| Security Threat Mitigation — attack-to-countermeasure mapping, WPA3, anti-spoof ACLs | chapter-5---security-fundamentals/security-threat-mitigation |

Priority: SSH config sequence + ACL wildcard masks + port security violation modes = simulation and MCQ core.

---