A candidate must be able to identify key portfolio risk inputs, classify risks that impact strategic goals as strategic risks, assess risks using probability, impact, and strategic alignment, and select appropriate qualitative ranking methods. The most important thing is to always link portfolio risk management to strategic objectives.
Start practicing
Portfolio Risk Management — choose a session length
Free · No account required
Domain overview
This domain covers portfolio risk management within the PfMP exam: identifying, assessing, and responding to risks that affect strategic goals. It tests your ability to select key inputs, classify risks, apply qualitative and quantitative methods, and align risk actions with portfolio governance and strategic objectives.
Exam objectives
Identifying key inputs for effective portfolio risk management, such as strategic objectives and risk tolerances.
Classifying a portfolio risk that impacts strategic goals as a strategic risk.
Assessing portfolio risk by considering probability, impact, and strategic alignment.
Using qualitative risk analysis methods like probability-impact matrices to rank portfolio risks.
Confusing portfolio risk with project or program risk, ignoring the strategic-level impact and aggregation across components.
Overlooking that when a portfolio risk occurs and affects strategic goals, it becomes a strategic risk, not just an operational issue.
Assuming quantitative methods are always best for ranking risks, when qualitative methods like probability-impact matrices are often more suitable for portfolio-level prioritization.
Click any question to see the full explanation and answer options, or start a focused practice session above.
Which of the following describes 'Portfolio Risk Exposure'?
2A Portfolio Manager identifies a high probability risk involving resource scarcity across all active projects. What is the most appropriate risk response?
3A Portfolio Manager identifies a high-impact risk that correlates across multiple programs. How should this be managed?
4Your portfolio board is concerned about the impact of sudden market volatility on the portfolio. You decide to perform a quantitative risk analysis. Which tool is most effective for this?
5You are assessing the 'risk-adjusted return' of your portfolio. Which components are critical for this calculation?
6As a Portfolio Manager, you are documenting an identified risk that could affect multiple programs. Where should this be primarily recorded?
7When updating the Portfolio Risk Register, which information is most critical to include to ensure stakeholders understand the risk?
8A Portfolio Manager identifies a high-level risk where the cumulative budget of active projects exceeds the total portfolio funding ceiling. Which action best aligns with Portfolio Risk Management best practices?
9What is the primary purpose of a Portfolio Risk Management Plan?
10Which document is used to track the status of approved risk responses?
11During a portfolio review, you observe that the actual ROI is consistently lower than predicted due to cumulative risk impacts. What is the most logical next step?
12You are performing a portfolio-level qualitative risk analysis. Which method is best for ranking risks?
13A major vendor supporting your portfolio has filed for bankruptcy. This is an example of:
14You are assessing the 'aggregate risk exposure' of a portfolio. What is the most critical factor to consider?
15Which of the following is an input to Portfolio Risk Identification?
16A risk is identified that could positively impact the portfolio's strategic goals. How should this be handled?
17When a portfolio risk occurs and impacts the strategic goals, this event is now classified as:
18What is the primary role of the Portfolio Manager regarding risk?
19You are reporting portfolio risk status to the governance board. What is the most effective way to communicate this?
20A risk response is proving ineffective. What should you do?
21Which THREE of the following are considered when assessing portfolio risk?
22Which TWO of the following are primary objectives of portfolio risk management?
23Which TWO of the following are appropriate portfolio risk response strategies for threats?
24Which THREE components are found in a Portfolio Risk Register?
25Which TWO of the following are sources for identifying portfolio risks?
26Which THREE of the following are quantitative analysis techniques?
27Which TWO are common triggers for a portfolio risk review?
28Which TWO of the following are steps in the portfolio risk management process?
29Which THREE are key elements of a portfolio risk management culture?
30You are the portfolio manager for a financial services firm's digital transformation portfolio. Your portfolio risk management plan specifies a 95% confidence level and a one-year horizon for quantitative risk analysis. The CIO asks why the aggregate portfolio contingency reserve, calculated via Monte Carlo simulation, is significantly larger than the sum of the individual component contingency reserves. What is the most likely explanation for this difference?
31You are managing a portfolio of IT infrastructure projects. A new regulatory requirement is expected to increase the cost of compliance for all projects in the portfolio by 10-15% over the next fiscal year. Your portfolio sponsor asks you to update the portfolio risk register and recommend a response strategy. Which action best aligns with portfolio risk management principles?
32Your portfolio includes a large infrastructure program and several smaller IT projects. A new regulatory requirement mandates that all projects comply with stricter data privacy controls within six months. You need to prioritize where to apply limited compliance resources. Which portfolio risk management action should you take FIRST?
33You are managing a portfolio of infrastructure projects. A new regulatory requirement is expected to increase costs for all projects using a specific technology. This risk has a high probability and high impact, but it is not yet reflected in any project risk register. As the portfolio manager, what should you do first?
34During a quarterly portfolio risk review, you notice that two strategic initiatives have risks that are individually rated as low, but when combined, they could cause a critical shared supplier to fail. This situation is an example of:
35You are conducting a portfolio risk review with your team. The portfolio board has asked you to identify inputs that are essential for effective portfolio risk management. Which two of the following are considered key inputs to the portfolio risk management process? (Choose two.)
36You are the portfolio manager for a pharmaceutical R&D portfolio. A new regulatory guideline is expected to significantly increase the cost and timeline for all clinical trials in the portfolio. You need to assess the overall impact on the portfolio's strategic objectives. Which action should you take first?
37Your organization's portfolio includes a large infrastructure program that is 70% complete. A new regulatory requirement is announced that will mandate significant design changes across all remaining deliverables. The program manager reports that the changes can be absorbed within the existing schedule float but will increase costs by 12%. As the portfolio manager, what is the most appropriate first action?
38You are developing a portfolio risk management plan. Which TWO elements are essential to include in this plan? (Choose two.)
39A portfolio manager is reviewing the risk management approach for a portfolio of strategic initiatives. The organization's leadership wants to ensure that portfolio risks are managed consistently and aligned with strategic objectives. Which document should the portfolio manager primarily reference to understand the risk management framework, including roles, responsibilities, and risk tolerances?
40You are the portfolio manager for a financial services firm. A new regulatory requirement mandates that all customer data be stored within the country. Your portfolio includes a project upgrading the CRM system, which currently stores data in a foreign cloud region. The project manager reports that the compliance risk is not in the project risk register because it is considered a portfolio-level concern. What should you do first to ensure this risk is managed appropriately?
41You are managing a portfolio with a mix of projects and programs. A new risk has been identified that could affect multiple components simultaneously, but its probability and impact are uncertain. The portfolio board wants to understand the potential worst-case scenario and the likelihood of exceeding the portfolio's risk tolerance. Which technique is most appropriate to use?
42You are managing a portfolio of IT projects for a healthcare organization. During a portfolio risk review, you identify that three projects rely on the same external vendor for a critical software component. The vendor has recently been acquired by a competitor, and there is a risk that support and licensing terms may change unfavorably. Which action best addresses this portfolio-level risk?
43You are the portfolio manager for a pharmaceutical company. Your portfolio includes projects developing new drugs. A new regulatory guideline is expected to be released in six months, which may require additional clinical trials for one of the drugs. The project manager for that drug development project has not included this in the project risk register because the guideline is not yet final. How should you handle this in the portfolio risk management process?
44You are reviewing the portfolio risk register and notice that a risk related to a key supplier's financial stability has been marked as 'accepted.' Under what circumstances is accepting this risk most appropriate?
45You are leading a portfolio risk workshop with project managers. One project manager suggests that since their project is ahead of schedule, they can ignore a medium-probability risk because it won't affect their timeline. How should you respond as the portfolio manager?
46You are preparing a portfolio risk report for the executive committee. Which of the following best describes the purpose of a portfolio risk heat map?
47You are leading a portfolio risk management workshop. Which TWO of the following are key inputs to the portfolio risk management process? (Choose two.)
48During a portfolio review, you note that several projects are reporting risks that, if materialized, would impact shared resources and strategic initiatives. You need to ensure these risks are managed cohesively. Which portfolio document should you update to reflect the consolidated view of these risks?
49You are the portfolio manager for a retail company. The portfolio includes a project to implement a new e-commerce platform. A risk has been identified that a key supplier of payment processing services may increase fees by 20% next year. This risk is currently listed in the project risk register. During a portfolio risk review, you determine that this risk could also affect two other projects that use the same supplier. What should you do?
50Your portfolio has a risk tolerance that allows for moderate risk-taking to achieve strategic goals. A new project is proposed that has a high potential return but also a high probability of failure. The project's risk exposure exceeds the portfolio's risk tolerance. As the portfolio manager, what should you do first?
51You are the portfolio manager for a pharmaceutical R&D portfolio with three drug-development programs. A key contract manufacturer shared audited financials showing a debt covenant breach that will likely trigger restructuring within two quarters, which could halt supply of a critical excipient used by two programs. The programs' risk registers list this supplier only as 'medium likelihood, medium impact.' What should you do FIRST as the portfolio manager?
52During a quarterly portfolio risk review, you plot each component's risk exposure against its contribution to strategic objectives. One program shows low individual risk exposure but underpins three of the five strategic objectives, while two larger programs with high individual exposure contribute to only one objective each. The portfolio board asks how to prioritize risk response funding. Which portfolio risk management concept should drive your recommendation?
53You are the portfolio manager for a global retail portfolio spanning e-commerce, supply chain, and store operations programs. The portfolio board has approved a risk appetite statement and now wants assurance that portfolio risk responses remain aligned with it as conditions change. Which two actions should you take to maintain that alignment? (Choose two.)
54A portfolio board member asks you to explain how portfolio risk management differs from the risk management performed by the individual program managers in your portfolio. Which statement best describes the portfolio manager's distinctive risk responsibility?
A candidate must be able to identify key portfolio risk inputs, classify risks that impact strategic goals as strategic risks, assess risks using probability, impact, and strategic alignment, and select appropriate qualitative ranking methods. The most important thing is to always link portfolio risk management to strategic objectives.
The Courseiva PfMP question bank contains 54 questions in the Portfolio Risk Management domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Portfolio Risk Management domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included