Capability context
Skill, task, result, proof, scope, and limitations stay connected.
Result states distinguish directly proven, supported with limitations, configured but not behavior-tested, documented-only, inconclusive, not-tested, and insufficient evidence.
209Environment
- Skill
- Infrastructure environment administration
- Task
- Maintained a documented nonproduction environment spanning virtualization, firewalling, Windows, Linux, networking, and backup services.
- Result
- The environment is represented through system inventories, topology context, validation records, and operational documentation.
- Scope
- Personally operated nonproduction lab.
- Limitations
- Does not represent enterprise scale, production availability, or employer infrastructure.
Supported claim: Inventoried and documented the bounded personal Home Lab environment and its operational context.
129Proxmox
- Skill
- Virtualization administration
- Task
- Reviewed node, VM, storage, bridge, VLAN, guest-agent, snapshot, backup, and lifecycle state.
- Result
- Proxmox platform inventory and operational evidence support bounded virtualization claims.
- Scope
- Single personal Proxmox host.
- Limitations
- Does not prove clustered virtualization, high availability, or production capacity planning.
Supported claim: Reviewed Proxmox platform, virtual-machine, storage, networking, backup, and controlled restore evidence in a personal lab.
73Active Directory
- Skill
- Active Directory administration
- Task
- Reviewed domain and forest state, FSMO roles, organizational units, users, groups, Group Policy, clients, and Linux integration.
- Result
- Directory structure and supporting service evidence are available for inspection.
- Scope
- Single-domain personal lab.
- Limitations
- Does not prove multi-site design, high availability, or production directory ownership.
Supported claim: Reviewed single-domain Active Directory structure, roles, policy, membership, and integration evidence in a personal lab.
14DNS and DHCP
- Skill
- Core network-service administration
- Task
- Reviewed DNS and DHCP configuration and performed direct name-resolution and service checks.
- Result
- The evidence supports domain records, host records, scope inventory, and bounded service validation.
- Scope
- Personal Active Directory lab.
- Limitations
- Does not prove redundant DNS or DHCP failover.
Supported claim: Reviewed and tested bounded DNS and DHCP configuration and service evidence in the personal lab.
63Networking
- Skill
- Network administration and troubleshooting
- Task
- Worked with routed subnets, VLANs, VPN routes, DNS queries, IP configuration, and layered TCP connectivity tests.
- Result
- The repository distinguishes confirmed connectivity from timeouts, access limits, and untested conditions.
- Scope
- Segmented personal-lab networks.
- Limitations
- Does not prove enterprise routing, switching, or complete policy enforcement.
Supported claim: Documented and tested bounded personal-lab routing, VLAN, VPN, name-resolution, and connectivity relationships.
32pfSense
- Skill
- Firewall and routing platform administration
- Task
- Maintained pfSense inventory, segmentation documentation, and a controlled isolated restore workflow.
- Result
- Platform and restore evidence support a bounded administration claim.
- Scope
- Personal-lab firewall and router.
- Limitations
- Does not prove complete firewall-rule enforcement, NAT behavior, VPN correctness, or production recovery.
Supported claim: Documented pfSense configuration context and completed a bounded isolated restore exercise without claiming production firewall assurance.
8Windows Server
- Skill
- Windows Server administration
- Task
- Reviewed server roles, services, storage, event summaries, directory indicators, DNS, DHCP, and Group Policy.
- Result
- Authenticated inventory supports hands-on Windows Server and infrastructure-service capability.
- Scope
- Personal domain-controller lab.
- Limitations
- Does not prove continuous service health or enterprise server ownership.
Supported claim: Reviewed Windows Server roles, services, storage, directory, DNS, DHCP, and Group Policy evidence in a personal lab.
45Windows Clients
- Skill
- Domain-joined endpoint administration
- Task
- Reviewed domain membership, secure-channel state, network configuration, Group Policy application, and mapped-drive access controls.
- Result
- Windows client evidence connects identity, policy, networking, and file-access behavior.
- Scope
- Personal Windows client lab.
- Limitations
- Does not prove fleet management or production endpoint ownership.
Supported claim: Reviewed bounded Windows client domain, policy, networking, and access-control evidence in a personal lab.
58Linux
- Skill
- Linux systems administration
- Task
- Reviewed Ubuntu networking, SSH, time synchronization, logging, updates, security controls, guest integration, Kerberos, realmd, and SSSD.
- Result
- Linux inventory and remediation evidence support administration and directory-integration capability.
- Scope
- Single personal Ubuntu server.
- Limitations
- Does not prove management of a production Linux fleet.
Supported claim: Reviewed Linux service, network, logging, security, and directory-integration evidence for a personal Ubuntu server.
151Backup and Recovery
- Skill
- Backup administration and controlled recovery testing
- Task
- Reviewed backup coverage, archive state, network isolation, temporary restore VMs, validation checkpoints, cleanup, and result boundaries.
- Result
- Selected systems achieved bounded pass results while unresolved checkpoints remain clearly classified.
- Scope
- Controlled personal-lab restore exercises.
- Limitations
- Does not prove disaster-recovery readiness, production recovery, RTO, or RPO.
Supported claim: Documented backup state and completed selected isolated restore checks with unresolved and untested conditions preserved.
8Monitoring and Logging
- Skill
- Operational logging and monitoring preparation
- Task
- Reviewed rsyslog service and listener state, connectivity baselines, monitoring documentation, and planned logging expansion.
- Result
- Implemented logging is separated from planned monitoring work.
- Scope
- Personal-lab logging and validation.
- Limitations
- Does not prove a mature production monitoring or alert-response program.
Supported claim: Documented implemented logging evidence separately from planned or insufficient monitoring coverage.
19Security
- Skill
- Security-conscious infrastructure operations
- Task
- Used read-only collection, sanitization, secret review, network isolation, integrity records, and bounded result classification.
- Result
- The evidence demonstrates safe operating habits and controlled proof publication.
- Scope
- Personal-lab operations and public evidence handling.
- Limitations
- Does not represent a formal security program, SOC function, or compliance certification.
Supported claim: Demonstrated read-only collection, isolation, integrity checking, sanitization, and bounded evidence publication practices.
44Automation
- Skill
- PowerShell infrastructure automation
- Task
- Used scripts for inventory, connectivity checks, evidence capture, sanitization, structured exports, hash checks, and repository validation.
- Result
- Repeatable workflows support consistent administration, troubleshooting, and documentation.
- Scope
- Personal-lab and portfolio automation.
- Limitations
- Does not imply unattended production change authority.
Supported claim: Used repository-backed scripts and validation workflows for bounded inventory, testing, evidence capture, integrity, and publication tasks.