New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CSSLP Exam - Topic 11 Question 47 Discussion

Actual exam question for ISC2's CSSLP exam
Question #: 47
Topic #: 11
[All CSSLP Questions]

A part of a project deals with the hardware work. As a project manager, you have decided to hire a company to deal with all hardware work on the project. Which type of risk response is this?

Show Suggested Answer Hide Answer
Suggested Answer: C

When you are hiring a third party to own risk, it is known as transference risk response.

Transference is a strategy to mitigate negative risks or threats. In this strategy, consequences and the ownership of a risk is transferred to a

third party. This strategy does not eliminate the risk but transfers responsibility of managing the risk to another party. Insurance is an

example of transference.

Answer B is incorrect. The act of spending money to reduce a risk probability and impact is known as mitigation.

Answer A is incorrect. Exploit is a strategy that may be selected for risks with positive impacts where the organization wishes to ensure

that the opportunity is realized.

Answer D is incorrect. When extra activities are introduced into the project to avoid the risk, this is an example of avoidance.


Contribute your Thoughts:

0/2000 characters
Theola
4 months ago
Avoidance would mean not doing the hardware work at all, right?
upvoted 0 times
...
Kathryn
4 months ago
Wait, is it really transference? Seems a bit off to me.
upvoted 0 times
...
Rodrigo
4 months ago
I thought it might be mitigation, but transference makes sense.
upvoted 0 times
...
Micheal
4 months ago
Totally agree, you're shifting the risk to another company.
upvoted 0 times
...
Gabriele
5 months ago
That's definitely transference!
upvoted 0 times
...
Lilli
5 months ago
Avoidance seems like it would mean not doing the hardware work at all, so I don't think that's it.
upvoted 0 times
...
Makeda
5 months ago
I practiced a question like this, and I feel like hiring someone definitely means you're transferring the risk.
upvoted 0 times
...
Ilda
5 months ago
I'm not entirely sure, but I remember something about mitigation being about reducing risks. Could it be that?
upvoted 0 times
...
Ona
5 months ago
I think this might be transference since you're shifting the responsibility to another company.
upvoted 0 times
...
Omer
5 months ago
Okay, let me break this down step-by-step. I need to identify the ironic aspects of the Fusioninsight Manager features described.
upvoted 0 times
...
Kendra
5 months ago
Ugh, this question is tricky. I know process measures are about the HOW of delivering care, but I'm not totally sure which option best represents that definition.
upvoted 0 times
...
Merilyn
5 months ago
Hmm, I'm not entirely sure about this one. I'll need to think it through carefully. The options seem similar, so I'll have to analyze the differences between them.
upvoted 0 times
...
Latosha
5 months ago
This looks like a straightforward question about the different types of repos. I think I can handle this one - the key is remembering the characteristics of each repo type.
upvoted 0 times
...

Save Cancel