PfMP Portfolio Risk Management Practice Test 4 — 15 Questions

Question 1

A portfolio manager is reviewing the risk management approach for a portfolio of strategic initiatives. The organization's leadership wants to ensure that portfolio risks are managed consistently and aligned with strategic objectives. Which document should the portfolio manager primarily reference to understand the risk management framework, including roles, responsibilities, and risk tolerances?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Portfolio management plan. The portfolio management plan is the key document that defines the risk management framework, including governance, roles, responsibilities, and risk tolerances. It ensures that risk management is consistent and aligned with strategic objectives across the portfolio.

Answer

Individual project risk management plans

Answer

Enterprise environmental factors

Answer

Portfolio risk register

Question 2

You are the portfolio manager for a financial services firm. A new regulatory requirement mandates that all customer data be stored within the country. Your portfolio includes a project upgrading the CRM system, which currently stores data in a foreign cloud region. The project manager reports that the compliance risk is not in the project risk register because it is considered a portfolio-level concern. What should you do first to ensure this risk is managed appropriately?

Accepted Answer

Update the portfolio risk register to include the regulatory compliance risk, assign an owner, and define response strategies.. The risk affects multiple projects and the portfolio's compliance posture, so it must be captured in the portfolio risk register. This central repository ensures the risk is visible, owned, and addressed with appropriate responses. Project-level management alone would not address cross-project impacts or strategic alignment. The portfolio manager should first ensure the risk is recorded and assigned, then proceed with analysis and response planning.

Answer

Conduct a qualitative risk analysis on the CRM project to determine the probability and impact of the regulatory change.

Answer

Escalate the risk to the PMO and wait for their guidance before taking any action.

Answer

Instruct the project manager to add the risk to the project risk register and manage it locally.

Question 3

You are managing a portfolio with a mix of projects and programs. A new risk has been identified that could affect multiple components simultaneously, but its probability and impact are uncertain. The portfolio board wants to understand the potential worst-case scenario and the likelihood of exceeding the portfolio's risk tolerance. Which technique is most appropriate to use?

Accepted Answer

Monte Carlo simulation. Monte Carlo simulation is the most appropriate technique because it aggregates multiple uncertain risks, models correlations, and produces a probability distribution of portfolio outcomes. This allows the portfolio manager to assess worst-case scenarios and the likelihood of exceeding risk tolerance, informing strategic decisions.

Answer

SWOT analysis

Answer

Decision tree analysis

Answer

Risk probability and impact assessment

Question 4

You are managing a portfolio of IT projects for a healthcare organization. During a portfolio risk review, you identify that three projects rely on the same external vendor for a critical software component. The vendor has recently been acquired by a competitor, and there is a risk that support and licensing terms may change unfavorably. Which action best addresses this portfolio-level risk?

Accepted Answer

Develop a portfolio risk response plan that includes qualifying alternative vendors and renegotiating contracts with the current vendor.. The shared vendor dependency creates a portfolio-level risk that requires a coordinated response. Developing a portfolio risk response plan allows the organization to leverage its collective influence, explore alternative vendors, and renegotiate contracts to secure favorable terms. This approach addresses the risk across all affected projects, ensuring efficiency and consistency. Individual project plans or insurance would not adequately mitigate the systemic nature of this risk.

Answer

Transfer the risk by purchasing insurance that covers vendor-related disruptions.

Answer

Accept the risk and monitor the vendor's actions, taking no proactive steps until an actual issue arises.

Answer

Instruct each project manager to develop a contingency plan for their individual project's dependency on the vendor.

Question 5

You are the portfolio manager for a pharmaceutical company. Your portfolio includes projects developing new drugs. A new regulatory guideline is expected to be released in six months, which may require additional clinical trials for one of the drugs. The project manager for that drug development project has not included this in the project risk register because the guideline is not yet final. How should you handle this in the portfolio risk management process?

Accepted Answer

Add the potential regulatory change to the portfolio risk register as an emerging risk, with a response strategy to monitor and prepare for possible additional trials.. Emerging risks with potential portfolio-level impact should be captured in the portfolio risk register even before they are certain. This allows the portfolio manager to monitor the situation, allocate resources for contingency planning, and ensure alignment with strategic objectives. Assigning an owner and defining a preliminary response strategy are essential steps. Waiting for confirmation could result in missed opportunities to mitigate or avoid negative impacts.

Answer

Wait until the guideline is final before adding it to any risk register, to avoid managing speculative risks.

Answer

Instruct the project manager to include it in the project risk register only if the guideline is confirmed to affect the project.

Answer

Document the risk in the portfolio risk register but assign no owner until the guideline is released.

Question 6

You are reviewing the portfolio risk register and notice that a risk related to a key supplier's financial stability has been marked as 'accepted.' Under what circumstances is accepting this risk most appropriate?

Accepted Answer

When the cost of mitigating the risk exceeds the potential impact, and the risk is within the portfolio's risk tolerance.. Accepting a risk is most appropriate when the cost of mitigation exceeds the potential impact and the risk is within the portfolio's risk tolerance. This ensures that the portfolio is not spending more to mitigate than the risk could cost, and that the remaining exposure is acceptable. It is a strategic decision that should be documented and monitored.

Answer

When there are no other options available to address the risk.

Answer

When the supplier has provided a guarantee that they will not go bankrupt.

Answer

When the risk has a low probability of occurring, regardless of its impact.

Question 7

You are leading a portfolio risk workshop with project managers. One project manager suggests that since their project is ahead of schedule, they can ignore a medium-probability risk because it won't affect their timeline. How should you respond as the portfolio manager?

Accepted Answer

Explain that the risk must still be evaluated for its potential impact on the entire portfolio.. The correct response is to explain that the risk must still be evaluated for its impact on the entire portfolio. Portfolio risk management requires a holistic view; risks that seem contained within one project can have ripple effects across the portfolio. The portfolio manager must ensure that all risks are assessed for their aggregate impact and managed accordingly.

Answer

Agree, because the project's schedule buffer can absorb any impact.

Answer

Escalate the decision to the project sponsor for their approval.

Answer

Remove the risk from the project's risk register to avoid unnecessary reporting.

Question 8

You are preparing a portfolio risk report for the executive committee. Which of the following best describes the purpose of a portfolio risk heat map?

Accepted Answer

To provide a visual representation of risks based on their probability and impact, aiding in prioritization.. The purpose of a portfolio risk heat map is to provide a visual representation of risks based on probability and impact, which aids in prioritization and communication. It allows executives to quickly grasp the portfolio's risk profile and focus on the most significant risks. This aligns with PfMP best practices for effective risk reporting.

Answer

To track the status of risk response actions over time.

Answer

To calculate the exact monetary value of each risk's potential impact on the portfolio.

Answer

To list all identified risks along with their owners and mitigation plans.

Question 9

You are leading a portfolio risk management workshop. Which TWO of the following are key inputs to the portfolio risk management process? (Choose two.)

Accepted Answer

Portfolio strategic objectives. The key inputs to portfolio risk management include portfolio strategic objectives and organizational risk tolerance. Strategic objectives provide the context for assessing risks, while risk tolerance defines the acceptable level of risk. These inputs ensure that risk management is aligned with the portfolio's goals and the organization's overall risk appetite, enabling effective prioritization and response planning.

Answer

Portfolio risk register

Answer

Individual project risk reports

Answer

Project schedules

Question 10

During a portfolio review, you note that several projects are reporting risks that, if materialized, would impact shared resources and strategic initiatives. You need to ensure these risks are managed cohesively. Which portfolio document should you update to reflect the consolidated view of these risks?

Accepted Answer

Portfolio risk register. The portfolio risk register is the central repository for all portfolio-level risks, including those that affect multiple components or shared resources. It enables the portfolio manager to consolidate, prioritize, and monitor risks across the portfolio. Updating it ensures that risks impacting strategic initiatives are managed cohesively and that appropriate responses are coordinated.

Answer

Portfolio dashboard

Answer

Portfolio management plan

Answer

Portfolio benefits realization plan

Question 11

You are the portfolio manager for a retail company. The portfolio includes a project to implement a new e-commerce platform. A risk has been identified that a key supplier of payment processing services may increase fees by 20% next year. This risk is currently listed in the project risk register. During a portfolio risk review, you determine that this risk could also affect two other projects that use the same supplier. What should you do?

Accepted Answer

Add the risk to the portfolio risk register while keeping it in the project risk register, and coordinate a portfolio-level response.. When a project risk evolves into a portfolio-level risk affecting multiple projects, it should be recorded in both the project and portfolio risk registers. This dual visibility ensures the project team manages their specific response while the portfolio manager coordinates a broader strategy. A portfolio-level response can include negotiating bulk pricing or finding alternative suppliers for all affected projects, leveraging the portfolio's collective influence.

Answer

Leave the risk only in the project risk register and inform the other project managers to add it to their registers.

Answer

Escalate the risk to the PMO and request that they communicate with the supplier on behalf of all projects.

Answer

Move the risk to the portfolio risk register and remove it from the project risk register to avoid duplication.

Question 12

Your portfolio has a risk tolerance that allows for moderate risk-taking to achieve strategic goals. A new project is proposed that has a high potential return but also a high probability of failure. The project's risk exposure exceeds the portfolio's risk tolerance. As the portfolio manager, what should you do first?

Accepted Answer

Evaluate options to mitigate or transfer the risk to bring it within the portfolio's risk tolerance.. When a project's risk exposure exceeds the portfolio's risk tolerance, the portfolio manager should first explore risk response options to reduce or transfer the risk. This proactive approach may allow the project to proceed within acceptable limits. Only if the risk cannot be managed should escalation or rejection be considered. Evaluating options is the critical first step.

Answer

Reject the project outright because it exceeds the portfolio's risk tolerance.

Answer

Accept the project and increase the portfolio's contingency reserve to cover the risk.

Answer

Escalate the decision to the portfolio governance board for approval.

Question 13

You are the portfolio manager for a pharmaceutical R&D portfolio with three drug-development programs. A key contract manufacturer shared audited financials showing a debt covenant breach that will likely trigger restructuring within two quarters, which could halt supply of a critical excipient used by two programs. The programs' risk registers list this supplier only as 'medium likelihood, medium impact.' What should you do FIRST as the portfolio manager?

Accepted Answer

Aggregate the correlated supplier exposure from both programs and raise it to the portfolio risk register with an escalated, portfolio-level rating for board review.. The correct action addresses the defining feature of this scenario: one supplier creating correlated exposure across two programs, which only becomes visible when aggregated at portfolio level. Escalating the aggregated exposure with a portfolio-level rating equips the portfolio board to weigh mitigation options against strategic objectives. Program-level handling, contract termination, or issue-logging all fail to produce that consolidated, decision-ready view.

Answer

Log the covenant breach as an issue in the portfolio issue log and assign the supplier's account manager to report progress monthly.

Answer

Immediately terminate the contract and sole-source the excipient from a new manufacturer to eliminate the risk before restructuring occurs.

Answer

Direct each program manager to update their own risk register and manage the supplier risk within their existing program contingency budgets.

Question 14

During a quarterly portfolio risk review, you plot each component's risk exposure against its contribution to strategic objectives. One program shows low individual risk exposure but underpins three of the five strategic objectives, while two larger programs with high individual exposure contribute to only one objective each. The portfolio board asks how to prioritize risk response funding. Which portfolio risk management concept should drive your recommendation?

Accepted Answer

Weight each component's risk exposure by its contribution to strategic objectives, then allocate response funding to protect the objectives with the greatest weighted exposure.. Portfolio risk response funding should follow strategic value at risk, not raw component size or administrative convenience. Weighting each component's exposure by how many strategic objectives it supports exposes the disproportionate consequence of the small program and directs mitigation funds where they defend the most strategic intent. Exposure-only ranking, equal allocation, and deferral all misprice that consequence.

Answer

Allocate funding equally across all components so that no program is disadvantaged and each retains its baseline contingency reserve.

Answer

Rank components strictly by their individual risk exposure scores, since the highest exposures represent the greatest threat to portfolio value.

Answer

Defer the decision until each program completes its next risk reassessment, then fund responses in the order the revised registers are submitted.

Question 15

You are the portfolio manager for a global retail portfolio spanning e-commerce, supply chain, and store operations programs. The portfolio board has approved a risk appetite statement and now wants assurance that portfolio risk responses remain aligned with it as conditions change. Which two actions should you take to maintain that alignment? (Choose two.)

Accepted Answer

Reassess aggregated portfolio risk exposure against the approved appetite thresholds at each portfolio review cycle and escalate any breach with recommended responses.. Maintaining alignment between portfolio risk responses and the board's appetite requires two disciplines: periodically re-aggregating exposure and testing it against approved thresholds, and verifying that component-level responses and reserves are calibrated to portfolio appetite rather than only local tolerances. Freezing responses, delegating monitoring entirely, or rewriting the appetite to fit exposure all break the governance link the board is asking to preserve.

Answer

Freeze each program's approved risk responses for the fiscal year so that mitigation plans remain stable and comparable across the portfolio.

Answer

Delegate all appetite monitoring to each program's risk owner and rely on their monthly status reports to the portfolio office.

Answer

Revise the board's risk appetite statement quarterly to match whatever exposure the portfolio currently carries, keeping the portfolio continuously compliant.