Which of the following is a security concern with deploying COTS products within the network?

The database team has suggested deploying a SOA based system across the enterprise. The
Chief Information Officer (CIO) has decided to consult the security manager about the risk
implications for adopting this architecture. Which of the following are concerns that the security
manager should present to the CIO concerning the SOA system? (Select TWO).

The security team for Company XYZ has determined that someone from outside the organization

has obtained sensitive information about the internal organization by querying the external DNS
server of the company. The security manager is tasked with making sure this problem does not
occur in the future. How would the security manager address this problem?

Unit testing for security functionality and resiliency to attack, as well as developing secure code
and exploit mitigation, occur in which of the following phases of the Secure Software Development
Lifecycle?