nerdexam
(ISC)2

CCSP · Question #161

Which of the following is not a way to manage risk?

The correct answer is A. Enveloping. Risk management strategies involve mitigating, accepting, and transferring risks, but 'enveloping' is not a recognized method for managing risk.

Submitted by anjalisingh· Apr 18, 2026Legal, Risk and Compliance

Question

Which of the following is not a way to manage risk?

Options

  • AEnveloping
  • BMitigating
  • CAccepting
  • DTransferring

How the community answered

(21 responses)
  • A
    95% (20)
  • C
    5% (1)

Why each option

Risk management strategies involve mitigating, accepting, and transferring risks, but 'enveloping' is not a recognized method for managing risk.

AEnvelopingCorrect

Enveloping is not a recognized or standard term within the field of risk management strategies, which typically include avoidance, mitigation, acceptance, and transference. Risk enveloping does not describe a method for handling or responding to identified risks in a cybersecurity or business context.

BMitigating

Mitigating risk involves taking steps to reduce the likelihood or impact of a risk event.

CAccepting

Accepting risk involves acknowledging the risk and deciding not to take any action to reduce it, often because the cost of mitigation outweighs the potential impact.

DTransferring

Transferring risk involves shifting the financial consequences or responsibility of a risk to another party, such as through insurance or outsourcing.

Concept tested: Risk management strategies

Source: https://learn.microsoft.com/en-us/compliance/regulatory/risk-management-framework

Topics

#Risk Management#Risk Response Strategies#Risk Treatment

Community Discussion

No community discussion yet for this question.

Full CCSP Practice