TRIFECTAPP — ACRONYM SCENARIO PRACTICE: CHOOSE THE CONCEPT THAT FITS
Version 1.0 | November 7, 2026

START
1. Extract the ZIP to one folder.
2. Open start-here.html in a current browser. The activity works offline without an account or installation.
3. Read each evidence card, choose an answer and select Check answer. Change a choice to retry; the previous feedback clears. Reset all choices clears answers, feedback and open worked solutions. Reloading also clears choices.
4. Record your reasoning in reasoning-worksheet.csv. Read worked-solutions.html after attempting the cases. The evidence cards and worked solutions can be printed from your browser.

FILES
- start-here.html: complete offline activity
- evidence-cards.html: printable case facts and questions, without solutions
- reasoning-worksheet.csv: blank reasoning and verification fields
- worked-solutions.html: answers, choice-specific reasoning, verification checks and sources
- README.txt: these instructions
- flashcards.csv: 41 selected terms from the existing Trifectapp acronym guide. First try explaining the acronym aloud, then reveal the expansion and original explanation. The deck is a selected reference, not the full official appendix. For CI/CD, the guide uses continuous deployment; other contexts use CD for continuous delivery. MTTR here means mean time to repair; define your measurement consistently.

SCOPE AND PRIVACY
These are original fictional learning cases, not official CompTIA exam questions or a pass prediction. No real model, account, network or security control is operated. The activity makes no network requests and has no analytics, answer submission or persistent storage. Choices are held only in the open page and reset on reload. External technical-reference links require internet access and take you to their publishers.

Each case asks for the most specific concept supported by its facts. Products can combine capabilities; a label alone does not prove that a control is correctly configured. These are original fictional teaching scenarios, not official CompTIA exam questions.

TECHNICAL REFERENCES
NIST SP 800-63B-4: authentication factors: https://pages.nist.gov/800-63-4/sp800-63b.html
NIST: single sign-on: https://csrc.nist.gov/glossary/term/single_sign_on
RFC 6749: OAuth 2.0 authorization framework: https://www.rfc-editor.org/rfc/rfc6749.html
OASIS SAML 2.0 Core: https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
MITRE: About CWE: https://cwe.mitre.org/about/index.html
FIRST: CVSS v4.0 user guide: https://www.first.org/cvss/v4.0/user-guide
NIST: NVD overview: https://www.nist.gov/itl/nvd
Microsoft: Sentinel SOAR automation: https://learn.microsoft.com/en-us/azure/sentinel/automation/automation
Microsoft: endpoint detection and response: https://learn.microsoft.com/defender-endpoint/overview-endpoint-detection-response
NIST: recovery time objective: https://csrc.nist.gov/glossary/term/recovery_time_objective
NIST: recovery point objective: https://csrc.nist.gov/glossary/term/recovery_point_objective
RFC 6960: Online Certificate Status Protocol: https://www.rfc-editor.org/rfc/rfc6960.html
RFC 2986: certification request syntax: https://www.rfc-editor.org/rfc/rfc2986.html
RFC 9989: DMARC: https://www.rfc-editor.org/rfc/rfc9989.html
RFC 7208: SPF: https://www.rfc-editor.org/rfc/rfc7208.html
RFC 6376: DKIM: https://www.rfc-editor.org/rfc/rfc6376.html
NIST SP 800-94: intrusion detection and prevention systems: https://csrc.nist.gov/pubs/sp/800/94/final

Created for Trifectapp. Source guide: https://trifectapp.com/security-plus-sy0-801-acronyms/
