Project Risk Management Technology & Digital Applications 4 — Questions and Answers
Question 1: A project manager is evaluating whether to deploy software updates during a major product launch. The risk of deployment failure during peak traffic is rated HIGH. The BEST response is to:
- Deploy immediately to fix existing bugs
- Defer the update until after the launch window using a change freeze (Correct answer)
- Transfer the risk to the DevOps team
- Accept the risk without any adjustment
Correct answer: Defer the update until after the launch window using a change freeze
A change freeze during high-risk periods prevents deployment failures from compounding launch risks.
Question 2: Which metric BEST quantifies the risk exposure of a software project experiencing frequent unplanned outages?
- Return on Investment (ROI)
- Mean Time Between Failures (MTBF) and Mean Time To Repair (MTTR) (Correct answer)
- Cost Performance Index (CPI)
- Schedule Variance (SV)
Correct answer: Mean Time Between Failures (MTBF) and Mean Time To Repair (MTTR)
MTBF measures reliability frequency while MTTR measures recovery speed—together they quantify operational risk exposure.
Question 3: A project is using a microservices architecture. Which risk is UNIQUELY elevated compared to a monolithic architecture?
- Scope creep risk
- Cascading failure risk across interdependent services (Correct answer)
- Sponsor disengagement risk
- Budget overrun due to licensing costs
Correct answer: Cascading failure risk across interdependent services
Microservices introduce inter-service dependencies where one service failure can cascade and bring down dependent services.
Question 4: A project team is building a customer-facing mobile app. A risk is identified that the app may not perform adequately on older devices. This is BEST addressed through:
- Risk acceptance and post-launch patching
- Device compatibility testing on target device matrix before release (Correct answer)
- Transferring risk to the app store provider
- Removing support for older operating systems from scope
Correct answer: Device compatibility testing on target device matrix before release
Testing across a defined device matrix before release identifies performance issues early enough to fix them.
Question 5: When a project team stores sensitive project data in a public cloud, which risk consideration is MOST critical during planning?
- Network bandwidth cost optimization
- Data residency, sovereignty, and regulatory compliance requirements (Correct answer)
- Vendor market share and brand recognition
- UI/UX design of the cloud console
Correct answer: Data residency, sovereignty, and regulatory compliance requirements
Regulatory requirements (e.g., GDPR, HIPAA) dictate where data can be stored and processed, creating compliance risk if ignored.
Question 6: A project manager notices that a key integration partner frequently releases breaking API changes without notice. The BEST mitigation strategy is to:
- Accept the risk and update integrations reactively
- Implement API version pinning and contract testing (Correct answer)
- Avoid using APIs entirely
- Transfer risk via a service-level agreement penalty clause
Correct answer: Implement API version pinning and contract testing
API version pinning locks the integration to a stable version, while contract testing detects breaking changes automatically.
Question 7: A risk register entry states: 'Risk of machine learning model degradation over time as real-world data drifts.' Which response plan is MOST appropriate?
- Retire the ML model and revert to manual processes
- Implement model monitoring and scheduled retraining pipelines (Correct answer)
- Accept the risk as inherent to AI projects
- Transfer the risk to the data science vendor
Correct answer: Implement model monitoring and scheduled retraining pipelines
Model monitoring detects drift in real time while scheduled retraining keeps the model aligned with current data distributions.
Project Risk Management Technology & Digital Applications 4
A project manager is evaluating whether to deploy software updates during a major product launch.
The risk of deployment failure during peak traffic is rated HIGH.
The BEST response is to: