Full Disk Encryption (FDE) ensures that all data on the drive is encrypted, preventing unauthorized access even if the device is lost.

Creating a VLAN for Wi-Fi-enabled environmental sensors is the most likely and appropriate action.
Security+ SY0-701 recommends network segmentation for IoT and sensor devices to reduce attack surface and limit lateral movement. A dedicated VLAN isolates sensors from critical systems while allowing controlled access to data collectors or management platforms.
Adding items to a risk register (A) documents risk but does not provide protection. Physically air gapping (C) contradicts the requirement for Wi-Fi connectivity. Configuring TLS 1.2 (D) is beneficial for data-in-transit protection but does not address network-level isolation and blast-radius reduction.
Thus, B: Create a VLAN for the sensors best aligns with secure design.

Infrastructure as Code (IaC) enables organizations to automate the provisioning, configuration, and deployment of servers through machine-readable scripts rather than manual processes. SY0-701 emphasizes IaC as a key component of DevOps and secure deployment pipelines. By using IaC, server builds become repeatable, standardized, version-controlled, and much faster.
This directly addresses the company's goals:
Better control: IaC ensures predictable, consistent configuration across all servers.
Standardization: Scripts eliminate drift by applying identical configurations.
Lower build time: Automation significantly accelerates server creation and eliminates manual intervention.
IoT (A) refers to Internet-connected smart devices and is unrelated to server deployment. PaaS (C) offers development platforms but does not automate infrastructure builds. ICS (D) refers to industrial control systems, not IT server architecture.
Therefore, the only correct architecture that meets all objectives is IaC, a foundational technology for modern automated infrastructure.

The best answer is A. Implementing an update after a board grants approval.
Change management is the formal process used to request, review, approve, test, document, and implement changes to systems and environments in a controlled manner. A common example is submitting a proposed change to a change advisory board (CAB) or other approval authority, receiving approval, and then implementing the update according to procedure.
This answer reflects the structured governance process that Security+ associates with proper change management.
Why the other options are incorrect:
B). Setting a new password for a userThis is a routine administrative or support task, not a formal example of change management.
C). Performing a penetration test before deploying a patchPenetration testing is a security assessment activity.
It may support decision-making, but it is not itself the best example of the change management process.
D). Auditing all system equipment before sending the list to the Chief Executive OfficerThis is closer to inventory or audit work, not change management.
From a SY0-701 perspective, change management is about controlled, approved, and documented changes to the environment. Therefore, A is the correct answer.

Investigation is the incident response step that involves analyzing evidence, developing hypotheses, and confirming or denying possible attack paths. During investigation, analysts review logs, endpoint data, network telemetry, alerts, threat intelligence, and user activity to determine what happened, how the attacker operated, and what systems were affected. Identification is the stage where an event is recognized as a potential incident. Preparation involves policies, tools, training, playbooks, and readiness before an incident occurs. Containment focuses on limiting the attacker's access and preventing further damage after the incident is understood enough to act. Because the question specifically mentions forming and testing hypotheses using multiple sources, the activity is investigative analysis, making investigation the correct answer.