Which tool documents risks, responsible parties, and thresholds?

Which of the following is the most likely to be used to document risks, responsible parties, and thresholds?

  1. Risk tolerance
  2. Risk transfer
  3. Risk register Source Reference Answer
  4. Risk analysis

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

This question tests your ability to distinguish risk management artifacts from processes; the trap is confusing the risk register (a document/database) with risk analysis or risk tolerance, which are concepts or processes, not repositories.

The risk register is the central repository used in risk management to document identified risks, responsible parties, thresholds, and mitigation strategies. Community consensus strongly confirms that a risk register is the correct answer for this Security+ question.

Risk analysis is the most common wrong answer because it seems related to assessing risks, but risk analysis is an activity, not a document that stores information about risks, responsible parties, and thresholds.

Community Discussion (6 comments)

MAKOhunter33333333 👍 9 Selected: C
Think of register as registry, all the details of stuff
Etc_Shadow28000 👍 8 Selected: C
C. Risk register A risk register is a tool commonly used in risk management that records details of all identified risks, including descriptions, responsible parties, risk categories, likelihood and impact, mitigation measures, and thresholds for action. It serves as a central repository for all information about risks, making it easier to manage and track them.
gollum9 👍 1 Selected: C
C. Risk register
dbrowndiver 👍 1 Selected: C
o A risk register is a comprehensive document that captures all identified risks within an organization. It includes detailed information about each risk, including descriptions, responsible parties, mitigation strategies, impact assessments, and thresholds for acceptable risk levels.
PukaSudu 👍 1 Selected: C
register
metzen227 👍 5
Risk register: A risk register is a document or database used to record information about identified risks, including their likelihood, potential impact, responsible parties, mitigation strategies, and thresholds for triggering response actions. It serves as a central repository for managing and tracking risks throughout their lifecycle. The risk register is the most likely option among the choices provided to be used to document risks, responsible parties, and thresholds. Given the options provided, the most likely choice to be used to document risks, responsible parties, and thresholds is Risk register. The risk register serves as a comprehensive tool for documenting and managing risks, including key information such as responsible parties and thresholds for triggering response actions.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

A risk register is a formal document or database that records all identified risks, including descriptions, likelihood, impact, responsible parties, mitigation measures, and thresholds for action. It serves as the central tracking tool for risk management activities. The question specifically asks for something used to document risks, responsible parties, and thresholds, which exactly matches the risk register's purpose.

Why the Other Options Are Wrong

Risk tolerance (A) is an organization's willingness to accept risk, not a documentation tool. Risk transfer (B) is a risk response strategy where risk is shifted to a third party, not a record. Risk analysis (D) is the process of evaluating risks, but it does not serve as the ongoing documentation repository for responsible parties and thresholds. Only the risk register fulfills all the criteria in the question.

Community Comment Notes

Community members unanimously agree on answer C, with one comment succinctly explaining: "A risk register is commonly used in risk management that records details of all identified risks, including descriptions, responsible parties, risk categories, likelihood and impact, mitigation measures, and thresholds for action." Another useful comment highlights that thinking of a register as a "registry" (i.e., a central list) helps link the concept to its documentation function.

Official Reference

Related Analysis

Which of the following threat actors is the most likely to u

A-Grade

Which of the following actions could a security engineer tak

A-Grade

An organization has recently decided to implement SSO. The r

A-Grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide