Which of the following approaches to risk calculation typically assigns a numeric value $(110)$ or label $($High$,$ Medium, or Low$)$ to represent a risk?

a$.$ quantitative

b$.$ qualitative

c$.$ rule based

d$.$ policy based