Project Risk Management Technology & Digital Applications 5

Question 1

A project team is implementing a DevSecOps pipeline. Which risk management benefit does 'shifting security left' PRIMARILY provide?

Accepted Answer

Identifies and remediates security vulnerabilities earlier in the development lifecycle

Answer

Shifting security left embeds security checks early in development, where defects are far cheaper to fix than post-deployment.

Question 2

A project's risk register includes: 'Probability: 0.4, Impact: $50,000.' What is the Expected Monetary Value (EMV) of this risk?

Accepted Answer

$20,000

Answer

EMV = Probability × Impact = 0.4 × $50,000 = $20,000.

Question 3

A project is migrating to a containerized environment using Docker and Kubernetes. Which risk is MOST specific to container orchestration?

Accepted Answer

Misconfigured container permissions exposing sensitive workloads

Answer

Misconfigured RBAC and container security contexts are a leading source of breaches in Kubernetes environments.

Question 4

During a risk review, the team identifies that a critical project tool vendor has only one employee supporting integrations. This is BEST classified as:

Accepted Answer

A single point of failure (SPOF) and key person dependency risk

Answer

Reliance on a single vendor employee creates a key person dependency SPOF—loss of that person can halt integration support.

Question 5

A project manager is assessing risks for a real-time data streaming system. Which failure mode warrants a specific risk entry for 'data loss at scale'?

Accepted Answer

Message queue overflow when consumers lag behind producers

Answer

When consumers cannot process messages fast enough, queue overflow can lead to dropped or lost messages at scale.

Project Risk Management Practice Test

Project Risk Management Practice Test

Project Risk Management Technology & Digital Applications 5