Original fictional case for the Ideas module. Ungraded. It is a self-review activity.
No tool was run and no directory was built.

Facts
Count: a stored count changes from 4 to 40. The edit log is empty.
Account: rina is signed in. The server denies rina's read of noor's private note.
Bag: the note is shown as standard Base64, with no key.
Envelope: a different copy is marked encryption, and the key is not on the card.
Grant: read owned-notes during this lesson. Excluded: scanning and any other host.
Proposal: scan a different public host.
Directory line: dc-1 holds the club directory.
Name line: notes.lab.invalid A 192.0.2.44.

Rubric. Write one line each from these facts.
1. The count change directly harms integrity. Reading would be confidentiality. A service that fails to load would be availability.
2. Sign-in succeeded. The deny is authorization, and the server makes it.
3. The Base64 bag is encoding. The envelope is encryption. Neither card is a hash.
4. The public-host scan is outside the grant. Stop before any command.
5. dc-1 is the domain controller. The A record is a DNS record, not the directory.

Closing note
These cards are the required path. A live tool, a real password check, and a real directory remain deferred.
This stage does not train an Active Directory attack and does not authorize a target.