A security engineer is faced with competing requirements from the networking group and database
administrators. The database administrators would like ten application servers on the same subnet for ease of
administration, whereas the networking group would like to segment all applications from one another. Which of
the following should the security administrator do to rectify this issue?

A.
Recommend performing a security assessment on each application, and only segment the applications with
the most vulnerability

B.
Recommend classifying each application into like security groups and segmenting the groups from one
another

C.
Recommend segmenting each application, as it is the most secure approach

D.
Recommend that only applications with minimal security features should be segmented to protect them