Question
A SaaS provider specifies in a user agreement that the customer agrees that any misuse of the service will be the responsibility of the customer. Which of the following risk response methods was applied?
- A. Acceptance
- B. Avoidance
- C. Transference Correct
- D. Mitigation
Explanation
The provider uses a contract clause to shift the consequences of service misuse onto the customer, which is risk transference (transfer), one of the four risk responses in the Cloud Essentials+ objectives. Avoidance would mean not offering the service or activity at all, so the risk no longer exists. Acceptance means keeping the risk without action, and mitigation means adding controls to reduce its likelihood or impact.
