D is the correct answer. Justification The current risk profile may be adjusted as the result of the activities performed during the risk and control analysis. Risk response options are reviewed during the risk monitoring phase of risk management. ...

C is the correct answer. Justification Cost-benefit analysis evaluates whether it will cost more to implement and maintain a control than the control will save the enterprise by avoiding losses associated with the risk it is meant to address. It ...

A is the correct answer. Justification When validation checks are missing in data input fields, attackers are able to exploit other weaknesses in the system. For example, they can submit part of a structured query language (SQL) statement (SQL ...