one source is saying B and other is saying C i am confused ... please guide with the justification 

Which of the following BEST sets expectation between the security team and business units within an organization?

Options: A Risk assessment
B Memorandum of understanding
C Business impact analysis
D Business partnership agreement
E Services level agreement

An organization's hunt team thinks a persistent threats exists and already has a foothold in the enterprise network.

Which of the following techniques would be BEST for the hunt team to use to entice the adversary to uncover malicious activity?

Options:

A Deploy a SOAR tool.
B Modify user password history and length requirements.
C Apply new isolation and segmentation schemes.
D Implement decoy files on adjacent hosts.    

NOTE : someone is saying the answer C and other is saying D ... I am confused .. Please help to guide with the correct answer with the justification 

A Chief Information Officer is considering migrating all company data to the cloud to save money on expensive SAN storage.

Which of the following is a security concern that will MOST likely need to be addressed during migration?

Options:

A Latency
B Data exposure
C Data loss
D Data dispersion    

NOTE : someone is saying C and other is saying A ........Please help to share the answer with the justification .,

An organization is referencing NIST best practices for BCP creation while reviewing current internal organizational processes for mission-essential items.

Which of the following phases establishes the identification and prioritization of critical systems and functions?

Options:

A Review a recent gap analysis.
B Perform a cost-benefit analysis.
C Conduct a business impact analysis.
D Develop an exposure factor matrix.