QUESTION $9$

Which of the following is correct when discussing session management and exception management?

a$.$

Session management manages sessions between the web application and the users.

b$.$

Exception management is when a decision is made not to apply a certain internal cybersecurity policy based on functional or strategic factors.

c$.$

Risk acceptance is similar to exception management.

d$.$

None of the above are correct.

e$.$

All of the above are correct.