A vulnerability scan finds two CVEs. CVE A has a CVSS score of 9.1 on an internal server in a private subnet with no internet access. CVE B has a CVSS score of 7.5 on an internet-facing web server, and a public exploit for it is already circulating. Which should be patched first? Explain why the CVSS score alone shouldn’t decide.

During the year, Mission Reach earned $90,000 of revenue. It collected $78,000 of that in cash during the year. It also collected $6,000 in cash for sales made last year. How much revenue does it report under the cash basis?

Which statement best describes a key difference between IFRS and U.S. GAAP?

Which principle says expenses should be recorded in the same period as the revenues they helped earn?

A customer books a $2,000 catering job with Mission Reach on May 3. Mission Reach does the job on June 10. The customer pays on July 1. When does Mission Reach record the revenue?

Mission Reach Coffee Co. has total assets of $85,000 and total liabilities of $32,000. What is total equity?

An IAM user belongs to a “Developers” group whose policy allows `s3:DeleteObject` on all buckets. The user also has a separate policy attached that explicitly denies `s3:DeleteObject` on the `prod-data` bucket. Can the user delete objects from `prod-data`? Explain why.

A new developer on your team asks what the “OWASP Top 10” is and why the security team keeps referring to it. In 1–2 sentences, explain what it is. Name any two of its categories.

A company’s Java application doesn’t contain any vulnerable code written by its own developers. However, it uses the open-source Log4j library, which has a critical vulnerability (Log4Shell). What type of security testing would have identified this risk? Why is it important for modern applications?

A company launches dozens of new EC2 instances every week, and each engineer hardens and patches their own instance by hand after launch. Audits keep finding instances with different, inconsistent security settings. What approach from this course would solve this problem? Briefly explain how.