PRINCE2F PRINCE2 Practices Practice Question
Which of the following is an example of a threat response in PRINCE2 risk management?
⚠ Common exam trap
Candidates often confuse threat and opportunity responses in PRINCE2 risk management, mistakenly applying opportunity responses like 'Exploit' or 'Enhance' to threats, or misclassifying 'Share' as exclusively a threat response.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Reduce
In PRINCE2 risk management, a threat response is an action taken to address a risk that could have a negative impact on project objectives. 'Reduce' is a threat response that involves implementing actions to lower the probability and/or impact of a threat to an acceptable level, such as adding extra testing to reduce the risk of software defects.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Reduce
Why this is correct
Reduce is a threat response within PRINCE2's risk management approach, taken to lessen the probability or impact of an identified threat. It sits alongside avoid, transfer and accept as the standard responses applied during the assess step of the risk management procedure.
- ✗
Exploit
Why it's wrong here
Exploit is a positive risk (opportunity) response, not a threat response, so it cannot answer a question asking specifically about threats. It is tempting because it belongs to PRINCE2's risk response set, and it would be correct when the question asks how to realise an opportunity that the project wants to happen.
- ✗
Share
Why it's wrong here
Sharing transfers a threat to a third party, typically via insurance or outsourcing, so the project no longer owns the risk. PRINCE2's threat responses are avoid, reduce, transfer, accept, prepare and exploit; "share" belongs to the opportunity responses. It tempts because sharing is a genuine PRINCE2 response, but for opportunities, not threats.
- ✗
Enhance
Why it's wrong here
Enhance is a SWOT-analysis response for exploiting opportunities, not a threat response, so it fails the scenario's requirement. It tempts because it sits alongside avoid, reduce, transfer and accept in the PRINCE2 risk-response set, and would be correct when the project faces an opportunity worth maximising rather than a threat.
Go deeper
Related to this question
About these practice questions
One of 1,189 original PRINCE2F practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PRINCE2F practice question is part of Courseiva's free PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PRINCE2F exam.