Part 1

A firewall is placed at the edge to filter unwanted or malicious traffic from the Internet before it reaches internal resources.
A WAF specifically protects against web-based attacks like XSS, CSRF, and directory traversal by filtering and monitoring HTTP traffic.
A switch is used for internal network segmentation and connecting devices within the secure network.
The web server hosts the application and should be placed behind security controls for protection.
A PKI certificate enables HTTPS, ensuring encrypted and secure communication to mitigate insecure protocol risks.
Part 2

rsa:2048 - Generates a 2048-bit RSA key pair, providing modern, recommended key strength.
/certificate/example.com.csr - Saves the certificate-signing request that will be sent to a CA.
2048 bit long modulus - Confirms the key was generated with the intended 2048-bit length, validating the command sequence.

Insider threats pose a significant risk to intellectual property, as insiders often have access to sensitive information and may attempt to misuse it. Training employees to recognize signs of insider threats, along with implementing monitoring and reporting protocols, helps protect intellectual property from theft or unauthorized disclosure by employees or other trusted individuals within the organization.

Capacity planning is the process of determining the resources needed to meet the current and future demands of an organization. Capacity planning can help a company develop a business continuity strategy by estimating how many staff members would be required to sustain the business in the case of a disruption, such as a natural disaster, a cyberattack, or a pandemic.
Capacity planning can also help a company optimize the use of its resources, reduce costs, and improve performance.

The correct sequence is to first establish secure baselines by determining the required configurations, deploy those configurations across systems, and finally maintain the configurations through regular updates and auditing.