SCLE Module 6 case studies
SCLE Module 6 · Put your knowledge to work in context.
SCLE Module 6 is a multiple-choice module exam built around eight domains that mirror the classic security certification knowledge areas: Security and Risk Management (15%), Asset Security (10%), Security Architecture and Engineering (13%), Communication and Network Security (13%), Identity and Access Management (13%), Security Assessment and Testing (12%), Security Operations (13%), and Software Development Security (11%). It suits practitioners who already hold a foundational security credential or have hands-on experience and want to prove breadth across governance, engineering, and operations rather than depth in a single specialty. The SCLE Module 6 case studies are 5 cases and about 4,561 words.
1The Known SQL Injection and the Six-Week API
Meridian Mutual is a regional insurer with 1,400 staff and a claims portal written in 2011 that holds 340,000 policyholder records. An external penetration test confirmed a blind SQL injection in the claim-search function that returns full database contents from a single crafted parameter, using only a valid low-privilege agent login.
883 words, about 4 min2FIPS Scope, a File-Server CA, and Devices That Cannot Be Patched
Northline Health operates six rural clinics with 400 staff and a cloud-hosted electronic health record. A payer contract now requires that all ePHI be protected with FIPS 140-2 validated cryptography in transit and at rest, and the compliance team has interpreted this as a blanket rule.
919 words, about 5 min3Segmentation for a Flat Plant Network
Corvane Components runs three manufacturing plants and a distribution center on a single flat /16 network with 1,200 managed endpoints. Programmable logic controllers on each plant floor share the same VLAN as office laptops, and contractor laptops plug into wall ports with no registration.
915 words, about 5 min4Two Forests, 1,100 Ghost Accounts, One Shared POS Login
Halden Retail has 5,000 employees and has just acquired a 700-person online outlet. The two companies run separate Active Directory forests with no trust, different naming conventions, and no shared directory.
875 words, about 4 min5Ransomware With Domain Admin: The First 24 Hours
Drayton Freight runs dispatch and warehouse operations for 900 vehicles from a single data center. At 02:10 on a Tuesday the security operations center received an EDR alert for a credential-dumping tool on a finance workstation.
969 words, about 5 min