Anything without a named SME review is labeled on the question itself.
Community review
Unreviewed questions stay available with honest labels. Community proposals help surface problems, while staff review—not vote totals—controls the published answer key.
Votes can be changed or removed and are tied to authenticated accounts.
High votes prioritize review; they never rewrite questions or answers automatically.
Correction proposals
Open, accepted, and declined proposals remain visible for accountability. Proposals may discuss answer keys and contain spoilers.
Original contextTriage a compromised workstation The SOC received an impossible-travel alert for an accounting user. Ten minutes later, the endpoint platform flagged suspicious PowerShell on the user's workstation, WKSTN-22. Assume the incident has been validated and scope is still being determined.
This overall felt a bit too easy to be "intermediate" some of the questions lend themselves to the answers and I feel like a real PBQ would be substantially harder