nerdexam
EC-Council

312-50V10 · Question #483

The practical realities facing organizations today make risk response strategies essential. Which of the following is NOT one of the five basic responses to risk?

The correct answer is C. Delegate. The five standard risk response strategies are Accept, Mitigate, Transfer, Avoid, and Exploit (for positive risks). Delegate is not a recognized risk response.

Information Security and Ethical Hacking Fundamentals

Question

The practical realities facing organizations today make risk response strategies essential. Which of the following is NOT one of the five basic responses to risk?

Options

  • AAccept
  • BMitigate
  • CDelegate
  • DAvoid

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    91% (42)
  • D
    4% (2)

Why each option

The five standard risk response strategies are Accept, Mitigate, Transfer, Avoid, and Exploit (for positive risks). Delegate is not a recognized risk response.

AAccept

Accept is a valid risk response strategy where the organization acknowledges the risk and chooses not to act unless it materializes.

BMitigate

Mitigate is a valid risk response strategy that involves taking steps to reduce the probability or impact of a risk.

CDelegateCorrect

Delegation is not one of the five core risk response strategies defined in risk management frameworks such as NIST SP 800-30 and PMBOK. The recognized responses are Avoid (eliminate the risk), Mitigate (reduce likelihood or impact), Transfer (shift risk to a third party), Accept (acknowledge and tolerate it), and Exploit (for opportunities). Delegation describes assigning a task, not a strategy for handling risk.

DAvoid

Avoid is a valid risk response strategy that eliminates the threat by removing the cause or changing the plan entirely.

Concept tested: Risk management response strategies classification

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf

Topics

#risk management#risk response strategies#risk treatment

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice