FICTIONAL PRACTICE SETTINGS

CARD A
Owner: learner
Target: owned, isolated, disposable VM
Allowed action: the listed local training exercise using invented data
Excluded: external connections and real accounts
Stop: activity leaves the VM or unexpected private data appears

CARD B
Owner: school
Target: public school portal
Permission: none for security testing
Proposed action: run the same training exercise against the portal

CARD C
Owner: training provider
Target: provider's named challenge lab
Permission: official rules permit the listed puzzle only
Excluded: provider login, scoreboard and other learners
Stop: unclear target or action; ask through the provider's stated channel