setting redundant components in subsystem to handle with the risks brought by the defaults of original components,what kind of risk response strategy is this？（）