An online banking application has had its source code updated and is soon to be re-launched. The
underlying infrastructure has not been changed. In order to ensure that the application has an
appropriate security posture, several security-related activities are required.

Which of the following security activities should be performed to provide an appropriate level of
security testing coverage? (Select TWO).

Within a large organization, the corporate security policy states that personal electronic devices
are not allowed to be placed on the company network. There is considerable pressure from the
company board to allow smartphones to connect and synchronize email and calendar items of
board members and company executives. Which of the following options BEST balances the
security and usability requirements of the executive management team?