Layering perimeter network protection by configuring the firewall as a screened host in a screened subnet behind the bastion host provides a higher level of protection from external attack than all other answers.

Explanation
The planning phase is the stage of the internal audit process where contact is established with the individuals responsible for the business processes in scope for review. The planning phase involves defining the objectives, scope, and criteria of the audit, as well as identifying the key risks and controls related to the audited area. The planning phase also involves communicating with the auditee to obtain relevant information, documents, and data, as well as to schedule interviews, walkthroughs, and meetings. The planning phase aims to ensure that the audit team has a clear understanding of the audited area and its context, and that the audit plan is aligned with the expectations and needs of the auditee and other stakeholders.
The execution phase is the stage of the internal audit process where the audit team performs the audit procedures according to the audit plan. The execution phase involves testing the design and operating effectiveness of the controls, collecting and analyzing evidence, documenting the audit work and results, and identifying any issues or findings. The execution phase aims to provide sufficient and appropriate evidence to support the audit conclusions and recommendations.
The follow-up phase is the stage of the internal audit process where the audit team monitors and verifies the implementation of the corrective actions agreed upon by the auditee in response to the audit findings. The follow-up phase involves reviewing the evidence provided by the auditee, conducting additional tests or interviews if necessary, and evaluating whether the corrective actions have adequately addressed the root causes of the findings. The follow-up phase aims to ensure that the auditee has taken timely and effective actions to improve its processes and controls.
The selection phase is not a standard stage of the internal audit process, but it may refer to the process of selecting which areas or functions to audit based on a risk assessment or an annual audit plan. The selection phase involves evaluating the inherent and residual risks of each potential auditable area, considering the impact, likelihood, and frequency of those risks, as well as other factors such as regulatory requirements, stakeholder expectations, previous audit results, and available resources. The selection phase aims to prioritize and allocate the audit resources to those areas that present the highest risks or opportunities for improvement.
Therefore, option A is the correct answer.
References:
Stages and phases of internal audit - piranirisk.com
Step-by-Step Internal Audit Checklist | AuditBoard
Audit Process | The Office of Internal Audit - University of Oregon

Section: Information System Acquisition, Development and Implementation

In a bare metal or native virtualization, the hypervisor runs without a host operating system. A hypervisor, also known as a virtual machine monitor or VMM, is a type of virtualization software that supports the creation and management of virtual machines (VMs) by separating a computer's software from its hardware. A bare metal hypervisor, also called a Type I or Native hypervisor, is virtualization software that runs on host machine hardware directly, without requiring an underlying operating system12. This means that the bare metal hypervisor is the host or the operating system (OS) of the hardware1.
A guest operating system is an operating system that runs inside a virtual machine, on top of the hypervisor. A bare metal hypervisor can run multiple guest operating systems simultaneously, each with its own applications and resources. A guest operating system is not required for a bare metal hypervisor to run, but it is necessary for running applications on the virtual machine13.
Applications are software programs that perform specific tasks or functions for users. Applications can run on either the host operating system or the guest operating system, depending on the type of virtualization. In a bare metal virtualization, applications can run on the guest operating system, but not on the host operating system, since there is no host operating system. However, applications are not essential for a bare metal hypervisor to run, as they are only used by the users of the virtual machines