QUESTION 1 Why was the FTC unable to enforce their authority to regulate cybersecurity business practices in LABMD? O a. The order issued by the FTC was overly broad and therefore unenforceable. O b. Medical laboratories are a specialty business and thus not subject to FTC regulations. Oc. LABMD was using cybersecurity standard practices, holding them to a higher industry standard would have been unconstitutional. Od. There was no way to prove any breach was a direct result of LABMD's cybersecurity shortcomings. QUESTION 2 Why does the FTC have authority to regulate the cybersecurity failures of some businesses? Oa. Government agencies can justify broadening their authority whenever they see a need to do so and the FTC decided to enforce cybersecurity practices. Ob. As head of the Executive Branch, the President granted the authority to the FTC to regulate cybersecurity practices. Oc. Congress passed the FTC Act and included cybersecurity as an area where the FTC could regulate. Od. Sec. 5 of the FTC Act (prohibition of unfair or deceptive business practices that affect commerce) was expanded in Wyndham to include the failure of businesses to enact "reasonable" cybersecurity practices that may prevent breaches.