← CYBERNETICSINTERN.COMCYBERNETIC INTERN
CYBERNETIC INTERN · RANGE

The
Range

Every range is built around a scenario that comes up in security interviews. It arrives the way real tickets arrive: wrong, vague, and already diagnosed by somebody who guessed. You investigate, you decide, and the incident reacts. Wrong moves do not deduct points. They make it bigger, and some of them cannot be undone.

16 ranges10 of 10 domains4 levels57 interview questions

New to this? Start with Meeting Room B. Recruit ranges guide you one objective at a time, mark the best first step, and keep the clock gentle. Each level after that takes some of the help away.

Every range starts as a service fault or a breach. Some faults turn out to be breaches partway through. What each range teaches is shown once you have finished it, because naming it first would give the answer away.

Recruit

No clock pressure. Guidance on. The assistant is accurate.
Networking Foundationsservice faultMeeting Room BHalf the office cannot print. The other half are fine. Something was plugged in on Monday.Not yet attemptedNetworking Foundationsservice faultIt Works On My PhoneThe intranet loads on his phone and not his laptop. Same desk, same minute.Not yet attemptedCryptography in Practiceservice faultWorks In My BrowserThe certificate was renewed last night. Every browser shows a padlock. The payment provider says it cannot verify it, and paid orders are piling up unshipped.Not yet attemptedIncident ResponsebreachSeven A.M.A ransom note in every folder of the Finance share, and the files are still changing. Nobody senior is in yet.Not yet attempted

Analyst

Minutes start to matter. The assistant is correct but generic.
Networking Foundationsservice faultThe CutoverThe site moved on Friday night. Some customers are fine, some see nothing, a few see the old site.Not yet attemptedNetworking Foundationsservice faultHang At Ninety-NineUploads stall at the end. Downloads are fine. Small files are fine. Nothing changed, apparently.Not yet attemptedNetworking Foundationsservice faultEvil TwinWifi keeps dropping in the east wing. Separately, three people mention a certificate warning.Not yet attemptedLinux Securityservice faultLoad Average FortyEvery core pinned, checkout timing out, and a kernel worker thread at the top of the list. Ops wants to kill it or reboot.Not yet attemptedDetection Engineeringservice faultFour Hundred OvernightYour new rule went live yesterday. By morning it had fired four hundred times, every one of them from the same parent process.Not yet attemptedApplication Securityservice faultSomebody Else’s InvoiceCustomers report seeing a stranger’s billing page. Not always, and never the same stranger. Engineering cannot reproduce it.Not yet attempted

Engineer

No guidance by default, no ceiling, and the assistant is sometimes confidently wrong.
Networking FoundationsbreachBeaconAn alert nobody believes, on a workstation nobody suspects, with a pattern no human produces.Not yet attemptedIdentity and AccessbreachImpossible TravelA treasury service account signed in from a country you do not operate in. The job it runs is still working perfectly.Not yet attemptedCloud Securityservice faultPrivate BucketA customer statement opens from a link on a public paste site. The bucket it lives in has never been public, and still is not.Not yet attemptedWindows SecuritybreachSigned By MicrosoftA Microsoft-signed system tool made an outbound connection from a finance laptop. The triage note says allowlist it.Not yet attempted

SME

Evidence is incomplete. "I cannot conclude that" is a correct and scoring answer.
Networking FoundationsbreachThe Agent’s EgressAn internal AI service is making thousands of outbound connections to names you cannot see. The team says it is fine.Not yet attemptedThreat IntelligencebreachAttributedA vendor report ties an address to a state-backed group. Two hundred of your hosts talked to it this month. The chair wants a yes or a no.Not yet attempted

Progress is kept in this browser only: no account. The only thing that ever leaves the page is an email address, and only if you choose to unlock an interview pack. The levels build on each other: Recruit teaches you to look before you touch, and SME expects you to say what the evidence cannot support.