In quatitative risk analysis models, risk is often defined as:

Question $1$ options:

$($hazard x vulnerability x exposure$)/$ capacity

asset value $\backslash$times threat $\backslash$times vulnerability

$($reduction in risk $-$ cost of control$)/$ cost of control

single loss expectancy x annualized rate of occurrence