Computer Security Applicationsintermediate
Select ALL valid risk treatment options.
Answer
Mitigate the risk, Transfer the risk, Accept the risk, Avoid the risk
Explanation
### Why this is right
- **Mitigate the risk**: reduce its likelihood or impact with safeguards.
- **Transfer the risk**: shift some financial or operational consequences to another party.
- **Accept the risk**: knowingly retain it when that is an appropriate decision.
- **Avoid the risk**: stop the activity that creates the exposure.
### The concept
Treatment is the decision made after a risk is understood and prioritized. These approaches differ in whether the organization reduces, shifts, retains, or removes the exposure. Choosing one does not mean the risk assessment itself is unnecessary.
### Terms
- **Risk treatment**: A decision about what to do with an identified risk.
- **Mitigation**: Reducing risk, often through controls.
### Remember
The four options are mitigate, transfer, accept, and avoid.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free