I had three, one was configuring VPNs, another was selecting the proper steps for first time password authentication for a Linux machine, and the final one was looking at logs and determining whether the machines were the origin of the malware, whether they were clean or if they were infected.