Overview
Module: Module 3: Home Assistant & Secure Access
Activity type: Quiz / retrieval practice
Target: ≥80% before topic mastery unlock
Objective: Given a threat model for admin UIs, the learner can choose VPN vs tunnel vs dangerous port-forward patterns, implement an authenticated remote path (or document VPN-only), and prove unauthorized denial plus rollback.
Instruction
Instructions
In plain words: This is the teaching core. One major concept (or a tight group). Read carefully.
More detail: Use What this means under dense blocks.
Close the reading. Write answers from memory. Then self-score.
In plain words: Big idea: Close the reading.
Learn
Questions
In plain words: Read this block, then try the next action. If you feel stuck, tap What this means.
Active recall: write answers without rereading first. Target ≥80% before the gate.
In plain words: Big idea: Active recall: write answers without rereading first.
- Does an encrypted tunnel automatically enforce user authorization?
- Why are ARR admin panels poor candidates for public exposure?
- What is the origin service?
- What does fail closed mean in this lab?
- Why is a per-device identity better than sharing one reusable credential?
- What should happen when the connector stops?
In plain words: This path is about safe remote reach or private download traffic: not opening every admin page to the world.
Learn
After scoring
In plain words: Read this block, then try the next action. If you feel stuck, tap What this means.
- Missed items → return to Reading weak sections → redo Feynman Retry → reattempt missed questions.
- Passing score unlocks marking this topic complete on the module hub (still need lab gate + homework).
In plain words: Big idea: - Missed items → return to **Reading** weak sections → redo **Feynman Retry** → reattempt missed questions.