nerdexam
(ISC)2

SSCP · Question #1159

Select three ways to deal with risk.

The correct answer is A. Acceptance C. Transfer D. Mitigate. Common strategies for managing risk include accepting, transferring, or mitigating it, as well as avoiding it.

Submitted by hans_de· Apr 18, 2026Risk Identification, Monitoring and Analysis

Question

Select three ways to deal with risk.

Options

  • AAcceptance
  • BAvoid / Eliminate
  • CTransfer
  • DMitigate
  • EDeny

How the community answered

(41 responses)
  • A
    90% (37)
  • B
    2% (1)
  • E
    7% (3)

Why each option

Common strategies for managing risk include accepting, transferring, or mitigating it, as well as avoiding it.

AAcceptanceCorrect

Risk acceptance is a strategy where an organization decides to bear the potential consequences of a particular risk.

BAvoid / Eliminate

While 'Avoid / Eliminate' is a valid risk response strategy (often referred to as risk avoidance), the question asks for three distinct ways, and A, C, D are primary categories.

CTransferCorrect

Risk transfer involves shifting the financial burden or responsibility of a risk to another party, often through insurance or outsourcing.

DMitigateCorrect

Risk mitigation involves implementing controls or countermeasures to reduce the likelihood or impact of a risk.

EDeny

'Deny' is not a recognized or effective strategy for dealing with risk in a professional context; it typically refers to ignoring or downplaying a risk, which is irresponsible.

Concept tested: Risk management strategies

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/risk-management#risk-response

Topics

#Risk Management#Risk Response#Risk Treatment Strategies

Community Discussion

No community discussion yet for this question.

Full SSCP Practice