Start learning →

If trust falls short and no compensating controls exist, the organisation must:

ARefund or avoid risk
BReject or accept risk
CRebuild or archive risk
DReport or assign risk
Answer & Solution
Correct answer: B. Reject or accept risk
1. Only two paths remain once controls run out. 2. Either the service goes, or the exposure stays. 3. It must either reject the service or accept a greater degree of risk. 4. So the answer is reject or accept risk. _Source: NIST SP 800-144, 'Guidelines on Security and Privacy in Public Cloud Computing'_
Practise this question with Quill — BCA Cloud Computing →

Keep practising Cloudsecurity

Browse all Cloudsecurity questions for BCA Cloud Computing, or explore more Cloudcomputing topics.

Start a Cloudsecurity lesson →
Related questions