Make the first response count. Work through a ransomware scenario, weigh containment choices and build a clear response handoff from the supplied evidence.
The learning outcome
1 available labAvailable now
Evidence-led practiceReasoning, decisions and review
Clear boundariesEducational preparation
Your route through the track
A complete first-response exercise: prioritize containment, preserve evidence, evaluate recovery and produce a reasoned incident update.
Synthetic evidence, learner tasks and complete worked reviews.
Work through the supplied fictional evidence, write your decisions and compare them with complete worked answers. Use the review rubric and practical takeaway to improve your next handoff. These are self-directed guided exercises, without individual marking or a saved completion record.
These modules are planned for the expanding Pro curriculum and are not counted as available content yet.
Release timing will be announced when each module is ready.
Study references for this curriculum. The practice banks use broad study categories and do not claim exact official exam-objective coverage.