You are the junior network tech for Cedar Hollow Bakehouse, a small regional
bakery chain. A new access switch is about to be racked at the distribution kitchen, but it
still has factory defaults — including a leftover service account named guest-svc
with full rights and a default secret. Before it goes live, harden management access.
Target device: cedar-acc-sw1 ·
management VLAN interface 10.42.7.2/24. Secrets must meet policy:
≥ 12 characters and ≥ 3 character classes (upper / lower / digit / special).
Self-contained formative lab. Answer keys live in the page and are inspectable, so the checklist
and score are self-reported (see library §7). The screenshot + server timestamp are supporting
evidence, not anti-cheat proof. No real names, emails, or IDs are collected — enter a
callsign only. © 2026 <AUTHOR NAME>, licensed for use within
<YOUR ORG/LIBRARY>.