A security engineer is faced with competing requirements from the networking group and database
administrators. The database administrators would like ten application servers on the same subnet
for ease of administration, whereas the networking group would like to segment all applications
from one another. Which of the following should the security administrator do to rectify this issue?
A.
Recommend performing a security assessment on each application, and only segment the
applications with the most vulnerability
B.
Recommend classifying each application into like security groups and segmenting the groups
from one another
C.
Recommend segmenting each application, as it is the most secure approach
D.
Recommend that only applications with minimal security features should be segmented to
protect them