Exercise 1: What the Safe Ticket Note Records and Deliberately Omits — Possible Solution ==================================================================== WHAT THE SAFE VERSION RECORDS ------------------------------ Per this chapter's table, the safe note reads "Identity verified via independent callback per Chapter 4 process" - it records the fact that verification happened, and which method was used to do it. WHAT IT DELIBERATELY LEAVES OUT ------------------------------ It omits the actual sensitive content used in that verification - the specific date of birth or mother's maiden name that the unsafe version recorded directly. The safe note never states what the answers actually were, only that the process was followed. WHY THAT SPECIFIC OMISSION IS THE POINT ------------------------------ A later reader of the ticket - another technician, an auditor, anyone reviewing the case - needs to know *that* the identity check happened and *how*, in order to trust the resolution and, if needed, retrace the process. They don't need the actual sensitive values to get that assurance. Recording the real answers adds no value for that purpose, while creating a new, unnecessary copy of sensitive personal data sitting inside a ticket system that, per this chapter, "is often readable by a wider audience than the sensitive data ... warrants." WHY THIS ISN'T JUST ABOUT PASSWORDS OR RESET CODES SPECIFICALLY ------------------------------ This generalizes the same underlying logic from Chapter 5 (never recording a password value, only that a reset occurred) to any sensitive verification data - the useful information is always "this step happened, using this method," not the raw sensitive content that made the step possible. WHY THIS WORKS AS AN ANSWER ------------------------------ It identifies exactly what the safe note preserves (the fact and method of verification), what it omits (the actual sensitive answers), and explains why the omitted part adds no value to a later reader while creating unnecessary exposure if it were kept.