Which of the following would an internal technical security audit BEST validate?

The configuration management and control task of the certification and accreditation process is incorporated in which phase of the System Development Life Cycle (SDLC)?

Which of the following BEST describes how access to a system is granted to federated user accounts?

A security practitioner has been tasked with establishing organizational asset handling procedures. What should be considered that would have the GRFATEST impact to the development of these procedures?

An internal Service Level Agreement (SLA) covering security is signed by senior managers and is in place.
When should compliance to the SLA be reviewed to ensure that a good security posture is being delivered?