incident-response-trainer
Mock scenarios · Rule-based grading
CatalogOverviewSnapshot
← Back to catalog
Network EngineeringhardAsymmetric RoutingCritical asset
Scenario

TCP sessions intermittently fail across new dual-ISP design — return path different

A hard Network Engineering scenario on Asymmetric Routing.

Practice this scenario

Start a graded attempt against this scenario. Your response is scored by the same deterministic rubric used across the catalog. Email and evidence content stay hidden until you start.

Launches this exact scenario. One of 3 templates in this Track + Difficulty pool.

catalog id · network-asymmetric-routing

Training alignment

What this scenario practices, mapped to recognized frameworks.

Educational mapping only. Not a compliance attestation.

What this trains
  • Asymmetric-routing diagnosis
  • Stateful-flow restoration discipline
MITRE ATT&CKmitre-attack
  • Not applicable to this scenario.Not applicable
MITRE D3FENDmitre-d3fend
  • Not applicable to this scenario.Not applicable
NIST CSF 2.0nist-csf-2
  • Protective Technology · ProtectPR.PT · PR
    MappedHigh confidence

    Trains the protective-technology baseline behind symmetric paths.

  • Asset Management · IdentifyID.AM · ID
    MappedMedium confidence

    Trains the topology baseline.

NIST SP 800-61r3nist-sp-800-61r3
  • IR lifecycle phaseDetection & Analysis
    MappedHigh confidence

    Trains triage when stateful inspection rejects asymmetric flows.

CISA Cybersecurity Performance Goalscisa-cpg
  • Document Network Topology2.M
    MappedHigh confidence

    Trains the topology baseline.

CIS Controls v8cis-controls
  • Network Infrastructure ManagementControl 12
    MappedHigh confidence

    Trains the network-management control.

  • Network Monitoring and DefenseControl 13
    MappedMedium confidence

    Trains the monitoring discipline.