Match each risk assessment method to its characteristic.
Drag a concept onto its matching description — or click a concept then click the description.
Uses numerical values like ALE and SLE
Uses ordinal scales like high/medium/low
Combines numeric values with qualitative scales
Evaluates risks based on hypothetical events
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Quantitative: Uses numerical values and formulas to calculate risk
Correct matches: Quantitative → numerical values/formulas; Qualitative → subjective categories; Semi-quantitative → hybrid numeric/qualitative. Common confusions include swapping these definitions.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Quantitative: Uses numerical values and formulas to calculate risk
Why this is correct
Quantitative risk assessment relies on numerical data (e.g., costs, probabilities) to calculate risk exposure.
Qualitative: Uses subjective categories like high, medium, low
Why this is correct
Qualitative risk assessment uses ordinal scales based on judgment to prioritize risks.
Semi-quantitative: Combines numerical scales with qualitative categories
Why this is correct
Semi-quantitative methods assign numeric values to qualitative categories for a hybrid approach.
Quantitative: Assigns ordinal values to risk levels
Why it's wrong here
Incorrect — assigning ordinal values is characteristic of qualitative or semi-quantitative, not quantitative.
Qualitative: Uses monetary values and probability distributions
Why it's wrong here
Incorrect — monetary values and probability distributions are used in quantitative assessment.
Semi-quantitative: Uses only narrative descriptions without numeric scales
Why it's wrong here
Incorrect — narrative descriptions alone are qualitative; semi-quantitative includes numeric scales.
Go deeper
About these practice questions
This CRISC question is part of Courseiva's 983-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.