PMI-RMP Practice Exam 3 — 20 Questions

Question 1

What is the primary benefit of maintaining a transparent risk register accessible to all project stakeholders?

Accepted Answer

It fosters a proactive risk culture and improves risk awareness across the team.. A transparent risk register that all stakeholders can access creates shared visibility of threats and opportunities, which is the foundation of a proactive risk culture. When team members see risks documented, owned, and tracked, they are more likely to identify and report new risks early rather than react after they materialize. This aligns with PMI-RMP principles of stakeholder engagement and continuous risk awareness throughout the project lifecycle.

Answer

It ensures that everyone is blamed if a risk occurs.

Answer

It reduces the need for formal risk meetings.

Answer

It automatically resolves all high-impact risks.

Question 2

A project stakeholder discovers an unmanaged risk and is upset that it wasn't captured. How do you resolve this?

Accepted Answer

Thank the stakeholder for the identification, add it to the register, and adjust the response plan.. The best response is to thank the stakeholder for identifying the unmanaged risk, add it to the risk register, and adjust the response plan accordingly. This collaborative approach encourages future risk identification, maintains stakeholder engagement, and ensures the risk is properly managed. It turns a negative situation into a constructive one, reinforcing the value of proactive risk management.

Answer

Blame the team for not identifying it sooner.

Answer

Argue that the risk was already known and it wasn't important.

Answer

Explain that the register is only for high-priority risks.

Question 3

Which document is the primary input for identifying risks to be included in a quantitative risk analysis?

Accepted Answer

Risk Register.. The Risk Register is the living document that lists every identified risk with its probability, impact, category, and owner, so it is the only input that already contains the risks to be fed into quantitative analysis. Perform Quantitative Risk Analysis takes the Risk Register plus the Risk Management Plan and project documents, then applies numeric techniques such as Monte Carlo simulation or decision trees. Without the register there is no risk inventory to quantify.

Answer

Stakeholder Engagement Plan.

Answer

Lessons Learned Repository.

Answer

Project Charter.

Question 4

You are organizing a risk workshop for a multi-disciplinary team. Which tool would be best to identify risks from different perspectives?

Accepted Answer

Risk Breakdown Structure. The Risk Breakdown Structure (RBS) is a hierarchical representation of risk categories, organized by source (technical, external, organizational, project management), that helps a workshop team systematically examine risks from multiple perspectives. It ensures coverage across disciplines and prevents the group from overlooking categories. It is the standard PMI tool for structuring risk identification in a multi-disciplinary setting.

Answer

Cost Baseline

Answer

Resource Breakdown Structure

Answer

Schedule Network Diagram

Question 5

In Risk-Adjusted schedule analysis, what is the primary difference between a 'Risk Event' and 'Uncertainty' (duration variability)?

Accepted Answer

Uncertainty affects all tasks, while risk events have a probability of occurrence.. In risk-adjusted schedule analysis, uncertainty (duration variability) is inherent in every task's estimate and affects all tasks, whereas a risk event is a discrete occurrence with a probability of happening and a potential impact. This distinction drives how each is modeled: uncertainty is captured through ranges or distributions on task durations, while risk events are modeled as probabilistic branches or additional activities. Understanding this difference is essential for building accurate schedule simulations.

Answer

Risk events are modeled with triangular distributions.

Answer

Risk events are always more expensive than uncertainty.

Answer

Uncertainty can be mitigated, but risk events cannot.

Question 6

You are using a Risk Register template. Which field is most useful for tracking the 'Risk Reassessment' frequency?

Accepted Answer

Next Review Date. The 'Next Review Date' field in a Risk Register is specifically designed to track when a risk should be reassessed, aligning with the 'Risk Reassessment' frequency defined in the Risk Management Plan. It ensures that risks are reviewed at planned intervals, enabling timely updates to probability, impact, and response strategies. This field directly supports the Control Risks process by scheduling regular reviews.

Answer

Risk Owner

Answer

Risk ID

Answer

Contingency Budget

Question 7

What is the primary output of a sensitivity analysis in a project risk assessment?

Accepted Answer

Identification of the most influential project variables.. Sensitivity analysis, often performed using tornado diagrams, determines which individual project variables (e.g., cost, duration, or risk factors) have the greatest impact on project objectives. Its primary output is the identification of the most influential variables, allowing the risk manager to focus attention and response planning on those drivers. This is a core quantitative risk analysis technique in PMI-RMP.

Answer

A total project cost estimate.

Answer

A project management plan.

Answer

A list of all possible project risks.

Question 8

You are managing a software development project. Your team has identified a potential integration risk. What is the most effective way to communicate this to the stakeholders?

Accepted Answer

Add it to the Risk Report. The Risk Report is the formal project document specifically designed to communicate identified risks, their analysis, and planned responses to stakeholders. In PMI-RMP, risk communication follows the Plan Risk Management process, which defines how risk information will be shared; the Risk Report is the standard vehicle for conveying risk status, including newly identified integration risks. It ensures stakeholders receive consistent, documented, and traceable risk information rather than ad hoc notifications.

Answer

Hold an emergency meeting

Answer

Update the issue log

Answer

Send an email to the stakeholder team

Question 9

You are managing a project with a 'high' risk profile. Stakeholders request a report that shows the 'Residual Risk' vs 'Target Risk' levels. What does this indicate?

Accepted Answer

The gap shows the extent of required further mitigation. Residual risk is the risk that remains after planned responses have been applied, while target risk is the acceptable level the organization is willing to tolerate. The gap between them quantifies how much additional mitigation is still required to bring exposure down to the target threshold. Reporting this gap gives stakeholders a clear, actionable view of remaining work on the risk profile.

Answer

The project is over budget

Answer

The project is ahead of schedule

Answer

The project risk is fully mitigated

Question 10

A project manager is conducting a risk review. During the meeting, a new risk is identified. What should be done immediately?

Accepted Answer

Assess the new risk's probability and impact. When a new risk is identified during a risk review, the immediate next step in the PMI risk management process is to perform qualitative risk analysis—assessing its probability and impact. This evaluation determines the risk's priority and informs subsequent actions such as assigning an owner, planning responses, or adding it to the risk register. Without this assessment, the team cannot make informed decisions about how to handle the risk, so it must come first.

Answer

Wait until the next scheduled risk review cycle

Answer

Add it to the issues log

Answer

Assign a risk owner immediately

Answer

Update the risk management plan

Question 11

When reporting risk data to a global team, what is the biggest challenge for the project manager regarding risk data quality?

Accepted Answer

Subjectivity in risk assessment across different regions. Subjectivity in risk assessment across different regions is the biggest challenge because risk perception, cultural norms, and risk tolerance vary globally, leading to inconsistent probability and impact ratings. This directly affects the quality and comparability of risk data. Other challenges like software compatibility or time zones are logistical and can be mitigated with tools, but subjectivity undermines data integrity.

Answer

Software language compatibility

Answer

Email communication delays

Answer

Time zone differences for reporting meetings

Question 12

Your organization uses a 'Risk Management Information System' (RMIS). During planning, you are configuring the system to track risk data. Which parameter is critical to define to ensure meaningful risk reporting?

Accepted Answer

Standardized probability and impact scoring scales.. A Risk Management Information System (RMIS) aggregates risk data across projects and portfolios, and meaningful reporting requires that all inputs use consistent, standardized probability and impact scoring scales. Without a common scale (e.g., 1–5 for probability, 1–5 for impact with defined monetary or schedule thresholds), risk scores from different projects cannot be compared, aggregated, or trended — the RMIS would produce apples-to-oranges data. Defining these scales is a foundational configuration step in the risk management plan and a prerequisite for quantitative and qualitative analysis.

Answer

The exact date of the project's completion.

Answer

The project manager's salary.

Answer

A list of all possible project vendors.

Question 13

When modeling a risk event that might happen multiple times (e.g., machine breakdowns), what is the most appropriate technique in a simulation?

Accepted Answer

Use frequency modeling (Poisson or similar distribution).. When a risk can occur multiple times during a simulation, frequency modeling with a Poisson or similar distribution captures both how often the event happens and its per-occurrence impact. Monte Carlo tools then sample the number of occurrences per period and multiply by the impact distribution, producing a realistic aggregate exposure. This is the standard technique for recurring events such as machine breakdowns, rework cycles, or defect arrivals.

Answer

Increase the task duration by the total estimated impact.

Answer

Assign a fixed date for each occurrence.

Answer

Delete the task and recreate it as multiple tasks.

Question 14

Which of the following is a 'tool and technique' used during the Plan Risk Management process?

Accepted Answer

Expert Judgment. Expert Judgment is explicitly listed as a tool and technique in the Plan Risk Management process per the PMBOK Guide. During this process, experts with experience in similar projects or risk management provide input on how to tailor the risk management approach, including methodologies, roles, responsibilities, and budget. This makes it a core technique for developing the risk management plan.

Answer

The Risk Register

Answer

The Project Scope Statement

Answer

The Project Team

Question 15

In decision tree analysis, what is the 'Decision Node' (represented by a square) used for?

Accepted Answer

To represent a point where the team must make a choice.. In decision tree analysis, a square (decision node) represents a point where the project team or management must make a deliberate choice among alternatives, such as selecting a vendor, build vs. buy, or which risk response to implement. It is distinct from a circle (chance node), which represents uncertain outcomes with probabilities.

Answer

To assign probability to a specific outcome.

Answer

To define the end of the project life cycle.

Answer

To represent a chance event with multiple outcomes.

Question 16

A project manager notices that key stakeholders are consistently ignoring the risk register updates. What is the most effective approach to ensure meaningful engagement?

Accepted Answer

Schedule a cross-functional risk workshop to review high-impact risks collaboratively.. When stakeholders ignore risk register updates, the root cause is usually that the updates feel abstract or irrelevant to their work. A cross-functional risk workshop that reviews high-impact risks collaboratively (D) re-engages them by making risk tangible, giving them a voice, and connecting risks to shared objectives. This participatory approach rebuilds ownership and produces better risk data than passive distribution ever could.

Answer

Remove the stakeholders from the risk communication distribution list.

Answer

Send a mandatory email requiring acknowledgment of all new risk entries.

Answer

Escalate the lack of engagement to the project sponsor.

Question 17

A stakeholder team is skeptical about the value of risk management. What is the best way to demonstrate value?

Accepted Answer

Share examples of how risk identification and mitigation prevented potential issues in the project.. The most persuasive way to demonstrate the value of risk management to skeptical stakeholders is to show concrete, project-specific examples where risk identification and mitigation prevented or reduced actual problems. This evidence-based approach connects risk management to tangible outcomes the stakeholder cares about—cost avoidance, schedule protection, or quality preservation. It moves the conversation from abstract theory to demonstrated business benefit.

Answer

Provide a lecture on the theory of risk management.

Answer

Ignore their skepticism and continue the work.

Answer

Tell them that it is a mandatory requirement.

Question 18

A PMO is standardizing risk management across multiple projects. They want to ensure that risk appetite is consistent across the organization. What is the most effective approach?

Accepted Answer

Publish an Enterprise Risk Management (ERM) policy that defines standard risk tolerance levels.. An Enterprise Risk Management (ERM) policy defines the organization's risk appetite, tolerance levels, and standard risk processes, ensuring consistency across all projects and aligning with strategic objectives. Publishing such a policy is the most effective way to standardize risk appetite across multiple projects and the organization as a whole.

Answer

Only allow senior management to identify risks.

Answer

Mandate the use of a single, complex quantitative software tool.

Answer

Require all project managers to define their own risk appetite.

Question 19

You are managing a global project and need to perform a quantitative risk analysis. The data provided by local offices varies significantly in quality. What is your first step?

Accepted Answer

Perform a Risk Data Quality Assessment. When data quality varies significantly across sources, the first step is to perform a Risk Data Quality Assessment to evaluate accuracy, reliability, and completeness before feeding that data into quantitative models. Running Monte Carlo or other simulations on poor-quality data produces garbage-in-garbage-out results that mislead decision-makers. Assessing data quality first determines whether the data is usable, needs remediation, or should be excluded with documented rationale.

Answer

Discard the data from the office with the lowest quality

Answer

Proceed with Monte Carlo simulation and interpret the wide variance

Answer

Normalize the data using a standard deviation calculation

Question 20

A project manager is planning to use 'Monte Carlo Simulation' for schedule risk analysis. What does this require from the risk planning phase?

Accepted Answer

Defined ranges for duration and cost, not just single-point estimates.. Monte Carlo simulation is a quantitative risk analysis technique that iteratively samples values from probability distributions assigned to schedule activities and cost elements. It requires three-point estimates (optimistic, most likely, pessimistic) or full probability distributions rather than single-point estimates, so that thousands of iterations can produce a probability distribution of possible project outcomes. Without defined ranges, the simulation has no variability to model and cannot generate meaningful P50, P80, or confidence-level results.

Answer

A verbal agreement from the team.

Answer

A simple list of risks.

Answer

Approval from the legal department.