Certified Ethical Hacker – CEH – 312-50 – Question254

A medium-sized healthcare IT business decides to implement a risk management strategy.

Which of the following is NOT one of the five basic responses to risk?


A. Delegate
B. Avoid
C. Mitigate
D. Accept

Correct Answer: A

Explanation:

There are five main ways to manage risk: acceptance, avoidance, transference, mitigation or exploitation.

References: http://www.dbpmanagement.com/15/5-ways-to-manage-risk