nerdexam
(ISC)2

SSCP · Question #463

Which of the following is NOT a part of a risk analysis?

The correct answer is D. Choose the best countermeasure. Risk analysis encompasses identifying risks (A), quantifying the impact of threats (B), and providing an economic balance between risk impact and countermeasure cost (C). 'Choosing the best countermeasure' (D) is part of risk management or risk treatment - the step that follows…

Submitted by packet_pusher· Apr 18, 2026Risk Identification, Monitoring and Analysis

Question

Which of the following is NOT a part of a risk analysis?

Options

  • AIdentify risks
  • BQuantify the impact of potential threats
  • CProvide an economic balance between the impact of the risk and the cost of the associated
  • DChoose the best countermeasure

How the community answered

(62 responses)
  • A
    5% (3)
  • B
    3% (2)
  • C
    2% (1)
  • D
    90% (56)

Explanation

Risk analysis encompasses identifying risks (A), quantifying the impact of threats (B), and providing an economic balance between risk impact and countermeasure cost (C). 'Choosing the best countermeasure' (D) is part of risk management or risk treatment - the step that follows risk analysis. Risk analysis is about understanding and measuring risk; selecting and implementing controls is a management decision that comes after analysis is complete.

Topics

#Risk Analysis#Risk Management Process#Risk Treatment#Countermeasures

Community Discussion

No community discussion yet for this question.

Full SSCP Practice