CompTIA Security+ (SY0-501) — Question 206

A company recently replaced its unsecure email server with a cloud-based email and collaboration solution that is managed and insured by a third party. Which of the following actions did the company take regarding risks related to its email and collaboration services?

Answer options

• A. Transference
• B. Acceptance
• C. Mitigation
• D. Deterrence

Correct answer: A

Explanation

The company chose transference by outsourcing the management and insurance of their email services to a third party, which shifts the risk to that external provider. Acceptance would imply the company is aware of the risks but chooses to bear them, while mitigation means reducing the impact of risks without transferring them, and deterrence refers to actions taken to discourage risks rather than manage them.