Allocate security maintenance
Which schedule covers more exposed accounts under the same staff budget?
Entering midway? Revisit Recover the club register for the preceding worked example, or start here and use the explanation below.
Start with a concrete question
Three fictional assets need whole maintenance jobs. Exposed account counts are disjoint inventories, not risk scores.
Try the initial inputs, then write a prediction before changing one setting. All calculations run locally on your CPU.
What do you expect?
Before changing a setting: Which schedule covers more exposed accounts under the same staff budget? Write what you expect and why.
Change one thing. Inspect what happens.
- Compare all orders with four hours available.
- Increase capacity and identify when plans converge.
- List missing evidence beyond exposed account count.
- Write a schedule with owners, rollback and verification.
Your settingsMechanism
Calculation belowEvidence
Compare outcomes
Compare the current results
Every bar starts at zero and uses the same numeric scale in this chart. The upper bound automatically adjusts to the largest current value (at least 1), so compare the numbers when changing inputs. Units and quantities come from each label; different kinds of quantity are not interchangeable. Displayed values are rounded to at most six significant digits.Follow the calculation
- public portal: 4 staff-hours; 100 exposed accounts; scheduled.
- internal wiki: 2 staff-hours; 20 exposed accounts; does not fit remaining capacity.
- shared kiosk: 2 staff-hours; 30 exposed accounts; does not fit remaining capacity.
- Account groups are disjoint. Count is exposure inventory, not expected compromise or a risk probability.
Compare plans under the same capacity. Account count is one decision input; exploitability and business impact need separate evidence.
Captures keep your inputs, prediction and observation. Results are recalculated from those inputs. Resetting inputs keeps your captures and challenge history.
Explain the mechanism
Allocate security maintenance
Three fictional assets need whole maintenance jobs. Exposed account counts are disjoint inventories, not risk scores.
Follow the mechanism
A schedule scans its order and accepts each whole job that fits remaining capacity.
With four hours, the portal covers 100 accounts; the two short jobs cover 50.
Exposure count omits likelihood, severity and dependencies; explain why your chosen priority is appropriate.
Worked example
public portal: 4 staff-hours; 100 exposed accounts; scheduled.
internal wiki: 2 staff-hours; 20 exposed accounts; does not fit remaining capacity.
shared kiosk: 2 staff-hours; 30 exposed accounts; does not fit remaining capacity.
Account groups are disjoint. Count is exposure inventory, not expected compromise or a risk probability.
Calculation
Used time = sum of scheduled job hours; covered accounts = sum of disjoint accounts on scheduled assets.
Try a controlled comparison
Compare all orders with four hours available.
Increase capacity and identify when plans converge.
List missing evidence beyond exposed account count.
Write a schedule with owners, rollback and verification.
What this does not establish
- All messages, people, documents and outcomes here are original fictional teaching fixtures; results are not measurements of real organizations.
Try a fresh case
Two non-overlapping assets cover 45 and 25 accounts. If both are patched, how many accounts are on patched assets?
This is a public practice check. Retries support learning; matching a number does not certify independent proficiency.
Take the investigation further
Choose any extension. These are project prompts for you to carry out; they are not automatically assessed.
School investigation
Create a new case with different numbers and explain your decision to a classmate.
College investigation
Implement or analyze a fresh case, document assumptions and compare at least two alternatives.
Workplace investigation
Prepare a decision artifact with evidence, operating constraints, an owner and a follow-up measurement.
Keep the evidence, choose your next step
Completion records your own decision that you have worked through this investigation. Practice checks and independent project evidence are separate.