Infrastructure Risk Sequencing and Priority Quiz

Submit

2. Which sequence correctly reflects the order of operations in incident response?

Preparation → Detection → Containment → Recovery → Lessons Learned

Detection → Preparation → Containment → Recovery → Lessons Learned

Containment → Detection → Preparation → Recovery → Lessons Learned

Recovery → Containment → Detection → Preparation → Lessons Learned

3. True or False: Corrective controls should be implemented before detective controls in a security roadmap.

True

False

Submit

6. When implementing zero-trust architecture, which phase comes first?

Implement continuous verification

Identify and classify all assets and users

Deploy endpoint detection and response

Establish microsegmentation

7. True or False: Patch management should be implemented after deploying intrusion detection systems.

True

False

8. Which of the following should be sequenced before implementing encryption on sensitive data?

User access provisioning

Data classification and inventory

Firewall rules

Intrusion detection systems

Submit

12. When implementing a secure infrastructure roadmap, which phase should be prioritized first?

Risk assessment and threat modeling

Purchasing security hardware

User training programs

Network segmentation

13. True or False: Network segmentation should be implemented before endpoint hardening in a phased security roadmap.

True

False

14. Which control type should be implemented to detect unauthorized access after prevention fails?

Preventive control

Detective control

Corrective control

Compensating control

15. In risk-based prioritization, what is the correct formula for risk calculation?

Risk = Threat × Vulnerability × Impact

Risk = Threat + Vulnerability + Impact

Risk = Threat / Vulnerability

Risk = Impact − Vulnerability

16. Which authentication method should be prioritized first in a secure infrastructure roadmap?

Single sign-on (SSO)

Multi-factor authentication (MFA)

Biometric authentication

Password-only authentication

17. True or False: According to CompTIA Security+, administrative controls should be implemented after technical controls.

True

False

18. When sequencing security controls, which implementation order minimizes risk exposure?

Implement detective controls before preventive controls

Implement preventive controls before detective controls

Implement corrective controls first

Implementation order does not affect risk

19. A vulnerability with a CVSS score of 9.8 and an exploitable unpatched system should be addressed with what priority level?

Low priority—address within 90 days

Medium priority—address within 30 days

Critical priority—address immediately

Optional—monitor and assess later

20. Which of the following represents the correct sequence for implementing defense-in-depth?

Perimeter defense, network controls, endpoint protection, data protection

Data protection, endpoint protection, network controls, perimeter defense

Endpoint protection, perimeter defense, data protection, network controls

Network controls, data protection, perimeter defense, endpoint protection

21. In the NIST Cybersecurity Framework, what is the primary purpose of the 'Identify' function?

Detect and respond to incidents

Understand business context and risks

Implement protective measures

Recover from security breaches

Infrastructure Expert Sequencing Roadmap Items by Risk Quiz

1. The first step in developing a security infrastructure roadmap is to____.

2.

What first name or nickname would you like us to use?

2. Which sequence correctly reflects the order of operations in incident response?

3. True or False: Corrective controls should be implemented before detective controls in a security roadmap.

4. A threat actor with high capability and strong intent to target your organization represents a____ threat level.

5. The process of ranking security controls by their impact on reducing organizational risk is called____.

6. When implementing zero-trust architecture, which phase comes first?

7. True or False: Patch management should be implemented after deploying intrusion detection systems.

8. Which of the following should be sequenced before implementing encryption on sensitive data?

9. A(n)____ is a security control that prevents unauthorized access from occurring in the first place.

10. When prioritizing security incidents, an asset with high value and high exploitability represents a____ risk level.

11. In CompTIA Security+, the____ framework provides guidance on critical infrastructure protection priorities.

12. When implementing a secure infrastructure roadmap, which phase should be prioritized first?

13. True or False: Network segmentation should be implemented before endpoint hardening in a phased security roadmap.

14. Which control type should be implemented to detect unauthorized access after prevention fails?

15. In risk-based prioritization, what is the correct formula for risk calculation?

16. Which authentication method should be prioritized first in a secure infrastructure roadmap?

17. True or False: According to CompTIA Security+, administrative controls should be implemented after technical controls.

18. When sequencing security controls, which implementation order minimizes risk exposure?

19. A vulnerability with a CVSS score of 9.8 and an exploitable unpatched system should be addressed with what priority level?

20. Which of the following represents the correct sequence for implementing defense-in-depth?

21. In the NIST Cybersecurity Framework, what is the primary purpose of the 'Identify' function?