ITPEC IP April 2019 Question 36

Source exam: ITPEC IP April 2019Topic: Security

ITPEC IP April 2019 — Question 36 of 100

Risk acceptance means knowingly retaining a risk without taking special additional action. The organization assesses the likelihood and impact and decides that the expected loss or remaining exposure is tolerable, often because further controls would cost more than their benefit.

Answer (b)

Why not others:
- (a) lowers likelihood through controls and is risk reduction

- (c) shifts financial consequences to an insurer and is risk transfer

- (d) stops the risk-producing activity or removes its cause and is risk avoidance

Key rule: Accept retains, reduce mitigates, transfer shifts, and avoid eliminates the activity or exposure.

AI-generated — may contain errors

The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.