QUESTION 11 Short Answer Question: Identify the type of legislation of the following examples (if it is a Law, Regulation, Standard, or Guidelines?) (2 marks) NIST. A Guideline ISO/27001. B. Standard The Oman Cyber Crime described in Royal Decree No12/2011. C Law Industrial safety from ministry of Labour. D. Regulation QUESTION 12 Short Answer Question: How the attacker can exploits data input validation of the application. Give example that clarifies this issue. (2 Marks) Attacker User QUESTION 13 Short Answer Question: Map the following scenarios to their appropriate term (Auditing OR Monitoring). (2 marks). Reading in log files to find if there are any suspicious activities in a system. Viewing PC performance from windows task manager. A Auditing Using IP cameras to see if there is a physical violation to a physical B. Monitoring access control to a building. Checking if software used in a system are licensed