A data center contains the equipment and software required for a three-tier web application: a
public-facing web server and an Oracle database, both of which are connected to storage via a
SAN. The management server that hosts all required management applications is not connected
to the SAN. What is a security best practice that should be established?

A.
Allow all support personnel to log in to the application they are responsible for with full access
for faster problem resolution

B.
Connect the management server to the SAN to allow for faster problem resolution

C.
Only log the network traffic of the public-facing web server

D.
Use encrypted or key exchange protocols to ensure that passwords cannot be sniffed