Deloitte interview question

What are your first three steps when securing a server