IDSs verify, itemize, and characterize the threat from both outside and inside your organization's network, assisting you in making sound decisions regarding your allocation of computer security resources. Using IDSs in this manner is important, as many people mistakenly deny that anyone (outsider or insider) would be interested in breaking into their networks. Furthermore, the information that IDSs give you regarding the source and nature of attacks allows you to make decisions regarding security strategy driven by demonstrated need, not guesswork or folklore.

Access restrictions such as access control lists and capabilities sometimes are not enough. In some cases, information needs to be tightened further, sometimes by an authority higher than the owner of the information. For example, the owner of a top-secret document in a government office might deem the information available to many users, but his manager might know the information should be restricted further than that. In this case, the flow of information needs to be controlled -- secure information cannot flow to a less secure user.

The key findings section of an assessment report provides a detailed breakdown of identified vulnerabilities, weaknesses, and gaps. It offers a comprehensive overview of the security issues discovered during the assessment.

The transport layer is the OSI model layer that will discard a segment with a bad checksum in the UDP header.
The transport layer is responsible for providing end-to-end data transmission and reliability between the source and destination hosts. The transport layer uses protocols such as TCP (transmission control protocol) or UDP (user datagram protocol) to segment, encapsulate, and deliver the data. The transport layer also performs error detection and correction using checksums, which are values calculated from the data and added to the header of each segment. The checksums are verified at the destination host to ensure the integrity of the data. If the checksum in the UDP header does not match the expected value, the transport layer will discard the segment as corrupted. The other options are not OSI model layers that will discard a segment with a bad checksum in the UDP header, as they either do not use checksums, do not operate on segments, or do not handle UDP.
References: CISSP - Certified Information Systems Security Professional, Domain 4. Communication and Network Security, 4.1 Implement secure design principles in network architectures, 4.1.1 Apply secure design principles to network architecture, 4.1.1.1 OSI and TCP/IP models; CISSP Exam Outline, Domain 4.
Communication and Network Security, 4.1 Implement secure design principles in network architectures, 4.1.1 Apply secure design principles to network architecture, 4.1.1.1 OSI and TCP/IP models