When assessing the risk to a machine or network, what step should you take first?
1D0-470
A.
Analyzing, categorizing and prioritizing resources
B.
Evaluating the existing perimeter and internal security
C.
Checking for a written security policy
D.
Analyzing the use of existing management
and control architecture
Explanation:
The first step is to check for a written security policy. The next step is Analyzing, categorizing and prioritizing resources The next step is Consider Business Concerns
The next step is Evaluating the existing perimeter and internal security The next step is Analyzing the use of existing management and control architecture You first check for a written security policy to find out what is already in place and to assess the current situation.
Incorrect Answers:
A, B, D: are not the first, but above they are listed in the proper sequence.