PMI-RMP Practice Test 11 — 15 Questions

Question 1

What is the primary function of a 'Risk Dashboard' compared to a 'Risk Register'?

Accepted Answer

Dashboards offer visual summaries and trends for executive review. A Risk Dashboard provides visual summaries and trends, such as heat maps, burn-down charts, and key risk indicators, tailored for executive review and decision-making. In contrast, the Risk Register is a detailed repository of individual risks. The dashboard aggregates and visualizes data to highlight patterns and overall risk exposure, enabling quick comprehension.

Answer

Dashboards provide full historical logs of all changes

Answer

Dashboards replace the need for the Risk Register

Answer

Dashboards store raw data for quantitative analysis

Question 2

Which section of the 'Risk Register' is most important for monitoring the status of a specific risk?

Accepted Answer

Risk Status. The Risk Status section of the Risk Register is specifically designed to track the current state of a risk, such as whether it is active, closed, or occurred. It provides the most direct information for monitoring a specific risk's status. Other sections like Risk ID, Description, and Owner are important for identification and assignment but do not indicate current status.

Answer

Risk ID

Answer

Risk Description

Answer

Owner

Question 3

Which THREE factors influence the choice of a 'risk management methodology' for a project?

Accepted Answer

Project complexity and uncertainty level.. Option A is correct because project complexity and uncertainty level directly determine how much structure the risk methodology needs — highly complex, uncertain projects require more formal, iterative approaches such as quantitative analysis and continuous risk reassessment, while simple projects can use lighter methods. Option B is correct because organizational risk management maturity dictates which methodologies are feasible and sustainable; an organization with immature processes cannot effectively adopt advanced techniques like Monte Carlo simulation or detailed risk registers without foundational capability. Option D is correct because project governance and regulatory requirements impose mandatory risk processes, documentation, and compliance standards (e.g., ISO 31000, PMBOK, or industry-specific regulations) that constrain and shape the selected methodology. Option C is incorrect because a project office's desk arrangement is a physical workspace detail with no bearing on risk management methodology selection. Option E is incorrect because a project manager's favorite color is a personal preference irrelevant to professional risk management decisions.

Answer

The project office's desk arrangement.

Answer

The project manager's favorite color.

Question 4

During a risk review, a stakeholder asks why a risk's impact has not changed despite a completed mitigation plan. What is the most likely cause?

Accepted Answer

The mitigation addressed probability, not impact. Risk responses target either the probability of a risk occurring or its impact if it does occur — and sometimes both. If a mitigation plan was completed but the impact score in the risk register is unchanged, the most likely explanation is that the response was designed to reduce probability only, leaving the potential impact untouched. This is a normal and valid outcome of certain response strategies.

Answer

The project manager forgot to save the update

Answer

The risk is a secondary risk

Answer

The risk register is corrupted

Question 5

You are tasked with defining the 'Risk Breakdown Structure' (RBS). What is the primary purpose of this tool?

Accepted Answer

To structure the identification of risks in a logical and comprehensive way.. The Risk Breakdown Structure (RBS) is a hierarchical representation of potential risk sources, organized by category and subcategory, used to structure risk identification systematically. Its primary purpose is to ensure comprehensive risk identification by providing a framework that prompts the team to consider risks across all relevant areas. This reduces the chance of overlooking categories of risk and supports consistent categorization in the risk register.

Answer

To list the names of all team members.

Answer

To calculate the final project budget.

Answer

To report progress to the project board.

Question 6

You are performing a risk-adjusted schedule analysis using a 'Correlation Coefficient' between two tasks. What does a value of -0.8 indicate?

Accepted Answer

As one task duration increases, the other tends to decrease.. A correlation coefficient of -0.8 indicates a strong negative (inverse) relationship between the two task durations. In risk-adjusted schedule analysis, this means that when one task's duration increases, the other task's duration tends to decrease. The magnitude (0.8) shows the relationship is strong, while the negative sign indicates the direction is opposite.

Answer

The two tasks are perfectly independent.

Answer

The correlation is too weak to be significant.

Answer

The tasks will always finish at the same time.

Question 7

A project manager wants to ensure that risk management is not viewed as a 'blame game'. How should they configure their risk communication strategy?

Accepted Answer

Focus on the root cause and mitigation during risk reviews, not on who identified the risk.. To prevent risk management from becoming a blame game, the communication strategy should focus on root causes and mitigation actions rather than on who identified or caused the risk. This fosters psychological safety, encouraging open and honest risk reporting without fear of retribution. PMI emphasizes a blame-free culture as essential for effective risk identification and stakeholder engagement.

Answer

Require team members to report risks to the project sponsor directly.

Answer

Only allow the project manager to identify risks.

Answer

Publicly document every risk identified by each team member.

Question 8

What is the primary role of the 'Risk Owner' during the planning phase?

Accepted Answer

To ensure the risk is monitored and the response is executed when triggered.. The Risk Owner is the person accountable for monitoring a specific risk and ensuring the agreed response is executed when triggers occur. During planning, this role involves understanding the risk, validating the response strategy, and preparing to act. This accountability is distinct from performing work, approving changes, or funding mitigation.

Answer

To perform all the project work.

Answer

To approve all project changes.

Answer

To fund the mitigation activities.

Question 9

You are assessing the effectiveness of a risk mitigation strategy. Which metric best indicates if the mitigation is working?

Accepted Answer

The change in residual risk exposure. The purpose of risk mitigation is to reduce the probability and/or impact of a risk, which is measured by the change in residual risk exposure — the risk that remains after the response is applied. If residual exposure drops relative to the pre-mitigation assessment, the mitigation is working. This metric directly ties the response action to its intended effect on the risk profile, making it the most valid indicator of effectiveness.

Answer

Number of audit findings related to risk

Answer

Total number of risks managed

Answer

The frequency of steering committee meetings

Question 10

Which THREE steps are part of the 'Qualitative Risk Analysis' process?

Accepted Answer

Categorize risks for analysis. Option A (Categorize risks for analysis) is correct because qualitative risk analysis begins by grouping risks by categories (e.g., technical, schedule, cost) to ensure consistent evaluation and to identify common root causes. Option C (Assess probability and impact) is correct because the core of qualitative risk analysis is rating each risk's likelihood and consequence using ordinal scales (such as very low to very high) rather than numerical simulation. Option E (Prioritize risks using a matrix) is correct because the probability-impact matrix (risk matrix) is the standard qualitative tool that ranks risks into priority levels to focus attention on the most significant ones. Option B (Execute the risk response) is not part of this process; executing responses occurs in the Implement Risk Responses process after planning. Option D (Perform a Monte Carlo simulation) is not part of qualitative risk analysis; Monte Carlo simulation is a quantitative risk analysis technique that uses probability distributions and numerical modeling.

Answer

Execute the risk response

Answer

Perform a Monte Carlo simulation

Question 11

You need to gain buy-in for a costly risk mitigation strategy. What is the best strategy?

Accepted Answer

Present the cost-benefit analysis comparing the mitigation cost to the potential impact of the risk.. Gaining buy-in for a costly mitigation requires demonstrating value through a cost-benefit analysis (CBA) that compares the mitigation cost against the probability-weighted impact of the risk (i.e., expected monetary value of the risk). This aligns with PMI's emphasis on data-driven decision-making and stakeholder engagement. Sponsors and finance approve budgets when the business case is clear.

Answer

Simply demand that the budget be approved.

Answer

Only talk to the finance department about the budget.

Answer

Wait until the risk occurs and then ask for the budget.

Question 12

Which TWO of the following are potential causes of a 'non-converging' Monte Carlo simulation?

Accepted Answer

Circular logic dependencies in the project schedule.. Option A is correct because circular logic dependencies create feedback loops in the schedule network, so the Monte Carlo engine cannot resolve a valid critical path or finish date and the simulation fails to converge. Option E is correct because Monte Carlo convergence depends on running enough iterations relative to the model's complexity; too few iterations leave the output statistics (mean, standard deviation, percentiles) unstable and non-converged. Option B is incorrect because a GUI-based interface is merely a presentation layer and has no effect on the mathematical convergence of the simulation. Option C is incorrect because assigning many resources to a task affects duration or cost estimates but does not inherently prevent the simulation from converging. Option D is incorrect because a faster processor only reduces runtime; it does not change the model's logic or the number of iterations needed for convergence.

Answer

The use of a GUI-based interface.

Answer

Assigning too many resources to a task.

Answer

Using a modern, high-speed processor.

Question 13

During a project's mid-lifecycle review, you discover that the original risk management strategy is no longer effective due to a change in the market environment. What is the best course of action?

Accepted Answer

Formally review and update the Risk Management Plan to reflect current realities.. When the market environment changes and the original risk management strategy is no longer effective, the project manager must formally review and update the Risk Management Plan to reflect current realities. Risk management is iterative, and the plan is a living document that must be revised when assumptions, constraints, or external conditions change. This ensures responses remain relevant and resources are allocated appropriately.

Answer

Continue using the current plan to maintain consistency.

Answer

Ask stakeholders to sign off on the original plan again.

Answer

Switch to a quantitative-only approach immediately.

Question 14

You are setting up a regular risk review meeting. Who is the most important attendee to invite?

Accepted Answer

The Risk Owner for the specific risks being reviewed. A risk review meeting exists to assess the status of identified risks and their response plans. The person accountable for executing those responses is the Risk Owner, so they are the most critical attendee — without them, the meeting cannot meaningfully update risk status or adjust mitigation actions.

Answer

The entire project team

Answer

All project stakeholders

Answer

The external auditor

Question 15

Which TWO of the following are essential components of a formal 'Risk Report' provided to project stakeholders?

Accepted Answer

Summary of top risks by impact. Option C is correct because a formal Risk Report must give stakeholders a concise, prioritized view of the most significant threats, typically summarizing the top risks ranked by impact (and often probability) so decision-makers can focus on what matters most. Option D is correct because the report should also communicate how the overall risk exposure is changing over time, i.e., the trend of aggregate risk exposure, which shows whether the project's risk profile is improving or worsening across reporting periods. Options A and B are incorrect because personal performance reviews of risk owners and full lists of individual risk task assignments are operational/HR-level details, not stakeholder-facing risk reporting content. Option E is incorrect because a detailed log of every risk register edit is raw audit-level data; the Risk Report summarizes and interprets risk information rather than reproducing every register change.

Answer

Personal performance reviews of risk owners

Answer

Full list of all individual risk task assignments

Answer

Detailed log of every risk register edit