A security engineer at a major financial institution is prototyping multiple secure network
configurations. The testing is focused on understanding the impact each potential design will have
on the three major security tenants of the network. All designs must take into account the stringent
compliance and reporting requirements for most worldwide financial institutions. Which of the
following is the BEST list of security lifecycle related concerns related to deploying the final
design?

The sales staff at a software development company has received the following requirements from
a customer: “We need the system to notify us in advance of all software errors and report all
outages”. Which of the following BEST conveys these customer requirements to the software
development team to understand and implement?

A programming team is deploying a new PHP module to be run on a Solaris 10 server with trusted
extensions. The server is configured with three zones, a management zone, a customer zone, and
a backend zone. The security model is constructed so that only programs in the management
zone can communicate data between the zones. After installation of the new PHP module, which
handles on-line customer payments, it is not functioning correctly. Which of the following is the
MOST likely cause of this problem?