Courseiva
Security Policies and ProceduresmediumMultiple ChoiceObjective-mapped

200-201 Security Policies and Procedures Practice Question

An organization has implemented a new password policy requiring 12-character passwords with complexity. Which risk treatment option is this an example of?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Risk mitigation

Implementing controls to reduce risk is mitigation.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Risk mitigation

    Why this is correct

    Implementing password policy reduces the likelihood of unauthorized access.

  • Risk transfer

    Why it's wrong here

    Transfer involves sharing risk with a third party, like insurance.

  • Risk acceptance

    Why it's wrong here

    Acceptance means no action is taken.

  • Risk avoidance

    Why it's wrong here

    Avoidance means eliminating the activity that causes risk.

About these practice questions

One of 979 original 200-201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.