PMI-RMP Practice Test 2 — 30 Questions

Question 1

During a project, a stakeholder refuses to accept a risk mitigation strategy that requires their department to allocate resources. What should the risk practitioner do first?

Accepted Answer

Conduct a stakeholder analysis to identify the stakeholder's interests and underlying concerns.. When a stakeholder resists a risk response, the first step is to understand why — their interests, constraints, and underlying concerns — before deciding on escalation or enforcement. Option A applies stakeholder analysis, a foundational PMI technique, to uncover the root cause of resistance and identify ways to address it collaboratively. This aligns with the PMI mindset of engaging stakeholders rather than overriding them.

Answer

Consult the Risk Management Plan for escalation procedures.

Answer

Inform the project sponsor that the risk is now an issue due to lack of support.

Answer

Force the implementation of the strategy as it was approved in the project plan.

Question 2

How should you handle feedback on the project's risk management process?

Accepted Answer

Evaluate the feedback and consider improvements to the process if it adds value.. Feedback on the risk management process should be evaluated to determine if it adds value and if improvements are warranted. This aligns with the PMI-RMP principle of continuous improvement and tailoring. Option A is correct because it balances openness to feedback with a disciplined approach to change.

Answer

Always implement any feedback provided immediately.

Answer

Tell the stakeholder that the process is fixed and cannot be changed.

Answer

Ignore the feedback to keep the process standard.

Question 3

You are identifying a trend where multiple risks in a specific category (e.g., 'Supply Chain') are occurring. What report should you generate?

Accepted Answer

Risk Category Trend Report. A Risk Category Trend Report aggregates risk data by category (e.g., Supply Chain, Technical, External) to reveal patterns, such as a rising frequency of risks in one area. This report helps the PM identify systemic issues and prioritize response efforts. It is the appropriate artifact when multiple risks in a specific category are occurring.

Answer

Budget Variance Report

Answer

Individual Risk Audit Report

Answer

Project Schedule Baseline

Question 4

During a risk workshop, stakeholders identify a risk that could impact multiple departments. How should this be handled?

Accepted Answer

Document the risk and ensure all affected department leads are involved in response planning. When a risk spans multiple departments, the correct approach is to document it in the risk register and engage all affected department leads in response planning so that ownership, dependencies, and cross-functional impacts are addressed collectively. This ensures no department is blindsided and that the response is integrated rather than siloed. It also aligns with the PMBOK principle that risk ownership and response planning should involve all relevant stakeholders.

Answer

Assign one department head as the owner

Answer

Ignore the risk until it impacts a specific department

Answer

Delegate the risk to the project sponsor

Question 5

Which document should you reference to understand the formal reporting requirements for project risks?

Accepted Answer

The Risk Management Plan. The Risk Management Plan is the document that defines how risk management activities will be structured and performed, including formal reporting requirements such as report format, frequency, audience, and escalation paths. It is the authoritative source for risk reporting procedures. Referencing it ensures compliance with the project's agreed risk communication framework.

Answer

The Communications Management Plan

Answer

The Project Charter

Answer

The Scope Statement

Question 6

Your organization is transitioning to a hybrid methodology. During risk management planning, you must select an approach that accommodates both Agile delivery and Waterfall governance. Which strategy is most effective?

Accepted Answer

Tailor the Risk Management Plan to include iterative risk review sessions during sprint planning.. In a hybrid methodology, the Risk Management Plan must be tailored to integrate both Agile and Waterfall practices. Including iterative risk review sessions during sprint planning accommodates Agile's adaptive nature while maintaining governance through the overall plan. This approach ensures risks are continuously identified and addressed in short cycles.

Answer

Use a central Risk Register managed exclusively by the PMO.

Answer

Adopt a purely Waterfall risk register for all work packages.

Answer

Eliminate the Risk Management Plan to reduce bureaucratic overhead.

Question 7

Which tool in your PMIS allows you to track the 'Risk Response' implementation status across multiple work streams?

Accepted Answer

Risk Register Status Report. The Risk Register Status Report (Option D) is the PMIS tool designed to track the implementation status of risk responses across multiple work streams. It aggregates data from the risk register — such as response owner, due date, completion percentage, and effectiveness — into a report that gives a portfolio or program-level view. This enables risk managers to monitor whether responses are being executed as planned and to identify work streams that are falling behind.

Answer

Individual Risk Response Plan

Answer

Project Charter

Answer

Risk Impact Analysis Matrix

Question 8

Which TWO behaviors demonstrate strong risk management leadership?

Accepted Answer

Always being the first to report a risk they have identified.. Option A is correct because proactively and promptly reporting a risk you have identified models transparency and psychological safety, which are core to strong risk management leadership; leaders who surface risks early enable faster mitigation and prevent small issues from becoming incidents. Option D is correct because encouraging team members to challenge assumptions during risk assessments directly strengthens risk identification and analysis by surfacing blind spots, biases, and unvalidated premises before they lead to failures. Option B is incorrect because hoarding risk information suppresses visibility and prevents the organization from making informed decisions, which is the opposite of good risk leadership. Option C is incorrect because blaming team members after a risk event destroys trust and discourages honest reporting, undermining a healthy risk culture. Option E is incorrect because taking responsibility for risks assigned to others is not leadership but a failure of accountability delegation; strong leaders ensure ownership is clear and empower others to manage their assigned risks.

Answer

Keeping all risk information to themselves to avoid unnecessary noise.

Answer

Blaming team members when a risk event happens.

Answer

Taking full responsibility for all risks, even those assigned to others.

Question 9

Your organization is implementing an 'Agile Risk Management' strategy. What is the most critical change from a traditional approach?

Accepted Answer

Moving from heavy documentation to lightweight, iterative risk updates.. Agile risk management replaces the traditional heavy, phase-gated risk documentation cycle with lightweight, iterative practices: risks are identified and re-ranked every sprint or iteration, often on a visible risk board or backlog, and burn-down style tracking replaces formal risk reports. The emphasis shifts from producing a comprehensive risk management plan up front to continuously adapting as new information emerges. This cadence change is the defining difference from traditional plan-driven risk management.

Answer

Requiring board approval for every risk.

Answer

Replacing the project manager with a risk owner.

Answer

Eliminating all risk documentation.

Question 10

A stakeholder expresses concern about the timing of risk review meetings. How should you address this?

Accepted Answer

Consult the stakeholders to identify a more convenient time for regular risk reviews.. Stakeholder engagement is a core input to effective risk management, and scheduling risk review meetings at times that work for key participants increases attendance, participation, and ownership. Option D reflects the collaborative, consultative approach PMI advocates: engage stakeholders to find a mutually acceptable time rather than imposing or abandoning the review. This preserves the review cadence while removing a participation barrier.

Answer

Cancel the meetings altogether.

Answer

Send the meeting minutes after the meeting instead of holding it.

Answer

Keep the meeting time and notify the stakeholder they are required to attend.

Question 11

What is the primary benefit of maintaining a transparent risk register accessible to all project stakeholders?

Accepted Answer

It fosters a proactive risk culture and improves risk awareness across the team.. A transparent risk register that all stakeholders can access creates shared visibility of threats and opportunities, which is the foundation of a proactive risk culture. When team members see risks documented, owned, and tracked, they are more likely to identify and report new risks early rather than react after they materialize. This aligns with PMI-RMP principles of stakeholder engagement and continuous risk awareness throughout the project lifecycle.

Answer

It ensures that everyone is blamed if a risk occurs.

Answer

It reduces the need for formal risk meetings.

Answer

It automatically resolves all high-impact risks.

Question 12

A project stakeholder discovers an unmanaged risk and is upset that it wasn't captured. How do you resolve this?

Accepted Answer

Thank the stakeholder for the identification, add it to the register, and adjust the response plan.. The best response is to thank the stakeholder for identifying the unmanaged risk, add it to the risk register, and adjust the response plan accordingly. This collaborative approach encourages future risk identification, maintains stakeholder engagement, and ensures the risk is properly managed. It turns a negative situation into a constructive one, reinforcing the value of proactive risk management.

Answer

Blame the team for not identifying it sooner.

Answer

Argue that the risk was already known and it wasn't important.

Answer

Explain that the register is only for high-priority risks.

Question 13

Which document is the primary input for identifying risks to be included in a quantitative risk analysis?

Accepted Answer

Risk Register.. The Risk Register is the living document that lists every identified risk with its probability, impact, category, and owner, so it is the only input that already contains the risks to be fed into quantitative analysis. Perform Quantitative Risk Analysis takes the Risk Register plus the Risk Management Plan and project documents, then applies numeric techniques such as Monte Carlo simulation or decision trees. Without the register there is no risk inventory to quantify.

Answer

Stakeholder Engagement Plan.

Answer

Lessons Learned Repository.

Answer

Project Charter.

Question 14

You are organizing a risk workshop for a multi-disciplinary team. Which tool would be best to identify risks from different perspectives?

Accepted Answer

Risk Breakdown Structure. The Risk Breakdown Structure (RBS) is a hierarchical representation of risk categories, organized by source (technical, external, organizational, project management), that helps a workshop team systematically examine risks from multiple perspectives. It ensures coverage across disciplines and prevents the group from overlooking categories. It is the standard PMI tool for structuring risk identification in a multi-disciplinary setting.

Answer

Cost Baseline

Answer

Resource Breakdown Structure

Answer

Schedule Network Diagram

Question 15

In Risk-Adjusted schedule analysis, what is the primary difference between a 'Risk Event' and 'Uncertainty' (duration variability)?

Accepted Answer

Uncertainty affects all tasks, while risk events have a probability of occurrence.. In risk-adjusted schedule analysis, uncertainty (duration variability) is inherent in every task's estimate and affects all tasks, whereas a risk event is a discrete occurrence with a probability of happening and a potential impact. This distinction drives how each is modeled: uncertainty is captured through ranges or distributions on task durations, while risk events are modeled as probabilistic branches or additional activities. Understanding this difference is essential for building accurate schedule simulations.

Answer

Risk events are modeled with triangular distributions.

Answer

Risk events are always more expensive than uncertainty.

Answer

Uncertainty can be mitigated, but risk events cannot.

Question 16

You are using a Risk Register template. Which field is most useful for tracking the 'Risk Reassessment' frequency?

Accepted Answer

Next Review Date. The 'Next Review Date' field in a Risk Register is specifically designed to track when a risk should be reassessed, aligning with the 'Risk Reassessment' frequency defined in the Risk Management Plan. It ensures that risks are reviewed at planned intervals, enabling timely updates to probability, impact, and response strategies. This field directly supports the Control Risks process by scheduling regular reviews.

Answer

Risk Owner

Answer

Risk ID

Answer

Contingency Budget

Question 17

What is the primary output of a sensitivity analysis in a project risk assessment?

Accepted Answer

Identification of the most influential project variables.. Sensitivity analysis, often performed using tornado diagrams, determines which individual project variables (e.g., cost, duration, or risk factors) have the greatest impact on project objectives. Its primary output is the identification of the most influential variables, allowing the risk manager to focus attention and response planning on those drivers. This is a core quantitative risk analysis technique in PMI-RMP.

Answer

A total project cost estimate.

Answer

A project management plan.

Answer

A list of all possible project risks.

Question 18

You are managing a software development project. Your team has identified a potential integration risk. What is the most effective way to communicate this to the stakeholders?

Accepted Answer

Add it to the Risk Report. The Risk Report is the formal project document specifically designed to communicate identified risks, their analysis, and planned responses to stakeholders. In PMI-RMP, risk communication follows the Plan Risk Management process, which defines how risk information will be shared; the Risk Report is the standard vehicle for conveying risk status, including newly identified integration risks. It ensures stakeholders receive consistent, documented, and traceable risk information rather than ad hoc notifications.

Answer

Hold an emergency meeting

Answer

Update the issue log

Answer

Send an email to the stakeholder team

Question 19

You are managing a project with a 'high' risk profile. Stakeholders request a report that shows the 'Residual Risk' vs 'Target Risk' levels. What does this indicate?

Accepted Answer

The gap shows the extent of required further mitigation. Residual risk is the risk that remains after planned responses have been applied, while target risk is the acceptable level the organization is willing to tolerate. The gap between them quantifies how much additional mitigation is still required to bring exposure down to the target threshold. Reporting this gap gives stakeholders a clear, actionable view of remaining work on the risk profile.

Answer

The project is over budget

Answer

The project is ahead of schedule

Answer

The project risk is fully mitigated

Question 20

A project manager is conducting a risk review. During the meeting, a new risk is identified. What should be done immediately?

Accepted Answer

Assess the new risk's probability and impact. When a new risk is identified during a risk review, the immediate next step in the PMI risk management process is to perform qualitative risk analysis—assessing its probability and impact. This evaluation determines the risk's priority and informs subsequent actions such as assigning an owner, planning responses, or adding it to the risk register. Without this assessment, the team cannot make informed decisions about how to handle the risk, so it must come first.

Answer

Wait until the next scheduled risk review cycle

Answer

Add it to the issues log

Answer

Assign a risk owner immediately

Answer

Update the risk management plan