Rapid Battle Cards 15–28
15 — Substitution vs Shuffling
Substitution: replace with lookup/pattern values.
Shuffling: swap valid values among records.
Deciding clue: substitute new surrogate values vs rearrange existing ones.
16 — Temporal Variance vs Value Variance
Temporal variance: shift dates/times.
Value variance: shift numeric values.
Deciding clue: time field vs numeric amount.
17 — Key Masking vs Ordinary Randomization
Key masking: must stay unique/repeatable where relationships rely on keys.
Randomization: generic obscuring without that same relationship requirement.
Deciding clue: preserved joins/relationship integrity.
18 — Facility vs Device Security
Facility: physical location controls.
Device: portable/endpoint controls.
Deciding clue: room/building access vs laptop/phone/storage endpoint.
19 — Credential vs Electronic-Communication Security
Credential: user IDs/passwords/identity factors.
Electronic communication: messages/channels such as email/direct messaging.
Deciding clue: protect identity proof vs protect data in communications.
20 — Single Sign-On vs Multiple-Factor Identification
SSO: one authentication reused across approved resources.
Multiple factor: more than one independent identification factor/type.
Deciding clue: reuse one verified identity vs strengthen identity proof with multiple factors.
21 — Confidentiality vs Regulatory Aggregation
Confidentiality: one highest applicable internal level.
Regulation: all applicable categories/actions remain.
Deciding clue: highest one vs additive many.
22 — General Audience vs Internal Use Only
General Audience: publicly/broadly available.
Internal Use Only: employee/member-limited.
Deciding clue: public vs internal membership restriction.
23 — Restricted vs Registered Confidential
Restricted Confidential: strong need-to-know/clearance.
Registered Confidential: access includes signed legal responsibility for secrecy.
Deciding clue: restricted clearance vs formally registered/legal responsibility.
24 — Excessive Privilege vs Legitimate-Privilege Abuse
Excessive: more rights granted than job needs.
Legitimate abuse: correct/valid rights used improperly.
Deciding clue: bad grant vs bad use.
25 — Excessive Privilege vs Privilege Elevation
Excessive: too much granted initially.
Elevation: lower rights become higher through exploit/misuse.
Deciding clue: over-granted from start vs escalated later.
26 — Service Account vs Shared Account
Service: process/batch identity for a specific task.
Shared: generic ID used by multiple humans.
Deciding clue: non-human controlled task vs unattributable shared human use.
27 — IDS vs IPS
IDS: detect/notify.
IPS: detect and automatically prevent/respond.
Deciding clue: alert vs block.
28 — Firewall vs IDS/IPS
Firewall: traffic-boundary filtering.
IDS/IPS: intrusion-pattern detection/prevention.
Deciding clue: filter network path vs identify/respond to attack behavior.