Test learners' ability to apply data privacy and cybersecurity practices to secure a remote workforce through scenario-based items. Assess selection and configuration of controls—identity and access management (MFA, least privilege, SSO), secure remote access (VPN vs. zero-trust), endpoint protection and patch management, data protection (encryption, DLP, data classification), BYOD and third-party risk mitigation, incident response and monitoring, and employee training and privacy compliance (e.g., GDPR/HIPAA). Items require risk-based decisions, policy implementation, and short analytical justification.