Steps $5$ and $6$ of the security risk assessment process are to determine the possible ways to accomplish a key task and how feasible each option would be implement. What is that task?

a$.$ cost$-$benefit analysis

b$.$ threat mitigation

c$.$ event identification

d$.$ asset replacement