CompTIA CASP+ (CAS-004) — Question 338

The primary advantage of an organization creating and maintaining a vendor risk registry is to:

Answer options

• A. define the risk assessment methodology.
• B. study a variety of risks and review the threat landscape.
• C. ensure that inventory of potential risk is maintained.
• D. ensure that all assets have low residual risk.

Correct answer: C

Explanation

The correct answer is C because a vendor risk registry is specifically intended to keep track of potential risks associated with vendors. Options A, B, and D do not directly address the purpose of maintaining an updated inventory of risks, which is the primary function of a vendor risk registry.