3. Practice safely without crossing legal lines
Set up a safe practice space with virtual machines, test accounts, snapshots, and intentionally vulnerable targets. You will also draw the line between legal practice, research, company policy, and criminal activity.