A securtly analyst wants to reference a standard to develop a risk management program. Which af the following ts the BEST source for the analyst to use?

An attacker is exploiting a vulnerability that does not have a patch available. Which of the following is the attacker exploiting?

A security engineer needs to enhance MFA access to sensitive areas in a building. A key card and fingerprint scan are already in use. Which of the following would add another factor of authentication?

To reduce costs and overhead, an organization wants to move from an on-premises email solution to a cloud-based email solution. At this time, no other services will be moving. Which of the following cloud models would BEST meet the needs of the organization?

Which of the following BEST describes a security exploit for which a vendor patch is not readily available?