1. List two (2) challenges to developing cybersecurity law and policy. 2. Presidential Policy Directive 41 identified the lead federal government agencies responsible for responding to a significant cyber incident. What are the three agencies and their corresponding responsibilities with respect to a response to a significant cyber incident? 3. For cyber incident response, the relationship between the federal government and the state governments can best be described as: A. A top-down approach where the federal government directs states' responses. B. Federal and state governments directing the private sector, as most of the country's critical cyber infrastructure is privately owned. c. One of coordination between various stakeholders at each level of government, where the federal government seeks to support state and local authorities. p. None of the above. 4.Is \"hacking back illegal? Yes or No and Explain. 5. What is the maximum potential penalty for failing to comply with GDPR? 6. Finish the following sentence: \"The Computer Fraud and Abuse Act (CFAA) prohibits e 7. Why was the Supreme Court's holding in Van Buren v United States significant? 8. Under what authority(s) may the FTC regulate cybersecurity practices? 9. How did LabMD Inc. v. FTC curtail the FTC's ability to regulate cybersecurity practices? 10. Implementation of the NIST Cybersecurity Framework is voluntary for the private sector. Give two (2) reasons why the private sector has nevertheless embraced the NIST Framework