PMI Risk Management Professional (PMI-RMP) — Questions and Answers

Question 1: Which action best demonstrates closing the loop on risk communication after a risk response is implemented?

Notifying only the risk owner of the outcome
Removing the risk from the register immediately
Issuing a final risk report only at project closeout
Reporting the response outcome and residual risk status to stakeholders (Correct answer)

Correct answer: Reporting the response outcome and residual risk status to stakeholders

Closing the loop means informing stakeholders whether the response was effective and what residual risk remains, completing the risk communication cycle.

Question 2: A pharmaceutical company is deciding whether to proceed with an expensive clinical trial for a new drug. The trial has a 60% chance of success, which would lead to a profit of $50 million. It has a 40% chance of failure, resulting in a loss of $20 million. Which of the following tools is best suited to model this decision and calculate the potential financial outcome?

Risk Register
Decision Tree Analysis (Correct answer)
Sensitivity Analysis
Monte Carlo Simulation

Correct answer: Decision Tree Analysis

Decision Tree Analysis is the ideal tool for this scenario. It is used to evaluate decisions under uncertainty by mapping out the choices, their probabilities, and their potential outcomes in a tree-like structure. It allows for the calculation of the Expected Monetary Value (EMV) for each branch (decision path) to identify the most financially sound choice.

Question 3: Which governance body is typically responsible for overseeing risk management practices on large projects?

Individual team leads
Risk management committee or steering committee (Correct answer)
The project scheduler
The client's procurement department

Correct answer: Risk management committee or steering committee

A risk management committee or steering committee provides governance oversight, ensures risk policies are followed, and makes decisions on risks beyond project authority.

Question 4: A project manager is prioritizing risks and notes that one particular risk, while having a moderate probability and impact, requires a response much sooner than other, higher-rated risks. The time to implement a response is short, and warning signs indicate it may occur soon. This consideration of timing is known as:

Risk Urgency Assessment (Correct answer)
Risk Proximity Evaluation
Risk Appetite Assessment
Risk Threshold Definition

Correct answer: Risk Urgency Assessment

Risk Urgency Assessment is a technique used to determine which risks require near-term responses. It considers factors like the time available to implement a response (proximity), warning signs (triggers), and the time-sensitivity of the risk's impact.

Question 5: A project manager is performing a quantitative risk analysis and wants to determine the amount of cost contingency reserve needed. The analysis produces a cumulative probability distribution (S-curve) for the project's total cost. If the stakeholders have a moderate risk tolerance and agree to accept a 20% chance of a cost overrun, what value on the S-curve should the project manager use for the budget?

The 20th percentile (P20) value
The 100th percentile (P100) value
The 50th percentile (P50) value
The 80th percentile (P80) value (Correct answer)

Correct answer: The 80th percentile (P80) value

The S-curve shows the probability of achieving a certain outcome or less. If stakeholders are willing to accept a 20% chance of overrun, this means they want an 80% probability of being at or below the budgeted cost. Therefore, the project manager should select the cost associated with the 80th percentile (P80) on the S-curve. This value represents the point where there is an 80% chance the project cost will be that amount or less, and a 20% chance it will be more.

Question 6: A project manager is facilitating a meeting to develop the Risk Management Plan. Which of the following inputs would be MOST crucial for understanding the project's boundaries and the environment in which it operates?

Risk response templates
Project charter and stakeholder register (Correct answer)
Detailed cost estimates
Risk register from a previous project

Correct answer: Project charter and stakeholder register

The project charter provides the high-level project description, objectives, and boundaries. The stakeholder register identifies the key people and groups involved and is essential for understanding their risk attitudes and tolerances. Together, these documents are fundamental inputs for establishing the framework for risk management.

Question 7: Which communication barrier most commonly undermines effective risk reporting?

Normalizing risk information so stakeholders underestimate its severity (Correct answer)
Using visual formats instead of text
Including risk owners in status meetings
Reporting risks too frequently

Correct answer: Normalizing risk information so stakeholders underestimate its severity

Normalizing or downplaying risks in reports causes stakeholders to become complacent and fail to act appropriately on significant threats.

Question 8: Which risk response strategy involves shifting the negative impact of a risk to a third party?

Transfer (Correct answer)
Accept
Mitigate
Avoid

Correct answer: Transfer

Transfer shifts the financial or operational impact of a risk to another party, such as through insurance or outsourcing.

Question 9: What is the significance of a code of conduct for Project Risk Management professionals?

It applies only to new practitioners
It limits professional freedom
It establishes expected behaviors and ethical standards that protect the public and profession (Correct answer)
It is merely symbolic

Correct answer: It establishes expected behaviors and ethical standards that protect the public and profession

This is fundamental to Project Risk Management practice. It establishes expected behaviors and ethical standards that protect the public and profession represents the professional standard for professional standards in the Project Risk Management certification framework.

Question 10: Which stakeholder typically receives the most detailed risk information on a project?

The general public
External auditors
The project sponsor (Correct answer)
End users of the deliverable

Correct answer: The project sponsor

The project sponsor holds ultimate accountability and typically requires the most detailed risk information to make informed decisions and provide support.

Question 11: How do Project Risk Management professionals establish measurable quality objectives?

Through subjective assessment
By comparing to competitors only
By defining specific, measurable, achievable, relevant, and time-bound quality targets (Correct answer)
Using vague goals

Correct answer: By defining specific, measurable, achievable, relevant, and time-bound quality targets

This is fundamental to Project Risk Management practice. By defining specific, measurable, achievable, relevant, and time-bound quality targets represents the professional standard for quality in the Project Risk Management certification framework.

Question 12: One of the risks your project team has identified is that the equipment your team is constructing won't work under extremely high pressure, which is one of the needs of the client. Your team decided to prototype the equipment to manage this risk on the basis of your recommendation as the project manager. What risk approach is demonstrated by this?

Acceptance
Avoidance
Transfer
Mitigation (Correct answer)

Correct answer: Mitigation

Risk mitigation involves taking steps to reduce the probability or impact of a negative risk event to an acceptable level. Prototyping the equipment to test its performance under high pressure directly aims to reduce the likelihood or consequence of the equipment failing in the client's required conditions. This proactive measure demonstrates a strategy to lessen the threat of equipment malfunction.

Question 13: Which of the following is a key difference between monitoring risks and controlling risks?

Monitoring tracks risk status; controlling implements responses and adjustments (Correct answer)
They are identical activities with different names
Controlling is done only at project closure
Monitoring is performed by the sponsor; controlling by the team

Correct answer: Monitoring tracks risk status; controlling implements responses and adjustments

While often combined as 'Monitor and Control Risks,' monitoring refers to tracking risk status and triggers, while controlling involves implementing responses and adjusting plans based on what is observed.

Question 14: When a risk response creates a new risk, the new risk is called a:

Secondary risk (Correct answer)
Workaround
Trigger
Residual risk

Correct answer: Secondary risk

Secondary risks arise as a direct result of implementing a risk response and must also be managed.

Question 15: What is the importance of data security in Project Risk Management digital applications?

Security is unnecessary for professional data
Security slows down work
Protecting sensitive information from unauthorized access, breaches, and loss is essential (Correct answer)
Only financial data needs protection

Correct answer: Protecting sensitive information from unauthorized access, breaches, and loss is essential

This is fundamental to Project Risk Management practice. Protecting sensitive information from unauthorized access, breaches, and loss is essential represents the professional standard for technology in the Project Risk Management certification framework.

Question 16: During project execution, a new high-priority risk is identified. What is the first communication action the project manager should take?

Update the risk register and notify relevant stakeholders immediately (Correct answer)
Ask the team to monitor the risk before reporting it
Resolve the risk before informing stakeholders
Wait until the next scheduled status report

Correct answer: Update the risk register and notify relevant stakeholders immediately

High-priority risks require immediate documentation and stakeholder notification so that timely decisions and responses can be made.

Question 17: Which of the following best describes the "Share" risk response strategy for opportunities?

Eliminating the uncertainty associated with a positive risk to ensure it happens.
Paying a premium to a third party to manage a threat.
Taking proactive steps to increase the probability of an opportunity occurring.
Forming a joint venture or partnership to capitalize on an opportunity that the project cannot capture on its own. (Correct answer)

Correct answer: Forming a joint venture or partnership to capitalize on an opportunity that the project cannot capture on its own.

The "Share" strategy for positive risks (opportunities) involves allocating some or all of the ownership of the opportunity to a third party who is best able to capture the benefit for the project. A joint venture is a classic example of this. Paying a premium for a threat is "Transfer". Increasing the probability is "Enhance," and ensuring it happens is "Exploit."

Question 18: Which document serves as the primary output for communicating identified risks and their attributes to project stakeholders?

Project charter
Issue log
Risk register (Correct answer)
Stakeholder register

Correct answer: Risk register

The risk register captures all identified risks, their probability, impact, and response plans, making it the primary risk communication artifact.

Question 19: What does 'residual risk' refer to in project risk management?

Risk transferred to a third party
Risk that has not yet been identified
Risk discovered during project closure
Risk remaining after responses have been implemented (Correct answer)

Correct answer: Risk remaining after responses have been implemented

Residual risk is the risk that remains after planned risk responses have been applied.

Question 20: What distinguishes a risk audit from a risk review in particular?

A risk audit is a tool and technique of control risks, while risk review is an output of control risks.
A risk review is the process of identifying new risks, reevaluating existing risks, and closing risks that are out of date. A risk audit investigates and documents the effectiveness of risk responses as well as the effectiveness of the risk management process. (Correct answer)
There is no difference
A risk audit identifies new risks, reevaluates existing risks, and closes risks that are out of date. A risk review evaluates and documents the success of risk responses as well as the effectiveness of the risk management process.

Correct answer: A risk review is the process of identifying new risks, reevaluating existing risks, and closing risks that are out of date. A risk audit investigates and documents the effectiveness of risk responses as well as the effectiveness of the risk management process.

Explanation: A risk audit investigates and records the effectiveness of risk solutions, whereas a risk reassessment involves the discovery of new risks, a reevaluation of ongoing risks, and the closure of risks that are no longer relevant (PMBOK Guide page 351). Because risk reassessment is also a tool and approach used in the Control Risks process.

Question 21: A project manager notices that the team consistently underreports risks. This most likely indicates:

A risk-averse culture that discourages transparency (Correct answer)
Too many risks already in the register
A lack of a probability and impact matrix
Insufficient risk identification tools

Correct answer: A risk-averse culture that discourages transparency

Underreporting typically signals a cultural environment where team members fear negative consequences for surfacing problems, suppressing transparent risk communication.

Question 22: A project team identifies a risk that falls within the organization's risk tolerance. What is the appropriate response?

Accept the risk and monitor it passively (Correct answer)
Escalate it immediately to the sponsor
Apply an aggressive mitigation strategy
Transfer the risk to a third party

Correct answer: Accept the risk and monitor it passively

Risks within tolerance levels are acceptable and typically require only monitoring, as they do not exceed the boundaries the organization has set.

Question 23: What is a risk threshold in the context of risk communication?

The probability above which a risk becomes an issue
The budget reserved for risk response
The maximum number of risks allowed on a project
The level of risk exposure above which stakeholders require notification or action (Correct answer)

Correct answer: The level of risk exposure above which stakeholders require notification or action

A risk threshold defines the boundary of acceptable risk exposure; anything beyond it triggers escalation, stakeholder communication, or executive action.

Question 24: In procurement risk management, what does vendor due diligence primarily assess before contract award?

The specific legal terms and conditions proposed in vendor contracts
The technical specifications and formatting of vendor proposals
The financial stability, past performance, and delivery capability of potential vendors (Correct answer)
The delivery timelines and milestone schedules proposed by competing vendors

Correct answer: The financial stability, past performance, and delivery capability of potential vendors

Vendor due diligence assesses financial stability, past performance, and overall capability to ensure a vendor can reliably fulfill contractual obligations before award.

Question 25: Which of the following is a key objective of the Perform Qualitative Risk Analysis process?

To develop detailed, funded, and resourced risk response plans.
To prioritize identified individual project risks for subsequent analysis or action. (Correct answer)
To transfer the impact of threats to a third party.
To numerically analyze the effect of identified risks on overall project objectives.

Correct answer: To prioritize identified individual project risks for subsequent analysis or action.

The primary purpose of Perform Qualitative Risk Analysis is to prioritize risks by assessing their probability of occurrence and impact. This prioritization helps the team focus on the most critical risks, which may then undergo further quantitative analysis or have response plans developed.

Question 26: Which communication method is most appropriate for conveying complex risk data trends to senior stakeholders?

Email summaries of individual risks
Verbal status updates in team meetings
Visual dashboards with risk heat maps and trend charts (Correct answer)
Detailed technical risk registers

Correct answer: Visual dashboards with risk heat maps and trend charts

Visual dashboards allow senior stakeholders to quickly grasp risk trends and patterns without requiring deep technical detail.

Question 27: Which contract type transfers the most financial risk to the seller?

Time and material contract
Cost-plus-incentive-fee contract
Cost-plus-fixed-fee contract
Fixed-price contract (Correct answer)

Correct answer: Fixed-price contract

In a fixed-price contract, the seller must complete the work at the agreed price regardless of actual costs, bearing the full financial risk.

Question 28: A project manager wants to exploit a positive risk. Which of the following actions best describes exploitation?

Ensuring the opportunity definitely occurs (Correct answer)
Increasing the project budget to capitalize on the opportunity
Sharing the opportunity with a partner to increase the chance of occurrence
Accepting the benefit if it occurs

Correct answer: Ensuring the opportunity definitely occurs

Exploiting a positive risk means taking actions to ensure the opportunity definitely happens.

Question 29: A project team allocates budget to cover the cost of accepted risks if they occur. This budget is called:

Contingency reserve (Correct answer)
Project budget
Management reserve
Risk tolerance

Correct answer: Contingency reserve

Contingency reserve is set aside to address known risks (known unknowns) that may occur during the project.

Question 30: For a project including reforestation, Ray is the project manager. Ray seeks anonymous opinions from six experts while also sending out a questionnaire including dangers that have been discovered by the project team in order to boost the process of detecting risks. What method is Ray employing?

Documentation review
Interviews
Delphi technique (Correct answer)
Brain storming

Correct answer: Delphi technique

The Delphi technique is a structured communication method used to gather expert opinions, often for risk identification or estimation. It involves sending out questionnaires to a panel of experts, collecting their anonymous responses, and then providing summarized feedback for subsequent rounds. This iterative process helps achieve consensus while minimizing bias and groupthink.

Question 31: Why is it important to align the project risk management plan with the organization's enterprise risk management (ERM) framework?

To avoid creating a risk register
To ensure project risks are managed consistently with organizational risk governance standards (Correct answer)
To reduce the number of risks identified
To eliminate the need for stakeholder communication

Correct answer: To ensure project risks are managed consistently with organizational risk governance standards

Alignment with ERM ensures that project-level risk decisions are consistent with organizational policies, thresholds, and governance expectations.

Question 32: A project manager receives work performance reports showing the schedule is significantly behind. From a risk monitoring perspective, this information should primarily be used to:

Immediately crash the schedule
Assess whether schedule risks are materializing and update risk status (Correct answer)
Reduce project scope to recover schedule
Report the delay to the customer only

Correct answer: Assess whether schedule risks are materializing and update risk status

Schedule variance data is a key input for risk monitoring, helping the team assess whether previously identified schedule risks have triggered and whether new risks have emerged.

Question 33: In the Perform Qualitative Risk Analysis process, which of the following is a primary input that contains the list of identified risks to be assessed?

Stakeholder Engagement Plan
Risk Register (Correct answer)
Project Charter
Risk Management Plan

Correct answer: Risk Register

The Risk Register is the main input for Perform Qualitative Risk Analysis, as it contains the initial list of risks identified during the Identify Risks process. This process then updates the risk register with prioritization information.

Question 34: Which approach best demonstrates professional competency in Project Risk Management practice?

Relying solely on initial training
Following only personal preferences
Integrating continuing education, practical experience, and evidence-based decision making (Correct answer)
Avoiding challenging situations

Correct answer: Integrating continuing education, practical experience, and evidence-based decision making

This is fundamental to Project Risk Management practice. Integrating continuing education, practical experience, and evidence-based decision making represents the professional standard for professional standards in the Project Risk Management certification framework.

Question 35: Requiring a vendor to obtain a performance bond before contract award is an example of which risk strategy?

Risk transfer (Correct answer)
Risk exploitation
Risk avoidance
Risk acceptance

Correct answer: Risk transfer

Requiring a performance bond transfers the financial risk of vendor non-performance to a surety company, protecting the buyer if the vendor fails to fulfill their contractual obligations.

Question 36: Which technique uses expert judgment and group brainstorming to identify risks that may affect the project?

Monte Carlo simulation
Sensitivity analysis
Delphi technique (Correct answer)
Root cause analysis

Correct answer: Delphi technique

The Delphi technique collects anonymous expert opinions iteratively to reach consensus on risk identification.

Question 37: What is the difference between a 'residual risk' and a 'secondary risk'?

They are the same concept with different names
Secondary risks are more severe than residual risks
Residual risks remain after responses; secondary risks are created by responses (Correct answer)
Residual risks only apply to schedule risks

Correct answer: Residual risks remain after responses; secondary risks are created by responses

Residual risks are smaller risks that remain after a response is applied, while secondary risks are new risks introduced as a direct result of implementing a risk response.

Question 38: Which tool is commonly used for root cause analysis in Project Risk Management quality management?

Random sampling
Customer surveys only
Profit analysis
Fishbone (Ishikawa) diagram to identify contributing factors systematically (Correct answer)

Correct answer: Fishbone (Ishikawa) diagram to identify contributing factors systematically

This is fundamental to Project Risk Management practice. Fishbone (Ishikawa) diagram to identify contributing factors systematically represents the professional standard for quality in the Project Risk Management certification framework.

Question 39: Which metric is most useful for communicating the overall health of a project's risk exposure?

Number of risks identified
Expected monetary value (EMV) of the combined risk portfolio (Correct answer)
Individual risk probability scores
Names of risk owners

Correct answer: Expected monetary value (EMV) of the combined risk portfolio

EMV aggregates the monetary impact of all risks weighted by probability, giving stakeholders a single figure representing total risk exposure.

Question 40: A previously identified risk has now occurred on the project. What does this risk become in project management terminology?

A trigger
A lesson learned
An issue (Correct answer)
A constraint

Correct answer: An issue

When a risk event actually occurs, it transitions from a risk (uncertain future event) to an issue (a current problem that requires immediate action).

Question 41: A project team is grouping identified risks based on their common sources, such as technical, external, organizational, and project management. This helps in understanding the project's exposure to different types of risks and can aid in developing more effective risk responses. What tool or technique are they using?

Influence Diagrams
Probability and Impact Assessment
Assumption and Constraint Analysis
Risk Categorization (Correct answer)

Correct answer: Risk Categorization

Risk Categorization involves organizing risks into groups based on their source or the project area they affect. This is often done using a Risk Breakdown Structure (RBS) and helps to identify concentrated areas of risk and common root causes.

Question 42: When an organization's risk appetite changes during a project, the project manager should:

Continue using the original risk thresholds until the project ends
Review and update the risk management plan and reassess existing risk responses (Correct answer)
Immediately close all open risks
Request a new project charter

Correct answer: Review and update the risk management plan and reassess existing risk responses

A change in organizational risk appetite affects the acceptability of existing risks and the appropriateness of current responses, requiring a reassessment.

Question 43: A project manager is reviewing the project charter and notes several key factors that are considered to be true for planning purposes, such as the timely availability of key subject matter experts and the approval of a specific technology. The manager recognizes that if these factors prove to be false, the project could be negatively impacted. What risk identification technique is best suited for exploring the risks associated with these factors?

Assumption and Constraint Analysis (Correct answer)
Document Analysis
Brainstorming
Prompt Lists

Correct answer: Assumption and Constraint Analysis

Assumption and Constraint Analysis is the most suitable technique. Assumptions are factors believed to be true without proof, and each one carries the risk of being incorrect. This analysis systematically examines these assumptions to identify the risks that arise if they prove to be false, turning them into potential risk events to be managed.

Question 44: A project manager is holding a recurring meeting with key stakeholders to discuss the current status of identified risks, the effectiveness of implemented responses, and to identify any new risks that have emerged. What is the primary purpose of this activity in the Monitor Risks process?

To secure contingency reserves from the project sponsor.
To ensure risk responses are being executed as planned and to evaluate their effectiveness. (Correct answer)
To create the initial risk management plan.
To conduct a quantitative analysis of high-priority risks.

Correct answer: To ensure risk responses are being executed as planned and to evaluate their effectiveness.

This scenario describes a risk review meeting. The core purpose of such meetings within the Monitor Risks process is to track identified risks, monitor residual risks, identify new risks, and evaluate the effectiveness of risk response plans.

Question 45: Which procurement strategy best reduces the risk of schedule delays caused by vendor non-performance?

Removing acceptance criteria to speed up delivery acceptance
Avoiding fixed-price contracts to maintain schedule flexibility
Using a single preferred vendor for all contracted work
Including liquidated damages clauses tied to milestone dates (Correct answer)

Correct answer: Including liquidated damages clauses tied to milestone dates

Liquidated damages clauses impose pre-defined financial penalties for schedule delays, creating a strong financial incentive for vendors to deliver on time.

Question 46: Which of the following range estimates includes the LEAST risk, assuming that the range estimates' endpoints are +/- 3 sigma from the mean?

22-30 days
O=27 days, P=33 days, Most likely=30 days (Correct answer)
The mean of 28 days
30 days, plus or minus 5 days

Correct answer: O=27 days, P=33 days, Most likely=30 days

A smaller range between the optimistic (O) and pessimistic (P) estimates, when centered around the most likely value, indicates less uncertainty and therefore less risk. In option A, the range is 33 - 27 = 6 days, which is the narrowest range among the choices provided. This implies a higher degree of confidence and predictability in the estimate, signifying the least risk.

Question 47: A project building a new manufacturing plant is experiencing repeated equipment malfunctions. The project manager wants to identify the underlying causes of these failures, not just the symptoms. Which of the following techniques would be most appropriate for this purpose?

Delphi Technique
SWOT Analysis
Root Cause Analysis (Correct answer)
Interviews

Correct answer: Root Cause Analysis

Root Cause Analysis (RCA) is a problem-solving method used to identify the fundamental cause of a problem. By repeatedly asking 'Why?' (as in the 5 Whys technique) or using tools like fishbone diagrams, the team can dig deeper than the immediate symptoms (equipment malfunctions) to find the core issue that, if resolved, will prevent recurrence.

Question 48: Which concept describes the maximum loss an organization can absorb without threatening its strategic objectives?

Risk probability
Risk capacity (Correct answer)
Risk velocity
Risk appetite

Correct answer: Risk capacity

Risk capacity is the maximum level of risk an organization can absorb given its financial strength, resources, and strategic goals.

Question 49: During which process is the Risk Management Plan created?

Perform Qualitative Risk Analysis
Plan Risk Management (Correct answer)
Identify Risks
Monitor Risks

Correct answer: Plan Risk Management

Plan Risk Management is the process that defines how risk management activities will be conducted throughout the project.

Question 50: Which of the following is NOT a typical component of a comprehensive Risk Management Plan?

Budgeting and timing of risk management activities
Specific risk response actions for identified risks (Correct answer)
Risk probability and impact definitions
Methodology, roles, and responsibilities

Correct answer: Specific risk response actions for identified risks

The Risk Management Plan describes *how* risk management will be performed, including methodology, roles, definitions, and budget. However, the specific risk response actions for individual identified risks are documented later in the Risk Register during the Plan Risk Responses process.

Question 51: What is the primary purpose of a make-or-buy analysis in project risk management?

To evaluate the quality of vendor proposals
To assess the risks and costs of producing internally versus outsourcing (Correct answer)
To determine whether to hire internal or external staff
To establish contract payment terms

Correct answer: To assess the risks and costs of producing internally versus outsourcing

A make-or-buy analysis evaluates the risks, costs, and benefits of producing a product or service internally versus outsourcing to an external vendor.

Question 52: In risk monitoring, 'risk reassessment' differs from 'risk audits' in that:

Risk audits replace the need for reassessment
Reassessment identifies new risks and re-evaluates existing ones; audits evaluate the effectiveness of risk processes (Correct answer)
Reassessment is performed by external parties only
Risk reassessment is done only once; audits are ongoing

Correct answer: Reassessment identifies new risks and re-evaluates existing ones; audits evaluate the effectiveness of risk processes

Risk reassessment focuses on identifying new risks and re-evaluating existing risk rankings, while risk audits examine whether risk management processes and responses are being executed effectively.

Question 53: What is the primary purpose of reserve analysis during the Monitor Risks process?

To calculate the project's NPV
To allocate budget for team training
To compare remaining contingency reserves to remaining risk exposure (Correct answer)
To determine resource availability

Correct answer: To compare remaining contingency reserves to remaining risk exposure

Reserve analysis during monitoring compares the amount of contingency reserves remaining against the level of remaining risk to ensure adequate coverage.

Question 54: How has digital technology transformed Project Risk Management practice?

It has had no impact
It has replaced all traditional methods
It only affects large organizations
It has enhanced data collection, analysis, communication, and operational efficiency (Correct answer)

Correct answer: It has enhanced data collection, analysis, communication, and operational efficiency

This is fundamental to Project Risk Management practice. It has enhanced data collection, analysis, communication, and operational efficiency represents the professional standard for technology in the Project Risk Management certification framework.

Question 55: A project manager notices that contingency reserves are being consumed faster than expected relative to project progress. What risk monitoring action should follow?

Request management reserves without further analysis
Increase the project budget immediately
Eliminate low-priority risks to free up attention
Perform a reserve analysis and reassess outstanding risks (Correct answer)

Correct answer: Perform a reserve analysis and reassess outstanding risks

Faster-than-expected reserve consumption signals that risks may be occurring more frequently or severely than planned, warranting an immediate reserve analysis and risk reassessment.

Question 56: A project manager is facilitating a qualitative risk analysis workshop. The team has identified numerous risks and now needs to prioritize them for further analysis or response planning. Which of the following is the primary tool used for this purpose?

Risk Breakdown Structure (RBS)
Root Cause Analysis
Probability and Impact Matrix (Correct answer)
Decision Tree Analysis

Correct answer: Probability and Impact Matrix

The Probability and Impact Matrix is a key tool in the Perform Qualitative Risk Analysis process. It is used to visually map and prioritize individual project risks based on their likelihood of occurrence and the potential effect on project objectives.

Question 57: Workarounds are MOST commonly associated with:

Planned risk responses for known risks
Budget allocation for contingency
Secondary risks from mitigation plans
Responses to risks that were not previously identified (Correct answer)

Correct answer: Responses to risks that were not previously identified

Workarounds are unplanned responses developed in real time when unanticipated risks (unknown unknowns) occur.

Question 58: Disaster scenarios (such as floods, earthquakes, etc.) have been noted as potential project risks. Your project sponsor advised you to create a contingency reserve (5% of the project budget) to be used in case of emergency scenarios after mentioning that no action could be taken to mitigate this risk at the project level. This is an illustration of:

Risk Avoidance
Risk Acceptance (Correct answer)
Bad policy decision
Risk Mitigation

Correct answer: Risk Acceptance

Explanation: Since it is rare that all risks can be completely eliminated from a project, acceptance is an approach that frequently needs to be used. When using this tactic, the project team has either chosen against altering the project management plan to address a risk or has run out of options. This frequently entails "active acceptance," which makes use of a contingency reserve, which might be time, money, or resources placed aside to help offset the effects of a risk event.

Question 59: Which document outlines how risk management activities will be structured and performed throughout the project?

Risk management plan (Correct answer)
Risk register
Risk report
Issue log

Correct answer: Risk management plan

The risk management plan defines the methodology, roles, timing, and categories for managing risk on the project.

Question 60: Considering that Analogous Cost Estimating is:

Bottom-up estimating
Uses statistical relationship between historical data and other variables
Generally less accurate (Correct answer)
Generally Accurate

Correct answer: Generally less accurate

Analogous estimating, also known as top-down estimating, uses historical data from a similar past project to estimate the duration or cost of the current project. While quick and inexpensive, it is generally less accurate because it relies on high-level comparisons and doesn't account for unique differences between projects. It is best used in the early stages when detailed information is scarce.

Question 61: What is the purpose of a risk dashboard in project communication?

To provide a real-time, at-a-glance view of current risk exposure and key risk indicators (Correct answer)
To capture risk identification brainstorming results
To document detailed mitigation steps for each risk
To replace face-to-face risk review meetings

Correct answer: To provide a real-time, at-a-glance view of current risk exposure and key risk indicators

A risk dashboard consolidates key risk metrics into a single visual display, enabling stakeholders to monitor risk health quickly and continuously.

Question 62: In quantitative risk analysis, which technique determines which risks have the most potential impact on project objectives?

Probability and Impact Matrix
Sensitivity analysis (Correct answer)
Risk categorization
Risk audits

Correct answer: Sensitivity analysis

Sensitivity analysis (often shown as a tornado diagram) identifies which variables have the greatest effect on project outcomes.

Question 63: An organization's willingness to pursue or retain a certain amount and type of risk in order to achieve its strategic objectives is best described as its:

Risk Tolerance
Risk Threshold
Risk Capacity
Risk Appetite (Correct answer)

Correct answer: Risk Appetite

Risk appetite is the high-level, strategic amount of risk an organization is willing to accept in pursuit of its objectives. Risk tolerance is the specific, acceptable variation in performance related to achieving a specific objective, operating within the broader risk appetite.

Question 64: During the Risk Management Planning process, the project team decides to categorize potential risks by their source, such as Technical, External, Organizational, and Project Management. What tool or technique are they using?

Expert Judgment
SWOT Analysis
Probability and Impact Matrix
Risk Breakdown Structure (RBS) (Correct answer)

Correct answer: Risk Breakdown Structure (RBS)

A Risk Breakdown Structure (RBS) is a hierarchical representation of potential sources of risk. It organizes and defines the total risk exposure of the project by categorizing risks into groups and sub-groups, such as Technical, Organizational, External, and Project Management, which helps the team in systematically identifying and managing risks.

Question 65: While monitoring project progress, a project manager learns that a key supplier for a non-critical component has just declared bankruptcy. This was not an identified risk. What is the MOST appropriate first action for the project manager to take?

Add the new risk to the risk register and perform an analysis. (Correct answer)
Immediately issue a change request to update the project baseline.
Escalate the issue to senior management and wait for direction.
Use the management reserve to hire a new supplier immediately.

Correct answer: Add the new risk to the risk register and perform an analysis.

When a new risk is identified during the Monitor Risks process, the standard procedure is to first add it to the risk register. Following this, the risk should be analyzed (qualitatively and/or quantitatively) to understand its characteristics, which will inform the development of an appropriate response strategy.

Question 66: A project governance framework for risk management typically includes:

The project schedule and WBS only
Clear roles, escalation paths, decision authority levels, and reporting structures (Correct answer)
Only the risk register and probability matrix
Individual team members' personal risk preferences

Correct answer: Clear roles, escalation paths, decision authority levels, and reporting structures

Effective risk governance defines who owns risks, who can approve responses, how risks are escalated, and how risk information flows through the organization.

Question 67: A project manager is leading a risk identification workshop for a first-of-its-kind technology project. To mitigate the influence of dominant personalities and prevent groupthink, the manager wants to gather unbiased input from a geographically dispersed panel of experts. Which technique would be most effective in this situation?

Checklist Analysis
Brainstorming
SWOT Analysis
Delphi Technique (Correct answer)

Correct answer: Delphi Technique

The Delphi Technique is ideal for this scenario because it uses anonymous, iterative questionnaires to collect and consolidate expert opinions. This anonymity prevents a few vocal experts from dominating the discussion and encourages more honest, unbiased feedback, which is crucial for a novel project with high uncertainty.

Question 68: During a software development project, the project manager identifies a significant risk related to a new corporate-wide data privacy regulation that will impact not only their project but several other projects and operational departments. The project manager does not have the authority to implement the necessary organization-wide policy changes. What is the most appropriate risk response strategy for the project manager to take in this situation?

Escalate (Correct answer)
Mitigate
Avoid
Accept

Correct answer: Escalate

The identified risk is outside the project's boundaries and beyond the project manager's authority to manage. The appropriate response is to escalate the risk to the relevant higher-level authority within the organization (e.g., program manager, portfolio manager, or a governance body) who can address it effectively.

Question 69: A project team is conducting a comprehensive risk identification session. They decide to analyze the project from four perspectives: what internal factors give them an advantage, what internal factors are disadvantageous, what external elements could help the project, and what external elements could harm it. This approach helps them identify risks from both internal and external sources. Which technique are they employing?

Assumption and Constraint Analysis
Checklist Analysis
Root Cause Analysis
SWOT Analysis (Correct answer)

Correct answer: SWOT Analysis

The team is performing a SWOT Analysis, which stands for Strengths, Weaknesses, Opportunities, and Threats. Strengths and weaknesses are internal to the project or organization, while opportunities and threats are external. This technique provides a structured way to identify a broad range of risks (threats) and opportunities.

Question 70: Which of the following is an example of a secondary risk?

A risk with very low probability
A new risk that arises as a result of implementing a risk response (Correct answer)
A risk that was not identified during planning
A risk owned by an external stakeholder

Correct answer: A new risk that arises as a result of implementing a risk response

Secondary risks are new risks that emerge as a direct consequence of executing a risk response action.

Question 71: A project to build a data center in a coastal area identifies a high risk of project delays due to potential hurricane activity during the planned construction period. The project team decides to purchase and pre-position advanced, weather-resistant building materials and to create a detailed emergency shutdown and startup plan to minimize downtime after a storm. Which risk response strategy is the team employing?

Avoid
Mitigate (Correct answer)
Transfer
Accept

Correct answer: Mitigate

The team is taking proactive steps to reduce the probability and/or impact of the hurricane risk. They are not eliminating the threat entirely (Avoid) or shifting the financial responsibility to a third party (Transfer). Purchasing specialized materials and having a response plan lessens the potential damage and delay, which is the definition of mitigation.

Question 72: Which qualitative risk analysis technique maps risks based on probability and impact?

Expected Monetary Value
Sensitivity analysis
Monte Carlo simulation
Probability and Impact Matrix (Correct answer)

Correct answer: Probability and Impact Matrix

The Probability and Impact Matrix categorizes risks as low, medium, or high based on their likelihood and potential effect.

Question 73: Which of the following is a key output of the Plan Risk Management process?

Risk Management Plan (Correct answer)
Risk Breakdown Structure
Risk Register
Stakeholder Register

Correct answer: Risk Management Plan

The primary output of the Plan Risk Management process is the Risk Management Plan. This document outlines how risk management activities will be structured and performed for the project. The Risk Register is an output of the Identify Risks process, the Risk Breakdown Structure is a tool used within the plan, and the Stakeholder Register is an input to this process.

Question 74: A project manager reviews risk responses at the end of the project to document what worked. This activity BEST fits within:

Perform Qualitative Risk Analysis
Close Project or Phase (Correct answer)
Identify Risks
Monitor Risks

Correct answer: Close Project or Phase

Lessons learned from risk responses are captured during the Close Project or Phase process and stored in organizational process assets.

Question 75: A risk owner's primary communication responsibility is to:

Notify external vendors of all identified risks
Present risks at every project status meeting
Provide regular status updates on assigned risks and response effectiveness (Correct answer)
Approve all project budget changes related to risk

Correct answer: Provide regular status updates on assigned risks and response effectiveness

Risk owners must keep the project team and manager informed about the current status, triggers, and effectiveness of responses for their assigned risks.

Question 76: Expected Monetary Value (EMV) is calculated by:

Subtracting residual risk from contingency
Dividing impact by probability
Adding probability and impact
Multiplying probability by impact cost (Correct answer)

Correct answer: Multiplying probability by impact cost

EMV = Probability × Impact, providing a weighted average outcome value used in decision tree analysis.

Question 77: Which tool is primarily used to track the status of identified risks and monitor residual risks throughout the project?

Stakeholder register
Issue log
Risk breakdown structure
Risk register (Correct answer)

Correct answer: Risk register

The risk register is the primary document for tracking identified risks, responses, owners, and current status throughout the project lifecycle.

Question 78: Which of the following is a primary output of the Perform Quantitative Risk Analysis process?

A probabilistic analysis of project objectives (Correct answer)
A prioritized list of individual project risks
The risk management plan
Updates to the risk register, including risk owners

Correct answer: A probabilistic analysis of project objectives

A key output of Perform Quantitative Risk Analysis is a probabilistic analysis of the project, which provides forecasts for project outcomes such as completion dates and costs. This often includes a probability distribution of possible outcomes (e.g., from a Monte Carlo simulation) and the likelihood of achieving specific targets. While the risk register is updated (an input), and risks are prioritized (often done qualitatively first), the core quantitative output is the numerical analysis of overall project objectives. The risk management plan is an input to this process, not an output.

Question 79: What is the purpose of a contingency reserve in relation to risk tolerance?

To replace the need for risk identification
To pay for scope changes requested by stakeholders
To cover unlimited unforeseen events
To fund responses to known risks within the accepted tolerance range (Correct answer)

Correct answer: To fund responses to known risks within the accepted tolerance range

Contingency reserves provide budgeted funds for responding to identified risks whose impacts fall within the organization's accepted tolerance levels.

Question 80: Which of the following scenarios represents an appropriate use of management reserves in risk monitoring?

Funding responses to unknown-unknown risks that materialize (Correct answer)
Compensating for poor initial cost estimating
Paying for planned risk mitigation activities
Covering routine project expenses

Correct answer: Funding responses to unknown-unknown risks that materialize

Management reserves are held for unforeseeable 'unknown-unknown' risks; when such an event occurs, a change request is needed to access these funds.

Question 81: Which statement best describes the relationship between risk appetite and project objectives?

Risk appetite defines the boundaries within which project objectives should be pursued (Correct answer)
Risk appetite and project objectives are developed by different teams with no connection
Project objectives automatically determine risk appetite
Risk appetite is set after project objectives are achieved

Correct answer: Risk appetite defines the boundaries within which project objectives should be pursued

Risk appetite establishes the strategic boundaries that constrain how project objectives are pursued, ensuring alignment with organizational strategy.

Question 82: Which risk response strategy involves acknowledging a risk but not taking any proactive action, instead dealing with the consequences only if the risk event occurs?

Passive Acceptance (Correct answer)
Active Acceptance
Risk Mitigation
Risk Transfer

Correct answer: Passive Acceptance

Risk acceptance can be active or passive. Active acceptance involves creating a contingency plan to be executed if the risk occurs. Passive acceptance involves no proactive planning; the team will simply deal with the risk if it materializes, often through a workaround.

Question 83: During a risk identification meeting, a project team is using a predefined list of risk categories, such as technical, external, organizational, and environmental, to ensure they consider a wide range of potential risks. This list helps trigger discussions and prevents them from overlooking common sources of project risk. What tool or technique is the team using?

Assumption Analysis
Prompt List (Correct answer)
Work Breakdown Structure
Root Cause Analysis

Correct answer: Prompt List

The team is using a Prompt List. A prompt list is a structured set of risk categories or areas that helps guide the project team in identifying risks comprehensively. It serves as a checklist or framework to stimulate thinking about various risk sources that might otherwise be missed.

Question 84: How does continuous improvement apply to Project Risk Management quality management?

It means constant major changes
It involves ongoing incremental enhancements to processes based on data and feedback (Correct answer)
It applies only to products
It is a one-time initiative

Correct answer: It involves ongoing incremental enhancements to processes based on data and feedback

This is fundamental to Project Risk Management practice. It involves ongoing incremental enhancements to processes based on data and feedback represents the professional standard for quality in the Project Risk Management certification framework.

Question 85: What is a 'risk trigger' in the context of risk monitoring and control?

The financial impact of a risk
The cause of a risk event
A stakeholder concern about risk
An indicator that a risk is about to occur (Correct answer)

Correct answer: An indicator that a risk is about to occur

A risk trigger (also called a warning sign or symptom) is an event or condition that indicates a risk is about to occur or has occurred.

Question 86: A tornado diagram is used to display the results of which analysis technique?

Decision tree analysis
Monte Carlo simulation
Sensitivity analysis (Correct answer)
Expected Monetary Value

Correct answer: Sensitivity analysis

Tornado diagrams rank variables by their impact on the project outcome, with the largest bars at the top.

Question 87: What role does a 'risk owner' play specifically during the Monitor Risks process?

Manages all risks across the entire project
Monitors assigned risks, implements responses, and reports status (Correct answer)
Approves the project budget for risk responses
Documents risks in the risk register on behalf of the team

Correct answer: Monitors assigned risks, implements responses, and reports status

During monitoring, each risk owner is responsible for watching their assigned risks, executing planned responses when triggers occur, and reporting current status to the project manager.

Question 88: Patrick is a brand-new project manager who is motivated to succeed. Patrick's mentor and sponsor, who has experience and a love of risk management, is certified. Given that it is often updated and utilized as both an input and an output in the majority of risk processes, which document would he advise Patrick to concentrate on?

Risk audit (Correct answer)
Risk monitoring plan
Risk probability and impact matrix
Risk register

Correct answer: Risk audit

Explanation: The process of identifying risks produces the risk register, which is then used as input by other risk management procedures such as performing qualitative and quantitative risk analysis, planning risk mitigation strategies, and monitoring risks. As a result of all the aforementioned risk management methods, it is frequently updated.

Question 89: Which of the following is a key indicator that an organization has a mature risk governance culture?

Only negative outcomes are tracked in the risk register
Risk management is handled exclusively by the PMO
Risk reviews occur only at project initiation
Risks are openly discussed, documented, and escalated without fear of blame (Correct answer)

Correct answer: Risks are openly discussed, documented, and escalated without fear of blame

Mature risk governance is characterized by psychological safety, systematic documentation, regular review cycles, and clear escalation paths across all levels.

Question 90: A project team identifies a potential delay in a supplier's delivery. They decide not to take immediate action but develop a plan to fast-track an alternative supplier if the primary supplier's delivery is delayed by more than one week. This pre-defined plan is an example of which of the following?

A residual risk
A risk workaround
A secondary risk
A contingent response strategy (Correct answer)

Correct answer: A contingent response strategy

A contingent response strategy (or contingency plan) is a pre-planned response that is only executed if a specific trigger event occurs. In this case, the trigger is the delivery being delayed by more than one week. A workaround is an unplanned response to a risk that has occurred.

Question 91: Which of the following BEST describes a risk appetite?

The degree of uncertainty an organization is willing to accept (Correct answer)
The exact probability of a risk occurring
The maximum risk a project can tolerate before it is stopped
The cost of a risk response plan

Correct answer: The degree of uncertainty an organization is willing to accept

Risk appetite reflects how much risk an organization is willing to take in pursuit of its objectives.

Question 92: A project manager wants to ensure all identified risk owners are actively managing their assigned risks. Which tool is most appropriate?

Sensitivity analysis
Monte Carlo simulation
Risk register review meetings (Correct answer)
Risk breakdown structure

Correct answer: Risk register review meetings

Regular risk register review meetings bring together risk owners to report on risk status, response effectiveness, and trigger conditions, ensuring accountability.

Question 93: A Risk Breakdown Structure (RBS) is used to:

Rank risks by probability and impact
Assign risk owners
Organize risks into hierarchical categories (Correct answer)
Calculate expected monetary value

Correct answer: Organize risks into hierarchical categories

The RBS organizes identified risks into a hierarchical structure by source or category to facilitate analysis.

Question 94: A project has a 40% chance of a 'scope creep' risk occurring, which would result in a cost of $200,000. It also has a 20% chance of an opportunity to finish a key phase early, which would result in a savings of $50,000. What is the Expected Monetary Value (EMV) for the project considering only these two events?

-$150,000
$80,000
-$90,000
-$70,000 (Correct answer)

Correct answer: -$70,000

Expected Monetary Value (EMV) is calculated by multiplying the probability of each risk or opportunity by its monetary impact and summing the results. For the threat: 40% * (-$200,000) = -$80,000. For the opportunity: 20% * (+$50,000) = +$10,000. The total EMV is -$80,000 + $10,000 = -$70,000.

Question 95: What is the role of lessons learned in risk communication?

To replace the risk register at project closeout
To assign blame for risks that materialized
To document all project changes in one place
To share risk outcomes and response effectiveness for future project benefit (Correct answer)

Correct answer: To share risk outcomes and response effectiveness for future project benefit

Lessons learned capture what worked and what did not in managing risks, providing organizational knowledge that improves future risk communication and management.

Question 96: A project manager documents risks that are below the threshold for active response. This is called:

Passive acceptance (Correct answer)
Risk mitigation
Risk avoidance
Contingency planning

Correct answer: Passive acceptance

Passive acceptance means acknowledging a risk exists but choosing not to act unless it occurs.

Question 97: Which document is updated as a key output of the Monitor Risks process to capture lessons about risk management effectiveness?

Lessons learned register (Correct answer)
Stakeholder register
Quality management plan
Project charter

Correct answer: Lessons learned register

The lessons learned register captures insights about what risk monitoring and control approaches worked or failed, providing valuable guidance for future phases and projects.

Question 98: A project manager is developing the Risk Management Plan for a new software development project. One of the key stakeholders has a very low tolerance for any risks that could impact the product's launch date. What component of the Risk Management Plan should the project manager define to address this concern?

Roles and responsibilities
Reporting formats
Risk categories
Stakeholder risk thresholds (Correct answer)

Correct answer: Stakeholder risk thresholds

Stakeholder risk thresholds, which are a part of defining stakeholder tolerances, are a crucial component of the Risk Management Plan. They quantify the acceptable level of risk for different stakeholders, particularly concerning specific project objectives like schedule, cost, quality, etc. Defining these thresholds directly addresses the stakeholder's low tolerance for schedule risks.

Question 99: Which procurement document is used to solicit bids when the scope of work is clearly and completely defined?

Request for Information (RFI)
Request for Proposal (RFP)
Invitation for Bid (IFB) (Correct answer)
Request for Quotation (RFQ)

Correct answer: Invitation for Bid (IFB)

An Invitation for Bid (IFB) is used when scope is fully defined and vendor selection is based primarily on price.

Question 100: Which of the following is an example of a risk trigger?

The risk owner is assigned
A vendor misses two consecutive milestone deadlines (Correct answer)
The risk response plan is documented
Contingency reserve is approved

Correct answer: A vendor misses two consecutive milestone deadlines

Triggers are early warning signs indicating a risk event is about to occur or has occurred, prompting a planned response.

Question 101: You discover a risk has a 25% chance of happening in any month of a project with an eight-month length during the Perform Qualitative Risk Analysis phase. A contingency reserve of 8% of the project budget has been set aside, and the project's cost performance index is 0.7. What is the likelihood that the risk will materialize in the sixth month?

12.50%
20%
25% (Correct answer)
The question lacks sufficient information to answer

Correct answer: 25%

Explanation: There is a 25% possibility that the risk will materialize each month. The further information in the query is not pertinent.

Question 102: What does a warranty clause in a procurement contract primarily protect against?

Cost overruns during project execution
Scope creep introduced by the seller
Schedule delays caused by the buyer
Defects or failures in delivered goods and services after acceptance (Correct answer)

Correct answer: Defects or failures in delivered goods and services after acceptance

A warranty clause requires the seller to repair or replace defective goods or services for a specified period after delivery and acceptance, protecting the buyer.

Question 103: What is the role of a procurement audit in project risk management?

To review procurement processes and capture lessons learned for improvement (Correct answer)
To renegotiate pricing terms in existing active contracts
To identify and select new qualified vendors for upcoming projects
To conduct competitive financial analysis of all received vendor bids

Correct answer: To review procurement processes and capture lessons learned for improvement

A procurement audit reviews the full procurement process to identify successes and failures, supporting continuous improvement and risk reduction in future procurements.

Question 104: A project manager for a new software development project is trying to forecast the most likely completion date and budget. The project has many tasks with uncertain durations and costs. To understand the combined effect of all these uncertainties and to determine the probability of meeting specific targets, which quantitative risk analysis technique would be most appropriate?

Tornado Diagram
Monte Carlo Simulation (Correct answer)
Assumption and Constraint Analysis
Decision Tree Analysis

Correct answer: Monte Carlo Simulation

Monte Carlo simulation is a technique used to understand the impact of risk and uncertainty on a project. It runs thousands of iterations, using random values for uncertain variables (like task durations and costs) to produce a probability distribution of possible project outcomes, such as completion dates and final costs. This allows the manager to see the probability of achieving specific schedule or cost targets.

Question 105: During project execution, the project manager compares the amount of contingency reserves remaining to the amount of risk remaining in the project to determine if the remaining reserve is adequate. This is an example of what technique?

Earned Value Management
Trend Analysis
Assumption and Constraint Analysis
Reserve Analysis (Correct answer)

Correct answer: Reserve Analysis

Reserve analysis is used throughout the project to monitor the status of contingency and management reserves. It involves comparing the amount of remaining reserves to the amount of remaining risk to determine if the reserves are still sufficient.

Question 106: During a project's qualitative risk analysis, the team assesses the quality of the data being used to evaluate the risks. They are examining the data's accuracy, reliability, and integrity to ensure the analysis is based on solid information. What technique is the team employing?

Expert Judgment
SWOT Analysis
Risk Data Quality Assessment (Correct answer)
Risk Categorization

Correct answer: Risk Data Quality Assessment

A Risk Data Quality Assessment is a technique used to evaluate the degree to which the data about risks is accurate and reliable for risk management. It helps determine the level of confidence in the qualitative analysis results and identifies if better data is needed.

Question 107: Which of the following is a primary objective of performing a risk reassessment during the Monitor Risks process?

To calculate the project's final expected monetary value (EMV).
To develop the initial risk register from scratch.
To assign risk owners for the first time.
To identify new risks, re-evaluate existing ones, and close outdated risks. (Correct answer)

Correct answer: To identify new risks, re-evaluate existing ones, and close outdated risks.

Risk reassessment is a key activity in risk monitoring that involves regularly reviewing the risk register to identify any new risks, reassessing the probability and impact of current risks, and closing risks that are no longer relevant to the project.

Question 108: A project's risk exposure has significantly increased due to scope changes. Which action should the project manager take?

Remove low-priority risks from the register to focus on new ones
Transfer all new risks to the sponsor
Perform an unscheduled risk reassessment immediately (Correct answer)
Wait until the next scheduled risk review to reassess

Correct answer: Perform an unscheduled risk reassessment immediately

Significant changes like scope additions warrant immediate, unscheduled risk reassessments to ensure the risk management plan reflects current project realities.

Question 109: To create a risk management strategy for your project, you are organizing a planning meeting. Who ought to be invited?

The corporate risk manager
The project team leaders, key stakeholders, relevant subject matter experts, and anyone engaged in risk management activities for the company (Correct answer)
Just the project sponsor because her perception of how the risks will be handled is the most important
Subject matter experts only

Correct answer: The project team leaders, key stakeholders, relevant subject matter experts, and anyone engaged in risk management activities for the company

Explanation: When determining who to invite to such sessions, keep in mind that risk planning should be a fairly inclusive process.

Question 110: Risk owners are assigned during which process?

Perform Qualitative Risk Analysis
Plan Risk Responses (Correct answer)
Identify Risks
Monitor Risks

Correct answer: Plan Risk Responses

Risk owners are designated in the Plan Risk Responses process to ensure accountability for each risk response.

Question 111: How do continuing education requirements benefit Project Risk Management certified professionals?

They reduce practical skills
They ensure professionals stay current with evolving industry practices and knowledge (Correct answer)
They are unnecessary formalities
They only benefit training providers

Correct answer: They ensure professionals stay current with evolving industry practices and knowledge

This is fundamental to Project Risk Management practice. They ensure professionals stay current with evolving industry practices and knowledge represents the professional standard for professional standards in the Project Risk Management certification framework.

Question 112: When should a project manager escalate a risk to executive leadership?

Only after the risk becomes an issue
When the team cannot determine a response strategy
When the risk exceeds the project's risk threshold or tolerance level (Correct answer)
When any risk is first identified

Correct answer: When the risk exceeds the project's risk threshold or tolerance level

Risks that exceed defined thresholds or tolerances must be escalated because they fall outside the project team's authority to manage.

Question 113: Which of the following BEST represents an overall project risk?

A risk that affects multiple work packages
A single identified risk event with high probability
The combined effect of all individual risks on project objectives (Correct answer)
The risk with the highest EMV on the project

Correct answer: The combined effect of all individual risks on project objectives

Overall project risk represents the aggregate effect of all uncertainties on project outcomes, not just individual risk events.

Question 114: Which of the following data gathering techniques for risk identification is characterized by its free-form, collaborative nature where the primary goal is to generate a large quantity of ideas without immediate critique or evaluation?

Interviews
Checklist Analysis
Delphi Technique
Brainstorming (Correct answer)

Correct answer: Brainstorming

Brainstorming is a technique designed for a group to generate a large number of ideas in a non-judgmental environment. The focus is on quantity over quality in the initial phase, encouraging creative and open thinking to identify as many potential risks as possible before they are analyzed or prioritized.

Question 115: A project manager is analyzing the risks for a complex construction project. To determine which individual risks have the most potential impact on the project's overall cost, the manager varies one risk at a time while holding all other variables constant. The results are then plotted in a bar chart, with the longest bars at the top representing the most impactful risks. Which quantitative risk analysis technique is being used?

Monte Carlo Analysis
Decision Tree Analysis
Expected Monetary Value (EMV)
Sensitivity Analysis (Correct answer)

Correct answer: Sensitivity Analysis

Sensitivity analysis, often displayed as a tornado diagram, is used to determine which individual risks or sources of uncertainty have the most potential impact on a project objective. It examines the effect of varying one input variable at a time on an outcome, which is precisely what the scenario describes. Monte Carlo analysis simulates the combined effect of many risks, Decision Tree analysis evaluates choices with uncertainty, and EMV calculates the average outcome of a single risk.

PMI Risk Management Professional (PMI-RMP)

The PMI-RMP certification validates expertise in identifying project risks, mitigating threats, and capitalizing on opportunities using predictive, agile, and hybrid risk management approaches. It covers risk strategy, analysis, response, monitoring, and governance across the full project risk lifecycle.

115

Questions

210 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

pmi.org — Passing score, score release, test dates, renewal, fees, score validity, exam format, retake policy · verified Oct 2026
pearsonvue.com — Test delivery · verified Oct 2026