A minimum viable product (MVP) is a version of a product with just enough features to be usable by early customers who can then provide feedback for future product development and updates / upgrades. The question specially asks about THE SECURITY RISK of the MVP. In other words, we already have an MVP, i.e., correct functionality. What we now want is to evaluate the security around this correctly functioning system, not to evaluate if it functions correctly.

This is a valid Class A reserved address. For Class A, the reserved addresses are
10.0.0.0
- 10.255.255.255.
The following answers are incorrect:
11.0.42.5
Is incorrect because it is not a Class A reserved address.
12.0.42.5
Is incorrect because it is not a Class A reserved address.
13.0.42.5
Is incorrect because it is not a Class A reserved address.
The private IP address ranges are defined within RFC 1918: RFC 1918 private ip address range
References:
3Com http://www.3com.com/other/pdfs/infra/corpinfo/en_US/501302.pdf AIOv3 Telecommunications and Networking Security (page 438)

Explanation/Reference:
Explanation:
Kerberos is a third-party authentication service that can be used to support SSO.
Incorrect Answers:
A: Non-repudiation provides assurance that a specific user performed a specific transaction that did not change. It is not, however, the primary service provided by Kerberos.
B: Confidentiality strives to prevent unauthorized read access to data. It is not, however, the primary service provided by Kerberos.
D: Authorization refers to the actions you are allowed to carry out on a system after identification and authentication has taken place. It is not, however, the primary service provided by Kerberos.
References:
Conrad, Eric, Seth Misenar, Joshua Feldman, CISSP Study Guide, 2nd Edition, Syngress, Waltham, 2012, pp. 12, 14, 15, 43

A warm site has some basic equipment or in some case almost all of the equipment
but it is not sufficient to be operational without bringing in the last backup and in some cases more
computers and other equipment.
The following answers are incorrect:
hot site. Is incorrect because a hot-site is fully configured with all the required hardware. The only
thing missing is the last backup and you are up and running.
Rolling hot site. Is incorrect because a rolling hot-site is fully configured with all the required
hardware.
cold site. Is incorrect because a cold site has basically power, HVAC, basic cabling, but no or little
as far as processing equipment is concerned. All other equipment must be brought to this site. It
might take a week or two to reconstruct.
References:
OIG CBK Business Continuity and Disaster Recovery Planning (pages 368 - 369)