incident-response-trainer
Mock scenarios · Rule-based grading
CatalogOverviewSnapshot
← Back to catalog
Network Engineeringextremely-hardMulti-Fault Backbone BrownoutCritical asset
Scenario

Backbone brownout: three overlapping faults interact and the first-noticed symptom is misleading

A extremely-hard Network Engineering scenario on Multi-Fault Backbone Brownout.

Practice this scenario

Start a graded attempt against this scenario. Your response is scored by the same deterministic rubric used across the catalog. Email and evidence content stay hidden until you start.

Launches this exact scenario. One of 3 templates in this Track + Difficulty pool.

catalog id · network-multi-fault-backbone-brownout

Training alignment

What this scenario practices, mapped to recognized frameworks.

Educational mapping only. Not a compliance attestation.

What this trains
  • Compound-fault sequencing under ambiguity
  • Restore-vs-diagnose discipline on the backbone
MITRE ATT&CKmitre-attack
  • Not applicable to this scenario.Not applicable
MITRE D3FENDmitre-d3fend
  • Network Traffic AnalysisD3-NTA
    MappedMedium confidence

    Trains the traffic-visibility posture for diagnosing interacting backbone faults.

NIST CSF 2.0nist-csf-2
  • Anomalies and Events · DetectDE.AE · DE
    MappedHigh confidence

    Trains separating the loudest alarm from the real user-impacting fault.

  • Information Protection · ProtectPR.IP · PR
    MappedMedium confidence

    Trains the change-management discipline behind staged backbone remediation.

NIST SP 800-61r3nist-sp-800-61r3
  • IR lifecycle phaseDetection & Analysis
    MappedHigh confidence

    Trains structured triage of overlapping faults with misleading early symptoms.

  • IR lifecycle phaseContainment, Eradication & Recovery
    MappedHigh confidence

    Trains one-change-at-a-time remediation and post-change validation.

CISA Cybersecurity Performance Goalscisa-cpg
  • Document Network Topology2.M
    MappedHigh confidence

    Trains the topology baseline behind multi-fault reasoning.

  • Document Device Configurations2.L
    MappedMedium confidence

    Trains the change-window documentation the triage depends on.

CIS Controls v8cis-controls
  • Network Infrastructure ManagementControl 12
    MappedHigh confidence

    Trains the network-management control under compound failure.

  • Audit Log ManagementControl 8
    MappedMedium confidence

    Trains the log-retention discipline behind change correlation.