Qualitative risk analysis can use descriptive ratings such as High, Medium, and Low.
Answer
true
Explanation
### Why this is right
Qualitative analysis expresses risk using descriptive categories rather than requiring numerical estimates. High, Medium, and Low are examples of such ratings.
### The concept
Qualitative and quantitative methods represent risk differently. Qualitative ratings support structured comparison using categories, while quantitative analysis uses numbers and may include loss estimates and occurrence rates.
### Terms
- **Qualitative analysis**: risk analysis using descriptive categories rather than numerical estimates.
- **Quantitative analysis**: risk analysis using numerical estimates.
### Remember
Descriptive labels are qualitative; numerical estimates are quantitative.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free