@ Shilpa is saying A and then saying B ..... very confusing 

@ofeliabangas is saying A 

I am confused .... would you pls guide 

A security analyst is investigating a possible buffer overflow attack. The following output was found on a user's workstation:

graphic.linux_randomization.prg

Which of the following technologies would mitigate the manipulation of memory segments?

Options: A NX bit
B ASLR
C DEP
D HSM

one source is saying B and other is saying C i am confused ... please guide with the justification 

Which of the following BEST sets expectation between the security team and business units within an organization?

Options: A Risk assessment
B Memorandum of understanding
C Business impact analysis
D Business partnership agreement
E Services level agreement

While investigating a security event, an analyst finds evidence that a user opened an email attachment from an unknown source. Shortly after the user opened the attachment, a group of servers experienced a large amount of network and resource activity. Upon investigating the servers, the analyst discovers the servers were encrypted by ransomware that is demanding payment within 48 hours or all data will be destroyed. The company has no response plans for ransomware.
Which of the following is the NEXT step the analyst should take after reporting the incident to the management team?

• A. Pay the ransom within 48 hours.
• B. Isolate the servers to prevent the spread.
• C. Notify law enforcement.
• D. Request that the affected servers be restored immediately.

Note : one source is saying B and other source is saying C ... i am confused . Please help to guide with the correct information 

An organization's hunt team thinks a persistent threats exists and already has a foothold in the enterprise network.

Which of the following techniques would be BEST for the hunt team to use to entice the adversary to uncover malicious activity?

Options:

A Deploy a SOAR tool.
B Modify user password history and length requirements.
C Apply new isolation and segmentation schemes.
D Implement decoy files on adjacent hosts.    

NOTE : someone is saying the answer C and other is saying D ... I am confused .. Please help to guide with the correct answer with the justification