C is corrent because all of these risks may be assessed in either nonquantitative (e.g., high, medium, low) or in quantitative terms (e.g., as percentages).
A is incorrect because one reply is incorrect.
A is incorrect because one reply is incorrect.
D is incorrect because one reply is incorrect.