The answer i am thinking is C but need to validate 

An organization is developing a disaster recovery plan that requires data to be backed up and available at a moment's notice.

Which of the following should the organization consider FIRST to address this requirement?

A. Implement a change management plan to ensure systems are using the appropriate versions.

B. Hire additional on-call staff to be deployed if an event occurs.

C. Design an appropriate warm site for business continuity.

D. Identify critical business processes and determine associated software and hardware requirements.

An organization is referencing NIST best practices for BCP creation while reviewing current internal organizational processes for mission-essential items.

Which of the following phases establishes the identification and prioritization of critical systems and functions?

Options:

A Review a recent gap analysis.
B Perform a cost-benefit analysis.
C Conduct a business impact analysis.
D Develop an exposure factor matrix.    

An organization's hunt team thinks a persistent threats exists and already has a foothold in the enterprise network.

Which of the following techniques would be BEST for the hunt team to use to entice the adversary to uncover malicious activity?

Options:

A Deploy a SOAR tool.
B Modify user password history and length requirements.
C Apply new isolation and segmentation schemes.
D Implement decoy files on adjacent hosts.    

NOTE : someone is saying the answer C and other is saying D ... I am confused .. Please help to guide with the correct answer with the justification 

Question:

In connection with the company's growing business development, the company added an application and replaced several computers with the latest operating system in its business processes. As an IT, explain the detailed steps that will be taken for the addition of this application and hardware.

*Notes: Your Answer Must Cited From Journal or Textbook and Write the References in APA Style