Effective user involvement is the most critical factor in ensuring that the application meets business objectives.
A great way of getting early input from the user community is by using Prototyping. The prototyping method was formally introduced in the early 1980s to combat the perceived weaknesses of the waterfall model with regard to the speed of development. The objective is to build a simplified version (prototype) of the application, release it for review, and use the feedback from the users' review to build a second, better version.
This is repeated until the users are satisfied with the product. t is a four-step process:
initial concept,
design and implement initial prototype,
refine prototype until acceptable, and
complete and release final version.
There is also the Modified Prototype Model (MPM. This is a form of prototyping that is ideal for Web application development. It allows for the basic functionality of a desired system or component to be formally deployed in a quick time frame. The maintenance phase is set to begin after the deployment. The goal is to have the process be flexible enough so the application is not based on the state of the organization at any given time. As the organization grows and the environment changes, the application evolves with it, rather than being frozen in time.
Reference(s) used for this question:
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third
Edition ((ISC)2 Press) (Kindle Locations 12101-12108 and 12099-12101). Auerbach
Publications. Kindle Edition.
and
Information Systems Audit and Control Association, Certified Information Systems Auditor
2002 review manual, chapter 6: Business Application System Development, Acquisition,
Implementation and Maintenance (page 296).

Due care are the steps taken to show it has taken responsibility for its actions.

The Occupant Emergency Plan (OEP) provides the response procedures for
occupants of a facility in the event of a situation posing a potential threat to the health and safety
of personnel, the environment, or property.
Such events would include a fire, hurricane, criminal attack, or a medical emergency. OEPs are
developed at the facility level, specific to the geographic location and structural design of the
building.
The following are incorrect answers:
The business continuity plan addresses business processes and provides procedures for
sustaining essential business operations while recovering from a significant disruption.
The incident response plan focuses on information security responses to incidents affecting
systems and/or networks. It establishes procedures to address cyber attacks against an
organization's IT systems.
The disaster recovery plan (DRP) applies to major, usually catastrophic events that deny access
to the normal facility for an extended period.
Reference(s) used for this question:
SWANSON, Marianne, & al., National Institute of Standards and Technology (NIST),
http://csrc.nist.gov/publications/nistpubs/800-34-rev1/sp800-34-rev1_errata-Nov11-2010.pdf

The Red box basically simulates the sounds of coins being dropped into the coin slot of a payphone. The traditional Red Box consisting of a pair of Wien-bridge oscillators with the timing controlled by 555 timer chips. The Blue Box, The mother of all boxes, The first box in history, which started the whole phreaking scene. Invented by John Draper (aka "Captain Crunch") in the early 60s, who discovered that by sending a tone of 2600Hz over the telephone lines of AT&T, it was possible to make free calls. A Black Box is a device that is hooked up to your phone that fixes your phone so that when you get a call, the caller doesn't get charged for the call. This is good for calls up to 1/2 hour, after 1/2 hour the Phone Co. gets suspicious, and then you can guess what happens. The White Box turns a normal touch tone keypad into a portable unit. This kind of box can be commonly found in a phone shop.

Discussion: TFTP is a curious protocol that doesn't use authentication and is often used to transfer configuration files between an administrator's computer and switch or router.
The admin's computer would have the TFTP server software installed on it and he would
SSH into the router and run a command that instructs the router to get its configuration from a TFTP server like this:
#copy running-config tftp
The router would request the IP or name of the host from where to get the config and the name of the config file. It would then be copied down into the running-config (RAM) on the router.
This is how wireshark could have seen the file transfer.
It is advisable that you use a more secure means to transfer router configuration files because of their sensitive nature. SCP or Secure Copy can be used on most mainstream routing and switching devices.
The following answers are incorrect:
- SFTP: This isn't correct because SFTP uses TCP and is on port 22.
- FTP: This is not the right answer because FTP uses TCP and ordinarily uses ports 20/21.
- SCP: Good guess but SCP doesn't use UDP or port 69 and even if you did 'see' a file transfer between SCP hosts you wouldn't see the contents of the packets because they're encrypted. Sorry. Here's more about SCP.
The following reference(s) was used to create this question:
2013. Official Security+ Curriculum.
TFTP