which of the following situations would a risk be placed in the upper right quadrant of a risk matrix?