Explain the difference between qualitative and quantitative risk assessment methods. Which method do you prefer, and under what conditions would you choose it over the other?  Support your answer with at least one example scenario.