A small company needs to reduce its operating costs. vendors have proposed solutions, which all focus on management of the company's website and services. The Chief information Security Officer (CISO) insist all available resources in the proposal must be dedicated, but managing a private cloud is not an option. Which of the following is the BEST solution for this company?

Options: 

A Community cloud service model
B Multinency SaaS
C Single-tenancy SaaS
D On-premises cloud service model

someone is saying option A is correct answer and other is saying option B 

Please guide 

The goal of a Chief information Security Officer (CISO) providing up-to-date metrics to a bank's risk committee is to ensure:

A Budgeting for cybersecurity increases year over year.
B The committee knows how much work is being done.
C Business units are responsible for their own mitigation.
D The bank is aware of the status of cybersecurity risks

NOTE : someone is saying A and other is saying D ... i need the correct answer with clarity 

The Chief information Security Officer (CISO) of a small locate bank has a compliance requirement that a third-party penetration test of the core banking application must be conducted annually. Which of the following services would fulfill the compliance requirement with the LOWEST resource usage?

Black-box testing
B Gray-box testing
C Red-team hunting
D White-box testing
E Blue-learn exercises

A company plans to build an entirely remote workforce that utilizes a cloud-based infrastructure. The Chief Information Security Officer asks the security engineer to design connectivity to meet the following requirements:

Only users with corporate-owned devices can directly access servers hosted by the cloud provider.

The company can control what SaaS applications each individual user can access.

User browser activity can be monitored.

Which of the following solutions would BEST meet these requirements?

Options: A IAM gateway, MDM, and reverse proxy
B VPN, CASB, and secure web gateway
C SSL tunnel, DLP, and host-based firewall
D API gateway, UEM, and forward proxy