Which of the following is considered a Windows security administration best practice?

Question $3$ options:

Install firewalls to create a demilitarized zone $($DMZ$).$

Communicate only with stakeholders who have a need to know; share as little information as possible.

Ensure all developers are trained on developing secure applications.

Ensure the operating system and all software are up to date for all computers.