CompTIA Security+ (SY0-401) — Question 36

Identifying residual risk is MOST important to which of the following concepts?

Answer options

• A. Risk deterrence
• B. Risk acceptance
• C. Risk mitigation
• D. Risk avoidance

Correct answer: B

Explanation

Identifying residual risk is crucial for Risk acceptance because it involves acknowledging the remaining risks after implementing various controls. Risk deterrence, mitigation, and avoidance focus on reducing or eliminating risks rather than recognizing and accepting them.