A qualitative risk analysis assigns descriptive ratings such as high, medium, or low to risks based on their likelihood and impact without numerical calculations. Including MTTR/MTBF (A) and ALE/ARO (D) are quantitative methods using metrics. Risk registers (B) document risks but don't specify analysis type. Qualitative and quantitative risk methods are fundamental in SY0-701 risk management#6:Chapter 17 CompTIA Security+ Study Guide#.