ISC2 CAP Exam - Topic 10 Question 48 Discussion

Actual exam question for ISC2's CAP exam

Question #: 48
Topic #: 10

[All CAP Questions]

You are the project manager for a construction project. The project involves casting of a column in a very narrow space. Because of lack of space, casting it is highly dangerous. High technical skill will be required for casting that column. You decide to hire a local expert team for casting that column. Which of the following types of risk response are you following?

AMitigation

BAvoidance

CTransference

DAcceptance

Show Suggested Answer

Suggested Answer: C

by Irma at May 07, 2022, 10:57 AM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Zita

4 months ago

This is classic mitigation, no doubt about it!

upvoted 0 times

...

Annita

4 months ago

Sounds like a smart move, but can the local team really handle it?

upvoted 0 times

...

Lynna

4 months ago

Wait, isn’t that more like transference?

upvoted 0 times

...

Edison

4 months ago

I agree, it’s all about minimizing danger here.

upvoted 0 times

...

Jeff

5 months ago

Definitely mitigation, bringing in experts to reduce risk.

upvoted 0 times

...

Mable

5 months ago

I guess acceptance could apply if we were just going to deal with the risk, but hiring experts seems more proactive.

upvoted 0 times

...

Eleonora

5 months ago

I'm not entirely sure, but I feel like this could also be seen as mitigation since you're trying to reduce the danger by bringing in skilled help.

upvoted 0 times

...

Margot

5 months ago

I remember studying risk responses, and I think hiring an expert might relate to transference since you're shifting the risk to someone more capable.

upvoted 0 times

...

Arthur

5 months ago

I practiced a question similar to this, and I think avoidance would mean not doing the casting at all, which isn't the case here.

upvoted 0 times

...

Georgiana

5 months ago

Hmm, this one's tricky. I'll need to think through the OSI model layers and their responsibilities to figure this out.

upvoted 0 times

...

Tuyet

5 months ago

I'm leaning towards option D - understanding the regulatory and legal framework and assessing its relevance. That feels like it would be a core part of an internal auditor's role.

upvoted 0 times

...

Gabriele

5 months ago

I remember practicing a question similar to this, and it had something to do with "service netsvc1." Maybe that's the correct one?

upvoted 0 times

...

Frederica

5 months ago

I'm not too sure about option B. I thought part of an emergent strategy is to act quickly rather than analyze everything first.

upvoted 0 times

...