Setting redundant components in subsystem to handle with the risks brought by the defaults of original components, what kind of risk response strategy is this ? （  ）.