Which of the following is a component of a risk assessment?

Administrative safeguards are the policies, procedures, and oversight processes used to manage the selection, implementation, and maintenance of security controls, and assessing whether adequate administrative safeguards exist is a recognized component of formal risk assessments under frameworks such as HIPAA Security Rule and NIST SP 800-30. Identifying gaps in administrative controls directly informs the risk level assigned to an organization.

Physical security is a category of protective control that may be evaluated during a risk assessment, but it is an implementation domain rather than a component of the assessment process itself.

Logical interface is a networking concept referring to virtual or software-defined interfaces and is not a recognized element of risk assessment methodology.

A DMZ is a network segmentation architecture used to isolate public-facing systems and is a security control to be evaluated, not a component of the risk assessment process.