Two of the first steps in developing a network security policy are:

Question

BlackTom AI · Accepted Answer

In approaching the question about early steps in developing a network security policy, we should assess what each option implies about the initial focus.
Option 1: 'Testing security through an audit and writing the document' focuses on evaluation and documentation after some policy concepts exist. While auditing and drafting are important activities, they typically come after identifying what needs protection and where vulnerabilities lie, not as the very first steps.
Option 2: 'Hiring IT staff and finding vendors' centers on resourcing. While staffing and procurement are necessary for implementation, they do not establish the scope of protection or identify vulnerabilities, which are foundational planning activities.
Option 3: 'Deciding what assets need protecting and assessing potential vulnerabilities' directly targets defining the protected resources (assets) and understanding weaknesses in the environment. This forms the core of a risk-based policy: you know what you’re trying to defend and where your exposure is, which guides the policy content and controls to be implemented.
Option 4: 'Inventorying user devices and meeting with staff' involves gathering information about devices and engaging stakeholders, which is helpful for situational awareness, but it is more of an information-gathering step than the foundational decisions about what to protect and where the vulnerabilities lie.
Taken together, the third option emphasizes the fundamental concerns of scope (which assets) and risk (where vulnerabilities exist), which typically precede other policy activities such as auditing, staffing, or broad stakeholder meetings.

Two of the first steps in developing a network security policy are:单项选择题

类似问题

A small business uses a single Wi-Fi network for both internal business operations (like payroll and ordering) and for providing free internet access to customers. What significant vulnerability does this setup create?

In which part of the cybersecurity NIST framework would you most likely implement firewalls and encryption?

What best explains port scanning?

A firewall’s primary function is to:

On-premise systems include a server at a physical location using an internal network for internal access and firewalls for remote users’ access. Remote users had to access the ERP system through a firewall, which protected the system against unauthorized access.

What is the purpose of Windows Firewall?

Which one of the following describes how a firewall protects a local area network (LAN) connected to the internet?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单