PMI-RMP Practice Exam 2 — 20 Questions

Question 1

Which report type is best suited for providing senior management with a high-level view of current risk status versus the risk appetite threshold?

Accepted Answer

Risk Heat Map. A risk heat map visually plots probability against impact and highlights which risks exceed the organization's risk appetite thresholds. Senior management can quickly see the overall risk posture and where intervention is needed. This makes it the best high-level reporting tool for comparing current risk status to appetite.

Answer

Individual Risk Response Plan

Answer

Project Schedule Variance Report

Answer

Risk Register Detail Report

Question 2

You have multiple risks that appear to be related. What tool would help you visualize the relationships between them?

Accepted Answer

Cause-and-Effect Diagram. A Cause-and-Effect Diagram (also known as a Fishbone or Ishikawa diagram) is used to visualize the relationships between a problem or effect and its potential causes. When multiple risks appear related, this tool helps identify root causes and show how they interconnect, making it ideal for understanding relationships between risks.

Answer

Probability and Impact Matrix

Answer

Risk Breakdown Structure

Answer

Risk Register

Question 3

What is the purpose of a risk owner in a project?

Accepted Answer

To provide regular updates on the status and mitigation progress of the assigned risk.. A risk owner is the person accountable for monitoring an assigned risk and driving its response actions. Their core responsibility is to track the risk's status, execute or coordinate the agreed response, and report progress and changes to the project manager. This is a monitoring-and-controls role, not a financial, blame, or all-tasks role.

Answer

To pay for any damages caused by the risk.

Answer

To perform all tasks related to the risk.

Answer

To blame if the risk event occurs.

Question 4

A project manager is facing pushback from a functional manager who refuses to allocate resources to risk response activities. What is the most appropriate risk strategy planning response?

Accepted Answer

Escalate the issue to the project board for a decision on resource prioritization.. When a functional manager refuses to allocate resources for risk responses, the issue exceeds the project manager's authority because it involves cross-functional resource prioritization. Escalating to the project board (or sponsor/steering committee) is the appropriate risk strategy response, as escalation is a recognized PMI risk response strategy for risks outside the project manager's control. The board can make an organizational-level decision on resource trade-offs.

Answer

Remove the identified risks from the risk register.

Answer

Accept all risks without mitigation.

Answer

Lower the probability rating of the risks associated with those resources.

Question 5

In a decision tree analysis, what occurs if you 'fold back' the decision tree?

Accepted Answer

You determine the optimal path by selecting the branch with the best EMV at each decision node.. Folding back a decision tree involves calculating the EMV at each chance node and then selecting the decision branch with the best EMV at each decision node. This process works backward from the end nodes to the start, determining the optimal path.

Answer

You reset the probabilities of all chance nodes to zero.

Answer

You assign risk scores to each decision alternative.

Answer

You calculate the probability of each branch ending in failure.

Question 6

When calculating the Expected Monetary Value (EMV) for a risk, why do we multiply probability by impact?

Accepted Answer

To determine the risk-weighted value of the impact.. Expected Monetary Value (EMV) is a quantitative risk analysis technique that computes the risk-weighted value of an uncertain event by multiplying its probability of occurrence by its monetary impact. This product represents the average outcome if the risk were repeated many times, allowing risks with very different probability/impact profiles to be compared on a common monetary scale and aggregated into a contingency reserve. It is the foundational calculation behind decision tree analysis and Monte Carlo inputs.

Answer

To create a buffer for the management reserve.

Answer

To identify which risks are impossible to mitigate.

Answer

To calculate the total cost of all risks combined.

Question 7

Which communication method is most appropriate for informing stakeholders about a significant change in the project's risk profile?

Accepted Answer

Updating the project's formal communication plan and issuing a status report to relevant stakeholders.. A significant change in the risk profile is a formal project event that must be communicated through the established communication plan to all relevant stakeholders, ensuring traceability and appropriate distribution. Issuing a status report aligns with PMI's emphasis on using the Communications Management Plan to determine who needs what information, when, and in what format. This approach keeps stakeholders informed, maintains governance, and documents the change for audit and decision-making.

Answer

Sending a brief text message to the team.

Answer

Discussing it during a casual coffee break.

Answer

Posting the update on the company intranet without notifying anyone.

Question 8

You are presenting a report on high-impact risks. The project sponsor asks how these risks affect the overall business strategy. What is the most effective way to explain this?

Accepted Answer

Explain how the risk impacts key performance indicators (KPIs) and business objectives.. The most effective way to explain how high-impact risks affect business strategy is to link each risk to specific KPIs and business objectives, such as revenue, customer retention, regulatory compliance, or market share. This translates project-level risks into strategic terms that the sponsor and executives understand, enabling informed decision-making about risk response and resource allocation. It demonstrates that risk management is not just a project activity but a driver of business value.

Answer

Apologize and state you haven't considered the business impact.

Answer

State that the risks are only project-level and do not concern the business.

Answer

Provide a detailed technical breakdown of each risk.

Question 9

When evaluating project risks using EMV, why is it critical to include both threats and opportunities in the calculation?

Accepted Answer

To provide an accurate assessment of the project's risk exposure.. Expected Monetary Value (EMV) analysis calculates the probability-weighted average outcome of all identified risks. Including both threats (negative EMV) and opportunities (positive EMV) provides a balanced, accurate picture of the project's overall risk exposure, which is essential for setting realistic contingency reserves and making informed decisions. Excluding opportunities would overstate risk and misallocate reserves.

Answer

To double the number of items in the Risk Register.

Answer

To ensure the contingency reserve is maximized.

Answer

To satisfy regulatory reporting requirements.

Question 10

Which TWO of the following are common types of probability distributions used in risk simulation?

Accepted Answer

Triangular distribution.. The Triangular distribution (A) is correct because it is a standard probability distribution in risk simulation (e.g., Monte Carlo analysis), defined by minimum, most likely, and maximum values, making it ideal for modeling expert estimates when limited data is available. The Beta distribution (D) is also correct because it is widely used in risk simulation to model uncertainty bounded between 0 and 1, such as probabilities or percentages, and can take many shapes (including uniform, U-shaped, or J-shaped) based on its two shape parameters. The other options are not recognized probability distributions: 'Square distribution' (B) is not a standard statistical distribution, 'Linear distribution' (C) is not a formal probability distribution (though a linear density could be constructed, it is not a common named type), and 'Circular distribution' (E) is not a standard probability distribution used in risk simulation.

Answer

Square distribution.

Answer

Linear distribution.

Answer

Circular distribution.

Question 11

During a project, a stakeholder refuses to accept a risk mitigation strategy that requires their department to allocate resources. What should the risk practitioner do first?

Accepted Answer

Conduct a stakeholder analysis to identify the stakeholder's interests and underlying concerns.. When a stakeholder resists a risk response, the first step is to understand why — their interests, constraints, and underlying concerns — before deciding on escalation or enforcement. Option A applies stakeholder analysis, a foundational PMI technique, to uncover the root cause of resistance and identify ways to address it collaboratively. This aligns with the PMI mindset of engaging stakeholders rather than overriding them.

Answer

Consult the Risk Management Plan for escalation procedures.

Answer

Inform the project sponsor that the risk is now an issue due to lack of support.

Answer

Force the implementation of the strategy as it was approved in the project plan.

Question 12

How should you handle feedback on the project's risk management process?

Accepted Answer

Evaluate the feedback and consider improvements to the process if it adds value.. Feedback on the risk management process should be evaluated to determine if it adds value and if improvements are warranted. This aligns with the PMI-RMP principle of continuous improvement and tailoring. Option A is correct because it balances openness to feedback with a disciplined approach to change.

Answer

Always implement any feedback provided immediately.

Answer

Tell the stakeholder that the process is fixed and cannot be changed.

Answer

Ignore the feedback to keep the process standard.

Question 13

You are identifying a trend where multiple risks in a specific category (e.g., 'Supply Chain') are occurring. What report should you generate?

Accepted Answer

Risk Category Trend Report. A Risk Category Trend Report aggregates risk data by category (e.g., Supply Chain, Technical, External) to reveal patterns, such as a rising frequency of risks in one area. This report helps the PM identify systemic issues and prioritize response efforts. It is the appropriate artifact when multiple risks in a specific category are occurring.

Answer

Budget Variance Report

Answer

Individual Risk Audit Report

Answer

Project Schedule Baseline

Question 14

During a risk workshop, stakeholders identify a risk that could impact multiple departments. How should this be handled?

Accepted Answer

Document the risk and ensure all affected department leads are involved in response planning. When a risk spans multiple departments, the correct approach is to document it in the risk register and engage all affected department leads in response planning so that ownership, dependencies, and cross-functional impacts are addressed collectively. This ensures no department is blindsided and that the response is integrated rather than siloed. It also aligns with the PMBOK principle that risk ownership and response planning should involve all relevant stakeholders.

Answer

Assign one department head as the owner

Answer

Ignore the risk until it impacts a specific department

Answer

Delegate the risk to the project sponsor

Question 15

Which document should you reference to understand the formal reporting requirements for project risks?

Accepted Answer

The Risk Management Plan. The Risk Management Plan is the document that defines how risk management activities will be structured and performed, including formal reporting requirements such as report format, frequency, audience, and escalation paths. It is the authoritative source for risk reporting procedures. Referencing it ensures compliance with the project's agreed risk communication framework.

Answer

The Communications Management Plan

Answer

The Project Charter

Answer

The Scope Statement

Question 16

Your organization is transitioning to a hybrid methodology. During risk management planning, you must select an approach that accommodates both Agile delivery and Waterfall governance. Which strategy is most effective?

Accepted Answer

Tailor the Risk Management Plan to include iterative risk review sessions during sprint planning.. In a hybrid methodology, the Risk Management Plan must be tailored to integrate both Agile and Waterfall practices. Including iterative risk review sessions during sprint planning accommodates Agile's adaptive nature while maintaining governance through the overall plan. This approach ensures risks are continuously identified and addressed in short cycles.

Answer

Use a central Risk Register managed exclusively by the PMO.

Answer

Adopt a purely Waterfall risk register for all work packages.

Answer

Eliminate the Risk Management Plan to reduce bureaucratic overhead.

Question 17

Which tool in your PMIS allows you to track the 'Risk Response' implementation status across multiple work streams?

Accepted Answer

Risk Register Status Report. The Risk Register Status Report (Option D) is the PMIS tool designed to track the implementation status of risk responses across multiple work streams. It aggregates data from the risk register — such as response owner, due date, completion percentage, and effectiveness — into a report that gives a portfolio or program-level view. This enables risk managers to monitor whether responses are being executed as planned and to identify work streams that are falling behind.

Answer

Individual Risk Response Plan

Answer

Project Charter

Answer

Risk Impact Analysis Matrix

Question 18

Which TWO behaviors demonstrate strong risk management leadership?

Accepted Answer

Always being the first to report a risk they have identified.. Option A is correct because proactively and promptly reporting a risk you have identified models transparency and psychological safety, which are core to strong risk management leadership; leaders who surface risks early enable faster mitigation and prevent small issues from becoming incidents. Option D is correct because encouraging team members to challenge assumptions during risk assessments directly strengthens risk identification and analysis by surfacing blind spots, biases, and unvalidated premises before they lead to failures. Option B is incorrect because hoarding risk information suppresses visibility and prevents the organization from making informed decisions, which is the opposite of good risk leadership. Option C is incorrect because blaming team members after a risk event destroys trust and discourages honest reporting, undermining a healthy risk culture. Option E is incorrect because taking responsibility for risks assigned to others is not leadership but a failure of accountability delegation; strong leaders ensure ownership is clear and empower others to manage their assigned risks.

Answer

Keeping all risk information to themselves to avoid unnecessary noise.

Answer

Blaming team members when a risk event happens.

Answer

Taking full responsibility for all risks, even those assigned to others.

Question 19

Your organization is implementing an 'Agile Risk Management' strategy. What is the most critical change from a traditional approach?

Accepted Answer

Moving from heavy documentation to lightweight, iterative risk updates.. Agile risk management replaces the traditional heavy, phase-gated risk documentation cycle with lightweight, iterative practices: risks are identified and re-ranked every sprint or iteration, often on a visible risk board or backlog, and burn-down style tracking replaces formal risk reports. The emphasis shifts from producing a comprehensive risk management plan up front to continuously adapting as new information emerges. This cadence change is the defining difference from traditional plan-driven risk management.

Answer

Requiring board approval for every risk.

Answer

Replacing the project manager with a risk owner.

Answer

Eliminating all risk documentation.

Question 20

A stakeholder expresses concern about the timing of risk review meetings. How should you address this?

Accepted Answer

Consult the stakeholders to identify a more convenient time for regular risk reviews.. Stakeholder engagement is a core input to effective risk management, and scheduling risk review meetings at times that work for key participants increases attendance, participation, and ownership. Option D reflects the collaborative, consultative approach PMI advocates: engage stakeholders to find a mutually acceptable time rather than imposing or abandoning the review. This preserves the review cadence while removing a participation barrier.

Answer

Cancel the meetings altogether.

Answer

Send the meeting minutes after the meeting instead of holding it.

Answer

Keep the meeting time and notify the stakeholder they are required to attend.