Attacks using multiple methods to spread should be classified:

A. each time the exposure is experienced

B. depending on the method used to spread

C. at the highest potential level of business impact

D. using multiple classifications for each impact