asking the students to give examples of risk mitigation and risk elimination made for the funniest exam answers I've read in a while.

"risk elimination: removes the risk entirely. e.g. If the risk is someone breaking into your house, not having a house would eliminate this risk."

edit: the student wrote elimination not mitigation. and also got points for this silly but correct example. Not always reasonable to remove the house tho ^