I'd suggest he uses
LOOKUP Function.
You can use the LOOKUP function when you need to look in a
single column or row and find a value from the same position in a corresponding
column or row. We have a much improved VLOOKUP that can also be used to search
one row or column or multiple rows and columns.
Answer: Probability/impact risk matrix
Explanation: Probability/impact risk matrix is type of matrix that defines the probability as well as impact that depicts whether the risk is low ,high or moderate.
Impact matrix is sort of tool which helps in conversion of any plan into a action. Probability matrix help in defining the chances in defining the risk.The positioning of the impact value of risk is plotted on the vertical axis and performance value on the horizontal axis.
Thus probability/impact matrix is the correct tool for the problem mentioned in the question.
I'd say B: the amount and type of security placed on an application.
This is a common problem that exists between IT and other user departments. The IT department is well known for closing up certain sites and applications needed by other departments all in the name of security. As a result, it might slow down operations within different department and may cause inefficiency.