Certified Ethical Hacker (CEH v10) — Question 119

A medium-sized healthcare IT business decides to implement a risk management strategy. Which of the following is NOT one of the five basic responses to risk?

Answer options

• A. Accept
• B. Delegate
• C. Mitigate
• D. Avoid

Correct answer: B

Explanation

The correct answer is B, as 'Delegate' is not recognized as one of the five primary responses to risk, which include Accept, Mitigate, and Avoid. The other options are standard approaches for managing risks effectively in a business context.