1. Which are the most likely vectors to break the system? 2. Does anyone have a "sane" testing strategy?