CompTIA Security+ (SY0-701) — Question 29

A company purchased cyber insurance to address items listed on the risk register. Which of the following strategies does this represent?

Answer options

• A. Accept
• B. Transfer
• C. Mitigate
• D. Avoid

Correct answer: B

Explanation

The correct answer is B, Transfer, because purchasing cyber insurance shifts the financial risk of certain items to the insurance provider. The other options are incorrect as Accept means taking on the risk, Mitigate refers to reducing the risk, and Avoid means eliminating the risk altogether.