A systems security consultant is hired by Corporation X to analyze the current enterprise network environment and make recommendations for increasing network security. It is the consultant's first…

Question

Options

• AWhat hardware and software would work best for securing the network?
• BWhat corporate assets need to be protected?
• CWhat are the business needs of the organization?
• DWhat outside threats are most likely to compromise network security?
• EWhat is the budget for this project?
• FWhat time and resources are needed to carry out the security plan?

• A
  4% (1)
• B
  68% (19)
• E
  11% (3)
• F
  18% (5)

Explanation

On a consultant's first day, the priority is information gathering and risk-based assessment before making any recommendations. B (what assets need protection) establishes what is at risk; C (what are the business needs) ensures security recommendations align with organizational goals rather than being purely technical; D (what outside threats are most likely) provides the threat landscape context. Hardware/software choices (A) are implementation decisions made after understanding the environment. Budget (E) and resource planning (F) are project management concerns that come after the security analysis is complete. Options B, C, and D represent the foundational 'assess before prescribe' mindset.

No community discussion yet for this question.