PMI-RMP Practice Test 3 — 30 Questions

Question 1

What is the primary benefit of using a 'Tornado Diagram' for reporting risk analysis results to stakeholders?

Accepted Answer

It visually displays the impact of individual variables on the project outcome.. A Tornado Diagram is a horizontal bar chart that visually ranks and displays the impact of individual input variables on a project outcome, with the most influential variable at the top. Its primary benefit is clear, intuitive communication of sensitivity analysis results to stakeholders who may not be trained in statistics. The visual format makes it easy to see which risks or variables drive the most uncertainty.

Answer

It is the only tool that supports cost-risk analysis.

Answer

It automatically generates a risk response plan.

Answer

It provides the most detailed statistical data.

Question 2

A project manager wants to maintain the risk register. Which field is strictly required to prioritize risks during the qualitative analysis phase?

Accepted Answer

Probability and Impact. Qualitative risk analysis prioritizes risks by assessing the probability of occurrence and the impact if it occurs, typically plotted on a probability-impact matrix. These two dimensions are the minimum required inputs to derive a priority ranking or risk score. Without them, risks cannot be ordered for further analysis or response planning.

Answer

Risk Response Strategy

Answer

Risk Owner

Answer

Risk Category

Question 3

You are reviewing a S-curve generated from a cost simulation. What does the P80 value represent on this curve?

Accepted Answer

The cost level with an 80% confidence of being met or bettered.. The P80 value on a cost S-curve derived from Monte Carlo simulation represents the cost threshold at which there is an 80% probability that the actual project cost will be at or below that value. It is a confidence-level metric, not an average or baseline. Risk managers use P-values (P50, P80, P90) to set contingency reserves aligned with organizational risk appetite.

Answer

The average cost of the project.

Answer

The cost value representing the 20th percentile of risks.

Answer

The baseline cost before risk adjustments.

Question 4

You are managing a high-risk project and the quantitative model shows a high probability of missing a milestone. What is the most proactive action to take?

Accepted Answer

Implement risk mitigation strategies to address the root causes. When a quantitative model shows a high probability of missing a milestone, the most proactive action is to implement risk mitigation strategies that address the root causes of the risk. Mitigation reduces the probability and/or impact of the threat before it materializes, directly improving the schedule outcome. Updating the baseline or waiting does not reduce the risk exposure.

Answer

Update the project baseline

Answer

Wait for the risk to occur

Answer

Accept the risk

Question 5

A project manager is using a 'Monte Carlo' simulation for risk monitoring. What is the main purpose of updating this simulation during the project?

Accepted Answer

To reflect current actuals and improve accuracy of future forecasts. Updating a Monte Carlo simulation with current actuals (e.g., actual durations, costs, and risk occurrences) refines the probability distributions and improves the accuracy of future forecasts. This is a core Monitor Risks activity that keeps the quantitative risk analysis relevant as the project progresses. The simulation is not a one-time exercise but a living model.

Answer

To make the project look better to stakeholders

Answer

To keep the simulation software updated

Answer

To replace the need for qualitative risk assessments

Question 6

When interpreting the results of a cost simulation, what does the 'Distribution' (histogram) tell you that a 'Mean' value does not?

Accepted Answer

The frequency and probability of different cost outcomes.. A cost simulation produces a probability distribution of total project cost, and the histogram visualizes that distribution — showing how frequently each cost outcome occurs across thousands of iterations. The mean is only a single summary statistic and hides the shape, spread, and skew of the distribution. The histogram therefore reveals the probability of different cost outcomes, which is essential for setting contingency reserves and confidence levels.

Answer

The total project budget.

Answer

The accuracy of the initial estimation team.

Answer

The specific task that causes the budget overrun.

Question 7

Why is it important to include stakeholders in the initial risk identification phase?

Accepted Answer

To ensure a comprehensive view by leveraging their diverse experience and knowledge.. Stakeholders bring diverse perspectives, domain expertise, and contextual knowledge that the project manager alone cannot possess, so their inclusion in risk identification produces a more comprehensive and accurate risk register. PMI-RMP emphasizes that stakeholder engagement in identification leverages collective experience to surface risks that might otherwise be missed. This directly supports the goal of comprehensive risk identification.

Answer

To satisfy a documentation requirement.

Answer

To force them to accept the project plan.

Answer

To blame them if the risks occur.

Question 8

A project stakeholder is concerned about the impact of a risk response on their budget. How should the risk practitioner respond?

Accepted Answer

Quantify the impact of the risk versus the cost of mitigation and present the analysis to the stakeholder.. The correct approach is to perform a cost-benefit analysis that quantifies the expected monetary value (EMV) of the risk versus the cost of the mitigation, then present this objective analysis to the stakeholder. This addresses the budget concern with data rather than opinion, enabling informed decision-making. PMI emphasizes that risk responses should be justified by comparing the cost of the response to the expected risk exposure reduction.

Answer

Explain that risk management is separate from the project budget.

Answer

Immediately remove the mitigation strategy from the project plan.

Answer

Dismiss the concern as the mitigation is already approved.

Question 9

You are analyzing a project schedule and realize that a 'Risk Event' is correlated with multiple tasks. How should this be handled in your risk simulation tool?

Accepted Answer

Link the risk to multiple activities via impact mapping.. The correct approach is to link the risk to multiple activities via impact mapping because a single risk event can affect several tasks simultaneously, and risk simulation tools (like @RISK, Oracle Primavera Risk Analysis, or Safran Risk) support mapping one risk to multiple activities with defined impact distributions. This preserves the correlation between tasks, ensuring the Monte Carlo simulation reflects that when the risk occurs, all affected tasks are impacted together rather than independently. Impact mapping allows you to assign probabilistic impacts (e.g., duration or cost ranges) to each linked activity, maintaining the integrity of the risk model.

Answer

Manually adjust the duration of each affected task.

Answer

Add the risk only to the critical path.

Answer

Create separate risks for each task and hope they correlate.

Question 10

In the context of the Risk Management Plan, what is a 'Risk Threshold'?

Accepted Answer

A value that triggers a specific risk response or escalation path.. A Risk Threshold is a predefined value or level of risk exposure (e.g., cost, schedule, or quality impact) that, when reached or exceeded, triggers a specific risk response or escalation to a higher authority. It is documented in the Risk Management Plan and helps determine when a risk is no longer acceptable and requires action. For example, a threshold might state that any risk with a potential cost overrun greater than $50,000 must be escalated to the project sponsor. Thus, it acts as a decision trigger, not a date, budget total, or register limit.

Answer

The start date of the risk assessment phase.

Answer

The total budget allocated to the project.

Answer

The maximum number of risks allowed in the register.

Question 11

During planning, you identify that your project relies on a 'Single Point of Failure' (SPOF) in the supply chain. What is the best strategy to integrate into your plan?

Accepted Answer

Add the SPOF to the risk register with a mitigation strategy to develop secondary suppliers.. A Single Point of Failure in the supply chain is a classic risk that must be captured in the risk register and addressed with a proactive response. Developing secondary suppliers is a mitigation strategy that reduces the probability and impact of supply disruption by removing the single-source dependency. This integrates risk management into planning rather than reacting after the failure occurs.

Answer

Reduce the project scope immediately.

Answer

Accept the risk and hope it does not materialize.

Answer

Ignore the risk because it is external.

Question 12

You are selecting a risk management methodology for a high-security government project. Which factor is most important to consider?

Accepted Answer

The level of formal governance, documentation, and compliance required.. For a high-security government project, the dominant consideration when selecting a risk methodology is the level of formal governance, documentation, and compliance required. Government projects typically must satisfy regulatory frameworks (e.g., FISMA, FedRAMP, DoD standards), so the methodology must support audit trails, formal approvals, and rigorous documentation.

Answer

The cost of the software tools used.

Answer

The speed of risk identification.

Answer

The flexibility to change the process daily.

Question 13

Which THREE data inputs are required to model a risk event in a quantitative simulation?

Accepted Answer

Impact (duration or cost) if the risk occurs.. Option A (Impact, duration or cost, if the risk occurs) is correct because a quantitative risk simulation needs a quantified consequence—such as a monetary cost or schedule duration—to compute the effect of the risk on the project's cost or schedule distribution. Option D (Task linkage or scope of impact) is correct because the simulation must know which tasks, activities, or WBS elements the risk affects so the impact can be propagated through the schedule or cost model. Option E (Probability of occurrence) is correct because the likelihood of the risk event drives how often it is sampled in a Monte Carlo simulation, directly shaping the resulting probability distribution. Option B (current market inflation rate) is not a required per-risk input; inflation is typically handled as a global estimating or escalation factor, not as a risk-event parameter. Option C (the risk owner's contact information) is irrelevant to the mathematical modeling of a risk event, since ownership is a response/management detail rather than a simulation input.

Answer

The current market inflation rate.

Answer

The risk owner's contact information.

Question 14

When facilitating a risk workshop, how do you handle a suggestion that is clearly out of scope for the current project?

Accepted Answer

Acknowledge the input and record it in the 'Parking Lot' for future consideration. When a risk workshop participant offers a suggestion that is clearly out of scope, the facilitator should acknowledge the input and record it in the 'Parking Lot' for future consideration (Option C). This respects the contributor, keeps the workshop focused on the current project's risks, and preserves the idea in case it becomes relevant later or belongs to another initiative. The Parking Lot technique is a standard facilitation tool for managing off-topic but potentially valuable input.

Answer

Include it in the risk register anyway

Answer

Ask the stakeholder to leave

Answer

Immediately dismiss it

Question 15

Which THREE actions should a practitioner take when a risk response plan is failing?

Accepted Answer

Immediately inform stakeholders about the situation and the plan to address it.. Option A is correct because transparent, timely communication with stakeholders is a core risk-management responsibility; stakeholders must be informed of the failing response and the corrective plan so they can make informed decisions and provide support. Option B is correct because the risk owner is accountable for managing the risk, so the practitioner should collaborate with that owner to reassess and revise the response strategy based on current conditions. Option D is correct because root-cause analysis of why the response is failing is essential before developing a corrective action plan, ensuring the new approach addresses the actual problem rather than symptoms. Option C is incorrect because hiding a failing response violates ethical and professional risk-management practices and allows the risk to escalate unchecked. Option E is incorrect because immediately firing the risk owner is a punitive, premature reaction that ignores the need for analysis, collaboration, and corrective planning.

Answer

Try to hide the failure until the project ends.

Answer

Fire the risk owner immediately.

Question 16

Which TWO approaches are recommended when a stakeholder is hesitant to participate in risk management activities?

Accepted Answer

Showing the stakeholder how risk management will help their area succeed.. Option B is correct because framing risk management in terms of the stakeholder's own goals and success demonstrates tangible value, which is the recommended way to overcome hesitancy and build buy-in. Option D is correct because engaging the stakeholder in a two-way discussion to uncover the root cause of their concerns (e.g., fear of blame, time burden, or unclear benefit) allows the risk manager to address those specific issues and adapt the approach accordingly. Options A and E are incorrect because ignoring or excluding a stakeholder damages communication and eliminates their input, which can leave risks unidentified and unmanaged. Option C is incorrect because coercion and threats undermine trust and collaboration, violating the constructive, transparent spirit of risk management and stakeholder engagement.

Answer

Ignoring the stakeholder and working around them.

Answer

Threatening to lower their performance rating if they do not participate.

Answer

Removing the stakeholder from all future project communications.

Question 17

During a risk review meeting, a stakeholder asks for the definition of a specific risk term. How should you respond?

Accepted Answer

Clearly define the term using the agreed-upon project glossary.. The project glossary (sometimes called the risk glossary or data dictionary) is the agreed-upon source of truth for terminology, and using it ensures consistent understanding across all stakeholders. Option C directly applies this artifact, which is part of the project management plan and supports the 'Plan Risk Management' process by establishing common definitions for risk categories, probability, and impact scales. Answering clearly from the glossary also reinforces shared vocabulary for future discussions.

Answer

Ignore the question to keep the meeting on schedule.

Answer

Refer them to the project management office (PMO) website.

Answer

Ask them to research the term after the meeting.

Question 18

Which THREE actions are part of a 'Risk Audit' process?

Accepted Answer

Validating the documentation of the Risk Register. A 'Risk Audit' is a tool/technique of the Control Risks process that examines the risk management process itself and its outputs. Option A is correct because the audit validates the documentation of the Risk Register, confirming that risks, responses, and status information are accurately and completely recorded. Option B is correct because the audit evaluates the effectiveness of implemented risk responses, determining whether they are actually reducing threats or exploiting opportunities as intended. Option E is correct because the audit verifies that the risk management process is being followed according to the risk management plan, including the agreed policies, procedures, and roles. Option C does not belong because assigning new risks to owners is part of risk identification/qualitative analysis and ongoing risk management, not the audit itself. Option D does not belong because updating the project budget for all contingencies is a cost/funding activity, not an audit action.

Answer

Assigning new risks to owners

Answer

Updating the project budget for all contingencies

Question 19

A practitioner is developing a risk reporting dashboard for executive leadership. Which information is most critical to include to support effective decision-making?

Accepted Answer

High-level risks aligned with project objectives and strategic business impact.. Executive leadership requires risk information that is aggregated, prioritized, and directly linked to project objectives and strategic business impact to make informed decisions. High-level risks aligned with objectives provide the necessary context for resource allocation, risk response, and portfolio-level trade-offs. Detailed operational issues or raw counts do not support strategic decision-making.

Answer

A list of all individual risks including minor operational issues.

Answer

The total number of risks identified in the risk register.

Answer

The technical details of every mitigation action taken to date.

Question 20

You have performed a quantitative analysis and identified a risk that is significantly impacting the schedule. What is the next step to address this?

Accepted Answer

Develop a risk response plan for this specific risk. After quantitative analysis confirms a risk significantly impacts the schedule, the next step is to develop a targeted risk response plan for that specific risk. Quantitative analysis (e.g., Monte Carlo simulation) identifies and prioritizes risks but does not itself reduce them — the response plan translates the finding into concrete actions such as schedule buffers, resource leveling, or scope adjustments. Only after the response is planned should the schedule be updated to reflect it.

Answer

Ask the team to work overtime to buffer the risk

Answer

Update the project schedule

Answer

Ignore the risk as it is only a potential occurrence