Risk Mitigation

Correct Answer: Disconnect and disable the unauthorized access point

Disconnecting and disabling the unauthorized access point removes the immediate risk. Other actions may be taken afterward to prevent future occurrences and investigate the breach.

Correct Answer: Implement continuous monitoring and auditing

Continuous monitoring and auditing enable detection and mitigation of risks as they occur, providing a better security posture than monthly audits alone. Other actions may be helpful but do not directly address the frequency of auditing.

Correct Answer: Encourage the team to properly differentiate between assumptions and risks and coach them on proper risk identification and management

The best way to handle an issue where risks are turning out to be false assumptions is to encourage the team to properly differentiate between risks and assumptions, and to coach them on proper risk identification and management. The Scrum Master plays a crucial role in coaching the team to promote mutual understanding of how to identify risks effectively, differentiating them from assumptions which can often be baseless. Risk management also involves understanding the potential impact and likelihood of each risk, and deciding how to manage each risk most effectively. Encouraging the team to ignore assumptions or to stop discussing risks during the Retrospective, as suggested by the other answers, would ignore an important aspect of the risks and would not promote effective teamwork or risk management. Discouraging the team from making assumptions would limit their creativity and ability to consider different perspectives, which is counterproductive to the agile mindset.