PMI-RMP Practice Test 8 — 10 Questions

Question 1

During planning, you identify that your project relies on a 'Single Point of Failure' (SPOF) in the supply chain. What is the best strategy to integrate into your plan?

Accepted Answer

Add the SPOF to the risk register with a mitigation strategy to develop secondary suppliers.. A Single Point of Failure in the supply chain is a classic risk that must be captured in the risk register and addressed with a proactive response. Developing secondary suppliers is a mitigation strategy that reduces the probability and impact of supply disruption by removing the single-source dependency. This integrates risk management into planning rather than reacting after the failure occurs.

Answer

Reduce the project scope immediately.

Answer

Accept the risk and hope it does not materialize.

Answer

Ignore the risk because it is external.

Question 2

You are selecting a risk management methodology for a high-security government project. Which factor is most important to consider?

Accepted Answer

The level of formal governance, documentation, and compliance required.. For a high-security government project, the dominant consideration when selecting a risk methodology is the level of formal governance, documentation, and compliance required. Government projects typically must satisfy regulatory frameworks (e.g., FISMA, FedRAMP, DoD standards), so the methodology must support audit trails, formal approvals, and rigorous documentation.

Answer

The cost of the software tools used.

Answer

The speed of risk identification.

Answer

The flexibility to change the process daily.

Question 3

Which THREE data inputs are required to model a risk event in a quantitative simulation?

Accepted Answer

Impact (duration or cost) if the risk occurs.. Option A (Impact, duration or cost, if the risk occurs) is correct because a quantitative risk simulation needs a quantified consequence—such as a monetary cost or schedule duration—to compute the effect of the risk on the project's cost or schedule distribution. Option D (Task linkage or scope of impact) is correct because the simulation must know which tasks, activities, or WBS elements the risk affects so the impact can be propagated through the schedule or cost model. Option E (Probability of occurrence) is correct because the likelihood of the risk event drives how often it is sampled in a Monte Carlo simulation, directly shaping the resulting probability distribution. Option B (current market inflation rate) is not a required per-risk input; inflation is typically handled as a global estimating or escalation factor, not as a risk-event parameter. Option C (the risk owner's contact information) is irrelevant to the mathematical modeling of a risk event, since ownership is a response/management detail rather than a simulation input.

Answer

The current market inflation rate.

Answer

The risk owner's contact information.

Question 4

When facilitating a risk workshop, how do you handle a suggestion that is clearly out of scope for the current project?

Accepted Answer

Acknowledge the input and record it in the 'Parking Lot' for future consideration. When a risk workshop participant offers a suggestion that is clearly out of scope, the facilitator should acknowledge the input and record it in the 'Parking Lot' for future consideration (Option C). This respects the contributor, keeps the workshop focused on the current project's risks, and preserves the idea in case it becomes relevant later or belongs to another initiative. The Parking Lot technique is a standard facilitation tool for managing off-topic but potentially valuable input.

Answer

Include it in the risk register anyway

Answer

Ask the stakeholder to leave

Answer

Immediately dismiss it

Question 5

Which THREE actions should a practitioner take when a risk response plan is failing?

Accepted Answer

Immediately inform stakeholders about the situation and the plan to address it.. Option A is correct because transparent, timely communication with stakeholders is a core risk-management responsibility; stakeholders must be informed of the failing response and the corrective plan so they can make informed decisions and provide support. Option B is correct because the risk owner is accountable for managing the risk, so the practitioner should collaborate with that owner to reassess and revise the response strategy based on current conditions. Option D is correct because root-cause analysis of why the response is failing is essential before developing a corrective action plan, ensuring the new approach addresses the actual problem rather than symptoms. Option C is incorrect because hiding a failing response violates ethical and professional risk-management practices and allows the risk to escalate unchecked. Option E is incorrect because immediately firing the risk owner is a punitive, premature reaction that ignores the need for analysis, collaboration, and corrective planning.

Answer

Try to hide the failure until the project ends.

Answer

Fire the risk owner immediately.

Question 6

Which TWO approaches are recommended when a stakeholder is hesitant to participate in risk management activities?

Accepted Answer

Showing the stakeholder how risk management will help their area succeed.. Option B is correct because framing risk management in terms of the stakeholder's own goals and success demonstrates tangible value, which is the recommended way to overcome hesitancy and build buy-in. Option D is correct because engaging the stakeholder in a two-way discussion to uncover the root cause of their concerns (e.g., fear of blame, time burden, or unclear benefit) allows the risk manager to address those specific issues and adapt the approach accordingly. Options A and E are incorrect because ignoring or excluding a stakeholder damages communication and eliminates their input, which can leave risks unidentified and unmanaged. Option C is incorrect because coercion and threats undermine trust and collaboration, violating the constructive, transparent spirit of risk management and stakeholder engagement.

Answer

Ignoring the stakeholder and working around them.

Answer

Threatening to lower their performance rating if they do not participate.

Answer

Removing the stakeholder from all future project communications.

Question 7

During a risk review meeting, a stakeholder asks for the definition of a specific risk term. How should you respond?

Accepted Answer

Clearly define the term using the agreed-upon project glossary.. The project glossary (sometimes called the risk glossary or data dictionary) is the agreed-upon source of truth for terminology, and using it ensures consistent understanding across all stakeholders. Option C directly applies this artifact, which is part of the project management plan and supports the 'Plan Risk Management' process by establishing common definitions for risk categories, probability, and impact scales. Answering clearly from the glossary also reinforces shared vocabulary for future discussions.

Answer

Ignore the question to keep the meeting on schedule.

Answer

Refer them to the project management office (PMO) website.

Answer

Ask them to research the term after the meeting.

Question 8

Which THREE actions are part of a 'Risk Audit' process?

Accepted Answer

Validating the documentation of the Risk Register. A 'Risk Audit' is a tool/technique of the Control Risks process that examines the risk management process itself and its outputs. Option A is correct because the audit validates the documentation of the Risk Register, confirming that risks, responses, and status information are accurately and completely recorded. Option B is correct because the audit evaluates the effectiveness of implemented risk responses, determining whether they are actually reducing threats or exploiting opportunities as intended. Option E is correct because the audit verifies that the risk management process is being followed according to the risk management plan, including the agreed policies, procedures, and roles. Option C does not belong because assigning new risks to owners is part of risk identification/qualitative analysis and ongoing risk management, not the audit itself. Option D does not belong because updating the project budget for all contingencies is a cost/funding activity, not an audit action.

Answer

Assigning new risks to owners

Answer

Updating the project budget for all contingencies

Question 9

A practitioner is developing a risk reporting dashboard for executive leadership. Which information is most critical to include to support effective decision-making?

Accepted Answer

High-level risks aligned with project objectives and strategic business impact.. Executive leadership requires risk information that is aggregated, prioritized, and directly linked to project objectives and strategic business impact to make informed decisions. High-level risks aligned with objectives provide the necessary context for resource allocation, risk response, and portfolio-level trade-offs. Detailed operational issues or raw counts do not support strategic decision-making.

Answer

A list of all individual risks including minor operational issues.

Answer

The total number of risks identified in the risk register.

Answer

The technical details of every mitigation action taken to date.

Question 10

You have performed a quantitative analysis and identified a risk that is significantly impacting the schedule. What is the next step to address this?

Accepted Answer

Develop a risk response plan for this specific risk. After quantitative analysis confirms a risk significantly impacts the schedule, the next step is to develop a targeted risk response plan for that specific risk. Quantitative analysis (e.g., Monte Carlo simulation) identifies and prioritizes risks but does not itself reduce them — the response plan translates the finding into concrete actions such as schedule buffers, resource leveling, or scope adjustments. Only after the response is planned should the schedule be updated to reflect it.

Answer

Ask the team to work overtime to buffer the risk

Answer

Update the project schedule

Answer

Ignore the risk as it is only a potential occurrence