nerdexam
CompTIA

CAS-003 · Question #92

The Chief Information Security Officer (CISO) at a company knows that many users store business documents on public cloud-based storage, and realizes this is a risk to the company. In response, the…

The correct answer is C. Mitigate. Mitigation means that a control is used to reduce the risk. In this case, the control is training.

Risk Management

Question

The Chief Information Security Officer (CISO) at a company knows that many users store business documents on public cloud-based storage, and realizes this is a risk to the company. In response, the CISO implements a mandatory training course in which all employees are instructed on the proper use of cloud-based storage. Which of the following risk strategies did the CISO implement?

Options

  • AAvoid
  • BAccept
  • CMitigate
  • DTransfer

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    94% (30)

Explanation

Mitigation means that a control is used to reduce the risk. In this case, the control is training.

Topics

#risk mitigation#cloud storage#security awareness training#risk strategies

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice