A data center contains the equipment and software required for a three-tier web application:
a public-facing web server and an Oracle database, both of which are connected to storage
via a SAN. The management server that hosts all required management applications is not
connected to the SAN. What is a security best practice that should be established?

A.
Use encrypted or key exchange protocols to ensure that passwords cannot be
sniffed

B.
Only log the network traffic of the public-facing web server

C.
Allow all support personnel to log in to the application they are responsible for with
full access for faster problem resolution

D.
Connect the management server to the SAN to allow for faster problem resolution