Which of the following is a qualitative approach to risk analysis?

The correct answer is C. Assigning a level of high, medium, or low to the risk rating. A qualitative risk analysis uses descriptive scales (e.g., high, medium, low) to prioritize risks based on their likelihood and impact, rather than numeric calculations.

Submitted by obi.ng· Mar 6, 2026Security program management and oversight

Question

Which of the following is a qualitative approach to risk analysis?

Options

AIncluding the MTTR and MTBF as part of the risk assessment
BTracking and documenting network risks using a risk register
CAssigning a level of high, medium, or low to the risk rating
DUsing ALE and ARO to help determine whether a risk should be mitigated

How the community answered

(43 responses)

A
2% (1)
B
2% (1)
C
91% (39)
D
5% (2)

Explanation

A qualitative risk analysis uses descriptive scales (e.g., high, medium, low) to prioritize risks based on their likelihood and impact, rather than numeric calculations.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice