# Struggled with defense-in-depth layer order, Defender for Cloud pillars, and Zero Trust in scenarios

In Lesson 10 ([[0010-security-models]]), the user missed 4 of 5 quiz questions: confused the perimeter and network layers of defense-in-depth, didn't have the layer order memorized well enough to name the innermost layer confidently, attributed the Defender for Cloud "secure score" to the wrong pillar (Assess instead of Secure), and — despite answering the Zero Trust definition question correctly — missed a Zero Trust scenario question, suggesting the definition was memorized but not yet transferable to new contexts.

**Why it matters:** getting the definition-recall question right but the applied-scenario question wrong is a fluency/storage-strength split (see teaching philosophy) — the knowledge wasn't stuck yet, just superficially available. This is a denser cluster of confusion than learning record 0001 and spans three sub-topics in one lesson, not one pair.

**Implications:** Lesson 11 ([[0011-security-models-review]]) was added as an unplanned retrieval-practice day — new scenarios, not the same question wording — targeting exactly these three gaps, plus one interleaved question from Lesson 9 (RBAC) to check the user isn't over-applying "Zero Trust" to any security-flavored scenario. Re-test this cluster at the Domain 1–2 checkpoint (now Day 12) rather than assuming Lesson 11 alone fixed it. Mnemonics given: defense-in-depth as a castle (physical→identity&access→perimeter→network→compute→application→data, outer to inner), Defender for Cloud pillars as a timeline (assess→secure→defend).