Certificate of Cloud Security Knowledge (CCSK) — Question 140

What is a core tenant of risk management?

Answer options

• A. If there is still residual risk after assessments and controls are in place, you must accept the risk.
• B. Risk insurance covers all financial losses, including loss of customers.
• C. The consumers are completely responsible for all risk.
• D. The provider is accountable for all risk management.
• E. You can manage, transfer, accept, or avoid risks.

Correct answer: E

Explanation

The correct answer, E, highlights the various strategies available in risk management, which include managing, transferring, accepting, or avoiding risks. Options A, B, C, and D misrepresent the shared responsibility and varying approaches to risk management, making them incorrect.