Which tool documents risks, responsible parties, and thresholds?

SY0-701 By islever Editorial Last updated

Short answer

C Risk register

Question

Which of the following is the most likely to be used to document risks, responsible parties, and thresholds?
  1. Risk tolerance
  2. Risk transfer
  3. Risk register Correct Answer
  4. Risk analysis

Key Takeaways

This question tests your ability to distinguish risk management artifacts from processes; the trap is confusing the risk register (a document/database) with risk analysis or risk tolerance, which are concepts or processes, not repositories.

The risk register is the central repository used in risk management to document identified risks, responsible parties, thresholds, and mitigation strategies. Community consensus strongly confirms that a risk register is the correct answer for this Security+ question.

Common mistake: Risk analysis is the most common wrong answer because it seems related to assessing risks, but risk analysis is an activity, not a document that stores information about risks, responsible parties, and thresholds.

Expert Analysis

Why the Answer Is Correct

A risk register is a formal document or database that records all identified risks, including descriptions, likelihood, impact, responsible parties, mitigation measures, and thresholds for action. It serves as the central tracking tool for risk management activities. The question specifically asks for something used to document risks, responsible parties, and thresholds, which exactly matches the risk register's purpose.

Why the Other Options Are Wrong

Risk tolerance (A) is an organization's willingness to accept risk, not a documentation tool. Risk transfer (B) is a risk response strategy where risk is shifted to a third party, not a record. Risk analysis (D) is the process of evaluating risks, but it does not serve as the ongoing documentation repository for responsible parties and thresholds. Only the risk register fulfills all the criteria in the question.

Community Comment Notes

Community members unanimously agree on answer C, with one comment succinctly explaining: "A risk register is commonly used in risk management that records details of all identified risks, including descriptions, responsible parties, risk categories, likelihood and impact, mitigation measures, and thresholds for action." Another useful comment highlights that thinking of a register as a "registry" (i.e., a central list) helps link the concept to its documentation function.

Official Reference

These links open the official vendor documentation in a new tab.

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 6 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 6

  1. MAKOhunter33333333 👍 9 Answered C
    Think of register as registry, all the details of stuff
  2. Etc_Shadow28000 👍 8 Answered C
    C. Risk register A risk register is a tool commonly used in risk management that records details of all identified risks, including descriptions, responsible parties, risk categories, likelihood and impact, mitigation measures, and thresholds for action. It serves as a central repository for all information about risks, making it easier to manage and track them.
  3. metzen227 👍 5
    Risk register: A risk register is a document or database used to record information about identified risks, including their likelihood, potential impact, responsible parties, mitigation strategies, and thresholds for triggering response actions. It serves as a central repository for managing and tracking risks throughout their lifecycle. The risk register is the most likely option among the choices provided to be used to document risks, responsible parties, and thresholds. Given the options provided, the most likely choice to be used to document risks, responsible parties, and thresholds is Risk register. The risk register serves as a comprehensive tool for documenting and managing risks, including key information such as responsible parties and thresholds for triggering response actions.
  4. dbrowndiver 👍 1 Answered C
    o A risk register is a comprehensive document that captures all identified risks within an organization. It includes detailed information about each risk, including descriptions, responsible parties, mitigation strategies, impact assessments, and thresholds for acceptable risk levels.
  5. gollum9 👍 1 Answered C
    C. Risk register
Show 1 more comment
  1. PukaSudu 👍 1 Answered C
    register

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide