In the security services life cycle, which phase is responsible for specifying the right solution?

• A. Initiation Phase
• B. Assessment Phase
• C. Solution Phase
• D. Implementation Phase

Answer: (C)

Determining and detailing the exact design to meet needs — including which technologies, controls, and integration approach to use — happens in the phase that specifies the solution. This is where the architecture is defined, the right components are selected, and how they will work together to satisfy security requirements is laid out. The earlier Initiation phase handles scope and objectives, the Assessment phase analyzes gaps and current state, and the Implementation phase carries out the deployment. Thus, the phase focused on specifying the right solution is the Solution Phase, since it produces the concrete design and selection that guide subsequent deployment.