PMI-RMP Practice Test 16 — 15 Questions

Question 1

During a project kickoff meeting, a senior stakeholder states they are 'very risk-averse' regarding project timelines but 'open to innovation' regarding technical solutions. How should the risk management plan reflect this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create separate risk tolerance thresholds for schedule-related risks and technical risks.. The stakeholder has expressed two distinct risk attitudes: low tolerance for schedule risk and high tolerance for technical risk. PMI-RMP best practice recognizes that risk tolerance is not monolithic — it varies by risk category, stakeholder, and objective. Creating separate thresholds for schedule and technical risks accurately captures this differentiated appetite and allows appropriate response strategies for each category.

Answer

Escalate all technical risks to the project sponsor immediately.

Answer

Ignore the stakeholder's comment as it is subjective.

Answer

Set a single, conservative risk tolerance threshold for all risk categories.

Question 2

In the context of risk-adjusted cost analysis, what is the primary purpose of adding a 'Risk Contingency' reserve to the project budget?

Accepted Answer

To cover identified risks that have been quantified.. A risk contingency reserve is added to the project budget to cover identified risks that have been quantified through risk analysis. It is calculated based on the expected monetary value or simulation results of known risks and is controlled by the project manager. It is distinct from the management reserve, which covers unknown-unknowns.

Answer

To cover scope creep requested by the client.

Answer

To account for inflation over the project lifecycle.

Answer

To replace the management reserve.

Question 3

When planning for risk management, which stakeholder is usually the final authority on risk appetite for the project?

Accepted Answer

The project sponsor.. The project sponsor is the executive who funds the project and owns the business case, so they are the final authority on the project's risk appetite — the amount of risk the organization is willing to accept in pursuit of the project's objectives. The project manager and team apply that appetite but do not set it.

Answer

The project manager.

Answer

Project team members.

Answer

The external auditor.

Question 4

When reporting to an external regulatory agency, how should you present 'Risk Exposure'?

Accepted Answer

Present a summary of risk exposure and mitigation efficacy. When reporting risk exposure to an external regulatory agency, you should present a summary of risk exposure and mitigation efficacy (Option C). This provides the agency with an accurate, aggregated view of the organization's risk posture and the effectiveness of controls, which is what regulators need to assess compliance and safety. It also respects confidentiality by not exposing raw internal risk data that could contain sensitive commercial or personal information.

Answer

Omit any risks that have been mitigated

Answer

Only report risks with a low probability

Answer

Present the full Risk Register with all sensitive data

Question 5

Which TWO factors should be reviewed when deciding whether to 'Retire' a risk from the register?

Accepted Answer

The risk event has passed without occurring. Option B is correct because if the risk event's window has passed without the event occurring, the risk no longer has any future exposure and can legitimately be retired from the register. Option C is correct because if the risk event has become impossible — for example, the underlying asset, technology, or condition that created it no longer exists — there is no residual probability or impact to manage, so retirement is appropriate. Option A is not a valid reason, since a risk owner resigning only requires reassigning ownership, not closing the risk. Option D is irrelevant, because being over budget does not eliminate the probability or impact of a risk. Option E is not a valid factor, as subjective disinterest does not change the risk's actual exposure.

Answer

The risk owner has resigned

Answer

The project is over budget

Answer

The team decided the risk was too boring

Question 6

Which TWO of the following are essential components of a robust Risk Management Plan?

Accepted Answer

Roles and responsibilities for risk management.. Option C is correct because a robust Risk Management Plan must define who is accountable for identifying, assessing, responding to, and monitoring risks, including the risk owner, risk manager, and team roles, which ensures clear ownership and escalation paths. Option D is correct because the plan must specify the risk methodology and processes to be used, such as risk identification techniques, qualitative and quantitative analysis approaches, probability/impact scales, risk tolerance thresholds, and response planning and monitoring procedures. Options A, B, and E are not essential components of a Risk Management Plan: the current project budget, a list of all project vendors, and a detailed project schedule are project artifacts that may inform risk identification but are not structural elements of the risk management plan itself.

Answer

The current project budget.

Answer

A list of all project vendors.

Answer

Detailed project schedule.

Question 7

Which THREE steps are effective for gaining stakeholder buy-in for a risk response that requires significant resource commitment?

Accepted Answer

Involving the stakeholder early in the risk response design phase.. Option A is correct because involving stakeholders early in the risk response design phase gives them ownership and lets their input shape the plan, which greatly increases commitment to the resource-heavy response. Option B is correct because a clear business case that quantifies the potential impact of the risk (for example, cost, schedule, or compliance exposure) justifies the significant resource commitment in terms stakeholders understand. Option C is correct because aligning the risk response with the stakeholder's own project objectives connects the response to outcomes they already care about, making support more likely. Option D is not appropriate because relying on the sponsor's authority to order support is coercion rather than genuine buy-in and can create resistance. Option E is not appropriate because ignoring stakeholder concerns undermines trust and engagement, which typically jeopardizes successful implementation of the response.

Answer

Telling the stakeholder that the sponsor has already ordered them to support it.

Answer

Ignoring the stakeholder's concerns to ensure the response is implemented quickly.

Question 8

Which TWO pieces of information are critical to include when logging a new risk in the register?

Accepted Answer

A clear description of the risk event. Option B is correct because a risk register entry must contain a clear, specific description of the risk event, including its cause and potential impact, so the risk can be understood, assessed, and managed consistently. Option D is correct because every logged risk needs an assigned risk owner who is accountable for monitoring the risk and executing the agreed response actions. Option A is not required, since the physical office location of the project team has no bearing on identifying, analyzing, or responding to a risk. Option C is not required, as the company's historical performance is background context rather than a core field of a risk register entry. Option E is not required, because the risk owner's salary is irrelevant to documenting and managing the risk.

Answer

The office location of the project team

Answer

The historical performance of the company

Answer

The salary of the risk owner

Question 9

Which THREE elements are essential when documenting a 'Risk Trigger' in the register?

Accepted Answer

The data source used to verify the trigger. Option D is correct because a risk trigger must state the specific, observable condition or event (e.g., a threshold value or milestone) that signals the risk is about to occur or has occurred. Option B is correct because documenting the data source used to verify the trigger identifies where and how the condition is monitored (e.g., a specific report, metric, or system), making the trigger actionable and auditable. Option C is correct because linking the associated response plan to be activated ensures that when the trigger fires, the predefined contingency or mitigation steps are immediately known and executable. Option A is not essential because a sponsor's phone number is contact information, not part of the trigger definition itself. Option E is not essential because font style is a formatting preference and has no bearing on risk identification or response.

Answer

The phone number of the sponsor

Answer

The font style of the register entry

Question 10

A project manager is creating a risk strategy for an international project. They realize that risk tolerance varies significantly between the parent office and the local project site. How should they resolve this?

Accepted Answer

Document both sets of tolerances and define a process for handling conflicts.. When risk tolerances differ between the parent office and the local project site, the PM must not unilaterally choose one over the other. Documenting both sets of tolerances and defining a conflict-resolution process preserves transparency, respects organizational and local realities, and gives the team a repeatable way to decide which threshold applies to a given risk. This aligns with PMI-RMP guidance on documenting risk appetite/tolerance in the risk management plan and establishing escalation paths.

Answer

Use the local site's tolerance only.

Answer

Ignore the local site's preferences.

Answer

Ask for a new policy from the corporate board.

Question 11

During a risk workshop, stakeholders are struggling to differentiate between root causes and symptoms. Which facilitation technique should you employ to ensure the risk register accurately reflects the true origin of risks?

Accepted Answer

Five Whys. The Five Whys technique drills down from a symptom to its underlying root cause by repeatedly asking 'why.' In a risk workshop, it helps stakeholders move past surface symptoms and identify the true origin of risks for accurate register entries. This directly addresses the stated difficulty of differentiating causes from symptoms.

Answer

Delphi Technique

Answer

SWOT Analysis

Answer

Monte Carlo Simulation

Question 12

What is the primary role of a 'Risk Owner'?

Accepted Answer

To monitor the risk and manage the response strategy. The Risk Owner is the individual assigned accountability for a specific identified risk. Their core responsibility is to monitor that risk throughout the project lifecycle and ensure the agreed-upon response strategy is implemented and effective. This role is distinct from analysis or funding duties — it is about ownership and ongoing management of the risk itself.

Answer

To perform quantitative analysis

Answer

To fund the mitigation

Answer

To identify all project risks

Question 13

When a 'Risk Trigger' occurs, what must be updated in the PMIS immediately?

Accepted Answer

The Risk Status and the Issue Log. When a risk trigger occurs, the risk is transitioning from potential to actual or imminent, so the risk status must be updated immediately in the PMIS and the issue log must be updated if the risk has materialized into an issue. This ensures the project team and stakeholders have current information for response activation. The PMIS is the central repository for both risk and issue data, so these two updates are the immediate priority.

Answer

The Project Scope Statement

Answer

The Stakeholder Register

Answer

The Resource Plan

Question 14

Which THREE elements should be documented in a risk register to facilitate better communication with stakeholders?

Accepted Answer

The identity of the assigned risk owner.. Option A is correct because documenting the assigned risk owner establishes clear accountability and gives stakeholders a named point of contact for each risk, which directly improves communication and follow-up. Option C is correct because a clear description of the risk and its potential impact ensures stakeholders understand what the risk is and why it matters, enabling informed decisions. Option E is correct because recording the current risk assessment, i.e., likelihood and impact ratings, communicates the risk's severity and priority in a consistent, comparable way. Option B does not belong because personal home contact information for every stakeholder is unnecessary, privacy-invasive, and irrelevant to risk tracking. Option D does not belong because detailed working-hour timelines of team members are a scheduling concern, not a risk register element, and do not facilitate stakeholder risk communication.

Answer

The personal home contact information for every stakeholder.

Answer

The detailed timeline of every team member's working hours.

Question 15

You are the risk manager on a large infrastructure project. During a risk review meeting, the construction manager and the finance director have a heated argument about the potential cost impact of a material shortage. The construction manager insists the impact is minimal, while the finance director argues it could exceed the contingency reserve. The meeting is derailing. What should you do first to manage this conflict and ensure the risk assessment remains objective?

Accepted Answer

Ask both stakeholders to provide documented evidence and data to support their positions, then facilitate a discussion to reconcile the estimates.. In a risk review meeting, disagreements about risk impact should be resolved through objective data and facilitated discussion. Requesting documented evidence ensures that estimates are grounded in reality, and facilitating a discussion helps stakeholders reconcile their views. This approach maintains the integrity of the risk assessment process and fosters collaboration. Escalating, deferring, or compromising without data do not address the underlying issue and can lead to inaccurate risk evaluation.

Answer

Suggest that both stakeholders compromise by splitting the difference between their estimates to reach a quick agreement.

Answer

Escalate the disagreement to the project sponsor immediately and ask them to make a final decision on the risk impact.

Answer

Defer the discussion to a later meeting and proceed with other agenda items to avoid further conflict.