A security engineer is faced with competing requirements from the networking group and database
administrators. The database administrators would like ten application servers on the same subnet for
ease of administration, whereas the networking group would like to segment all applications from one
another. Which of the following should the security administrator do to rectify this issue?

A.
Recommend performing a security assessment on each application, and only segment the applications
with the most vulnerability

B.
Recommend classifying each application into like security groups and segmenting the groups from one
another

C.
Recommend segmenting each application, as it is the most secure approach

D.
Recommend that only applications with minimal security features should be segmented to protect
them