Question

HAL Systems recently decided to stop offering public NTP services because of a fear that its NTP servers would be used in amplification DDoS attacks. What type of risk management strategy did HAL pursue with respect to its NTP services?

a. Risk mitigation
b. Risk acceptance
c. Risk transference
d. Risk avoidance

Answer 1

Answer:D. Risk Avoidance.

Explanation:Risk Avoidance is a risk management strategy where the potential risk is identified and avoided. In Risk avoidance,the Organisation or person involved prevent or chooses not to take certain steps or actions that can predispose the Organisation or the person to that risk.

HAL system's decision on not continuing with the NTP services is a risk avoidance process, as it is aimed at avoiding or deciding not to continue with such services due to the potential risk involved.