What is the most basic method to address contract$-$specific risk?

Question $10$ options:

$1)$

Only issuing fixed priced contracts

$2)$

Doing a risk assessment

$3)$

Matching the contract type to the project needs requiring procurement

$4)$

Ensuring that there is a management reserve in place to cover contingencie