ITPEC IP October 2020 Question 41

Source exam: ITPEC IP October 2020Topic: Security

ITPEC IP October 2020 — Question 41 of 100

Encrypting the notebook's hard disk is risk mitigation because it reduces the impact of loss or theft without eliminating the activity. If the device is stolen, properly protected encryption makes stored information difficult for an unauthorized person to read.

Answer (d)

Why not others:
- withdrawing from the Internet service is risk avoidance

- buying insurance is risk transfer

- deciding that existing restrictions are sufficient and taking no further action is risk acceptance

Key rule: Avoidance stops the risky activity, transfer shifts financial consequences, acceptance retains the risk, and mitigation reduces its probability or impact.

AI-generated — may contain errors

The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.