CompTIA CASP+ (CAS-003) — Question 368

A company is purchasing an application that will be used to manage all IT assets as well as provide an incident and problem management solution for IT activity.
The company narrows the search to two products, Application A and Application B, which meet all of its requirements. Application A is the most cost-effective product, but it is also the riskiest, so the company purchases Application B. Which of the following types of strategies did the company use when determining risk appetite?

Answer options

• A. Mitigation
• B. Acceptance
• C. Avoidance
• D. Transfer

Correct answer: C

Explanation

The company chose Application B to avoid the risks associated with Application A, despite its higher cost. This decision reflects an avoidance strategy, as they actively sought to steer clear of potential negative outcomes. The other options, such as mitigation, acceptance, and transfer, do not accurately represent the company's approach of choosing a lower-risk solution instead of a more cost-effective but riskier one.