jperezduerto.info
Security in depth · Unit 18 · Lesson 7 of 8
Exposure is a property to verify
Describe reachability using the observed path and layer, with untested contexts left unknown.
Helpful before thisReconnaissance: building an evidence-based map
After this lesson you can
- Write an exposure statement that distinguishes network reachability, application denial, and missing public-path evidence.
One idea. One situation. One reasoned decision.
How it works
An asset may be reachable from one network context and unavailable from another. Public address assignment, DNS publication, routing, filtering, and application access are distinct facts. Document which context an exposure statement refers to and which observation supports it. A service blocked at one boundary may remain reachable through another approved path, while reachability alone does not establish access to protected data.
Read the supplied record
The fictional service has a published DNS name. Its owner supplies three context records:
| Context | Result |
|---|---|
| Guest network | Attempt timed out; cause not established |
| Staff network | TLS connection completed; protected report denied by application |
| Public internet path | No observation supplied |
The staff result establishes reachability for that recorded connection, even though a later resource request was denied. The guest timeout establishes a failed attempt, not which device or policy caused it. The published DNS name does not fill the public-path evidence gap.
Avoid a single unexplained “exposed: yes/no” field. Store context, time, destination identity, layer, and result, then state the conclusion appropriate to the decision. If the owner needs a public-exposure review, record that as remaining work within its agreed scope. None of the supplied observations establishes public access to protected reports, complete network isolation, or a security incident.
The key distinction: Reachability depends on the path and controls being evaluated.
Check yourself
No timer. No penalties. Read the explanation and try again whenever you like.
This lesson’s questions have changed. Your reading progress is saved; review the updated questions.
-
Which exposure statement preserves all the supplied evidence?
Show the answer
Correct answer: TLS was reached from staff, the guest attempt timed out, and the public path remains unobserved. It names each context and keeps application denial separate from network reachability.
Try it
- WriteProduce one inventory sentence for each context. Include the observed layer and name the public-exposure question that the packet does not settle.