A logistics firm's developers source a third of new code, including payment logic shipping in two weeks, from an AI coding assistant. The coding standard and review gates never mention assistant output. What should the security manager do FIRST? A. Run static analysis on the AI-written code B. Suspend the assistant pending vendor security review C. Extend the coding standard and review gates to assistant output D. Require developers to tag every assistant-written change (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

After a ransomware scare, a manufacturer's board funded zero trust. The network team wants an access broker deployed this quarter, but no inventory of applications, data flows or trust boundaries exists. What should the security manager do FIRST? A. Deploy the access broker for remote users first B. Map the applications, data flows and trust boundaries C. Segment the network by department before the rollout D. Pilot the access broker on executive devices (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

A bank acquired a firm whose file shares hold 20 TB of unclassified data. Integration wants it in the bank's cloud tenant in 30 days, with a regulator exam next quarter. What should the security manager do FIRST? A. Migrate it under the bank's default classification B. Inventory and classify the data and assign owners C. Encrypt the shares in place until the exam ends D. Apply the bank's retention schedule and purge first (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

A fintech's developers wrote their own encryption for a payments service launching in three weeks. It passed unit tests, and no cryptographic standard exists. What should the security architect do FIRST? A. Replace the custom code with a vetted cryptographic library B. Set a cryptographic standard and assess the design against it C. Commission a penetration test before launch D. Approve launch with a rewrite planned next quarter (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

A hospital's new scanner reports 4,000 findings. The CIO wants a board dashboard next month showing risk falling, and operations wants to patch by severity score alone. What should the security manager do FIRST? A. Patch every critical and high finding immediately B. Validate findings and map them to asset criticality and owners C. Build the dashboard from scanner severity counts D. Rescan monthly to chart open findings (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!