Please answer ALL the questions carefully. Thanks

54- During recent audit, it was discovered that employees are using personal emails to send sensitive documents even though policy strictly prohibits this practice. Which of the following describes the type of control that could prevent this from happening? A) Management B) Operational C) Technical D) Access 55- Security administrator at an educational institution has been asked to evaluate current access controls in place at the student testing center and provide recommendations for improvement. After auditing the center's processing, procedures, and a logical controls, the administration finds that controls related to students identification and authentication are inadequate. Which of the following areas of improvement would be MOST appropriate for administrator to recommended (select three answers) A) development of new policies focused on the password complexity B) Requirement to present a photo ID when entering the testing center C) Keystroke dynamics when scheduling testing appointment. D) Distribution of asynchronous soft token to teachers supplying tests to the testing center E) Fingerprint verification at the testing center F) Use of a PIN in conjunction with student ID cards G) Issuing of smart cards to testing instruction H) Requirement of student mailing addresses on ID cards 56- An organization consulted with an outside agency to complete a security analysis of the entire network. With partial knowledge of the network, the outside agency performed several tests, one of which resulted in a core router failure. Which of the following types of tests did the outside agency MOST likely perform? A) Gray box test B) White box test C) Vulnerability assessment D) Black box test 57- A company is given a black of public class C IPv4 addresses from its ISP. Management wishes to make several web services on the LAN publicly accessible on a port 80. Which of the following would BEST accomplish this? A) Enable port triggering for the web servers B) Create DMZ using a port on the internal firewall C) implement NAT on the edge router D) Create a separate VLAN for all publicly accessible devices E) Implement port address translation