A transit agency faces ransomware risk against fare-collection servers. Leadership wants to reduce both likelihood of compromise and impact of encryption. Which action set best illustrates risk mitigation?
Select an answer to reveal the explanation.
Short Explanation
Mitigation is putting better locks on the doors and keeping spare keys off-site—MFA makes break-ins harder, backups make encryption less devastating. You're shrinking the risk, not wishing it away.
Full Explanation
Mitigation applies controls that reduce likelihood, impact, or both until residual risk is acceptable. MFA hardens authentication paths while reliable offline or immutable backups limit ransomware impact. Denial, silent acceptance with weaker monitoring, or inappropriate ownership changes do not constitute effective mitigation.