CompTIA
CS0-003 · Question #135
An organization has the following risk mitigation policies: - Risks without compensating controls will be mitigated first it the risk value is greater than $50,000. - Other risk mitigation will be…
The correct answer is C. C, B, A, D. C is first because of has no compensanting control and the risk value is greater than $50,000 D is last because of has no compensanting control and the risk value is LESS than $50,000
Submitted by priya_blr· Mar 6, 2026Vulnerability Management
Question
An organization has the following risk mitigation policies:
- Risks without compensating controls will be mitigated first it the risk value is greater than
$50,000.
- Other risk mitigation will be prioritized based on risk value.
The following risks have been identified:
Which of the following is the order of priority for risk mitigation from highest to lowest?
Exhibit
Options
- AA, C, D, B
- BB, C, D, A
- CC, B, A, D
- DC. D, A, B
- ED, C, B, A
How the community answered
(31 responses)- A13% (4)
- B23% (7)
- C58% (18)
- D3% (1)
- E3% (1)
Explanation
C is first because of has no compensanting control and the risk value is greater than $50,000 D is last because of has no compensanting control and the risk value is LESS than $50,000
Topics
#risk prioritization#risk mitigation#compensating controls#risk management
Community Discussion
No community discussion yet for this question.