric:* 3 = reject the rewritten matrix, the key, the version, the score, the policy, and the secure claim; keep the printed rates, 3 of 12, and worst FB07; twenty lessons meet the planning minimum and leave review open; do not call the food bank secure;; 2 = reject the closings and keep the print;; 1 = one claim;; 0 = none.

<!-- open-cyber-academy:chapter-navigation:start ch-20 -->
### Continue studying — lesson 20 (chapter 20 of 20)

[← Chapter 19](#ch-19) · [Course chapter index](../SUBJECTS.md) · [Next course via chapter index →](../SUBJECTS.md)

The chapter index leads to the next course in the study path.
<!-- open-cyber-academy:chapter-navigation:end -->

<a id="worked-results"></a>

## Worked answers

<a id="answer-ex066"></a>
**EX066.** Reject the rewritten matrix, the key, the version, the score, the policy and the claim that the food bank is secure. Keep the printed rates, 3 of 12 and worst FB07. Twenty lessons meet the planning minimum and leave review open.

<a id="references"></a>
