Challenge Zone · Subject challenge

IT · Access management

Is This a Vulnerability?

Turn a system concern into a case.

5–20 min3 levels

A shared administrator account still works after a contractor leaves, and activity logging is disabled. Assess the risk and build an investigation brief.

Assess the risk

Choose your level

Play Is This a Vulnerability?.

Beginner · Yes or No

Is This a Vulnerability?

A shared administrator account still works after a contractor leaves, and activity logging is disabled. Is this a vulnerability?

SHARED ADMIN ACCOUNT · FORMER CONTRACTOR ACCESS · LOGGING DISABLED

Before you start

What you need.

  • A browser
  • The access scenario provided here
  • A reason you can defend

How it works

Your path.

  1. 01 /

    Call it

    Judge whether the access setup is a real concern.

  2. 02 /

    Rate it

    Place the concern on a risk scale and justify the rating.

  3. 03 /

    Build the case

    Write a claim, supporting reasoning, and recommended next step.

What you walk away with

Expected outcomes.

01 /

A judgment grounded in system evidence

02 /

A risk rating with a clear rationale

03 /

A concise preliminary investigation brief

Then you get to say: “I turned an access-management concern into a case worth investigating.”