PRINCE2F PRINCE2 Practices Practice Question
Which THREE of the following are threat responses defined in PRINCE2?
⚠ Common exam trap
PRINCE2 often tests the confusion between threat responses and opportunity responses, leading candidates to select 'Enhance' or 'Exploit' as threat responses when they are actually for positive risks.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Accept
In PRINCE2, the risk management approach defines a set of threat responses that can be applied to risks that would have a negative impact on the project. Option B (Accept) is correct because PRINCE2 explicitly lists 'accept' as a valid threat response, meaning the project team decides to tolerate the risk without taking proactive action, often documenting a contingency plan. Option C (Transfer) is correct because PRINCE2 includes 'transfer' as a threat response, where the financial impact of a threat is shifted to a third party, for example through insurance, warranties, or fixed-price contracts. Option D (Avoid) is correct because PRINCE2 defines 'avoid' as a threat response, which involves changing the project scope, approach, or plan to eliminate the threat entirely or protect the project from its impact. Options A (Enhance) and E (Exploit) are not threat responses in PRINCE2; they are opportunity responses used to increase the probability or impact of positive risks, and therefore do not belong in this list of threat responses.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enhance
Why it's wrong here
PRINCE2 threat responses are avoid, reduce, transfer, accept, share and prepare; enhance is an opportunity response, not a threat response. It tempts because enhance appears in the same response menu and sounds like mitigation, but it increases the probability or impact of an opportunity, so it belongs to opportunity responses.
- ✓
Accept
Why this is correct
Accept is a defined PRINCE2 threat response, sitting alongside Avoid, Reduce, Transfer and Share. It satisfies the stem's requirement by acknowledging the threat and deliberately choosing to tolerate its potential impact, with a documented contingency plan, rather than taking action to change the threat itself.
- ✓
Transfer
Why this is correct
Transfer is a PRINCE2 threat response where the financial impact of a risk is passed to a third party, typically through insurance, outsourcing or contractual arrangements. Accountability for the risk itself remains with the project.
- ✓
Avoid
Why this is correct
Avoid is one of PRINCE2's defined threat responses, alongside Accept, Reduce, Transfer and Share. It addresses a threat by changing the project's scope, approach or plan so the threat no longer applies, eliminating the risk entirely.
- ✗
Exploit
Why it's wrong here
PRINCE2 threat responses are avoid, reduce, transfer, accept, share and prepare; exploit is an opportunity response, not a threat response. It tempts because exploit sits alongside the threat responses in the same response set, but it removes uncertainty to realise an opportunity, so it answers the opportunity question, not this one.
Go deeper
Related to this question
About these practice questions
One of 1,189 original PRINCE2F practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PRINCE2F practice question is part of Courseiva's free PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PRINCE2F exam.