1. Which risk response accepts the risk and its consequences?
- Risk avoidance
- Risk reduction
- Risk retention
- Risk sharing
Explanation: Risk retention means that the risk and its consequences are accepted without action.
2. Which risk response outsources some of the risk to other parties, such as Security as a Service?
- Risk avoidance
- Risk reduction
- Risk retention
- Risk sharing
Explanation: In the risk sharing risk response, some of the risk is outsourced to a Security as a Service or insurance company.
3. Which risk response involves stopping performing the risky activities?
- Risk avoidance
- Risk reduction
- Risk retention
- Risk sharing
Explanation: In risk avoidance, the activity that presents the risk is discontinued.
4. Which risk response takes measures to reduce vulnerability?
- Risk avoidance
- Risk reduction
- Risk retention
- Risk sharing
Explanation: In the risk reduction response, measures are taken to limit the impacts of the risk by reducing vulnerability.