PMI-RMP Risk Monitoring And Reporting Practice Test 2 — 15 Questions

Question 1

You are monitoring risks and notice that a 'Secondary Risk' has appeared. What should you do first?

Accepted Answer

Add it to the Risk Register and assess its impact. When a secondary risk appears, the first action is to add it to the Risk Register and assess its impact (Option A). A secondary risk is a new risk that arises as a direct result of implementing a risk response — for example, mitigating a schedule risk by adding resources may create a cost risk. Because it is a newly identified risk, it must be formally captured and analyzed before any response can be planned or contingency reserves tapped.

Answer

Immediately initiate the contingency reserve

Answer

Ignore it if it is small

Answer

Call the sponsor to discuss the project failure

Question 2

When reporting risk data to a global team, what is the biggest challenge for the project manager regarding risk data quality?

Accepted Answer

Subjectivity in risk assessment across different regions. Subjectivity in risk assessment across different regions is the biggest challenge because risk perception, cultural norms, and risk tolerance vary globally, leading to inconsistent probability and impact ratings. This directly affects the quality and comparability of risk data. Other challenges like software compatibility or time zones are logistical and can be mitigated with tools, but subjectivity undermines data integrity.

Answer

Software language compatibility

Answer

Email communication delays

Answer

Time zone differences for reporting meetings

Question 3

You are presenting a risk report. The sponsor points out that a specific risk was closed, but the cost impact was never updated. What is the correct way to handle this during reporting?

Accepted Answer

Update the record with actuals and apologize for the reporting gap. When a risk is closed, the risk register must reflect the actual outcome, including any realized cost impact, so that the historical record and lessons-learned data are accurate. The correct action is to update the record with actuals and acknowledge the reporting gap, since the risk report must present current, accurate information to the sponsor. This aligns with PMI's emphasis on transparency, accuracy, and continuous improvement in risk reporting.

Answer

Suggest the sponsor look at the Issues Log instead

Answer

Blame the Risk Owner for the missing data

Answer

Argue that cost updates are not required for closed risks

Question 4

You are setting up a regular risk review meeting. Who is the most important attendee to invite?

Accepted Answer

The Risk Owner for the specific risks being reviewed. A risk review meeting exists to assess the status of identified risks and their response plans. The person accountable for executing those responses is the Risk Owner, so they are the most critical attendee — without them, the meeting cannot meaningfully update risk status or adjust mitigation actions.

Answer

The entire project team

Answer

All project stakeholders

Answer

The external auditor

Question 5

A project manager is using a 'Monte Carlo' simulation for risk monitoring. What is the main purpose of updating this simulation during the project?

Accepted Answer

To reflect current actuals and improve accuracy of future forecasts. Updating a Monte Carlo simulation with current actuals (e.g., actual durations, costs, and risk occurrences) refines the probability distributions and improves the accuracy of future forecasts. This is a core Monitor Risks activity that keeps the quantitative risk analysis relevant as the project progresses. The simulation is not a one-time exercise but a living model.

Answer

To make the project look better to stakeholders

Answer

To keep the simulation software updated

Answer

To replace the need for qualitative risk assessments

Question 6

When a 'Risk Trigger' occurs, what must be updated in the PMIS immediately?

Accepted Answer

The Risk Status and the Issue Log. When a risk trigger occurs, the risk is transitioning from potential to actual or imminent, so the risk status must be updated immediately in the PMIS and the issue log must be updated if the risk has materialized into an issue. This ensures the project team and stakeholders have current information for response activation. The PMIS is the central repository for both risk and issue data, so these two updates are the immediate priority.

Answer

The Project Scope Statement

Answer

The Stakeholder Register

Answer

The Resource Plan

Question 7

What is the purpose of 'Risk Reassessment' sessions held throughout the project?

Accepted Answer

To identify new risks and retire old ones. Risk Reassessment is the process of re-evaluating existing risks, closing risks that are no longer relevant, and identifying new risks that have emerged as the project progresses. Its core purpose is to keep the risk register current and accurate by retiring obsolete risks and capturing new ones, ensuring the risk response plan reflects the actual project environment. This is distinct from other monitoring activities like risk audits or variance analysis.

Answer

To ensure compliance with the procurement plan

Answer

To change the project manager

Answer

To increase the contingency budget

Question 8

If a risk's 'Risk Proximity' is approaching, what does this indicate for reporting?

Accepted Answer

The risk requires immediate and frequent monitoring. Risk proximity measures how soon a risk is expected to occur relative to the current point in the project. When proximity is approaching, the risk is moving from a future possibility into the near-term window, which means it must be actively tracked with immediate and frequent monitoring so the team can trigger the response plan before impact. This is a reporting signal that urgency has increased, not that the risk has changed category or been resolved.

Answer

The risk should be moved to the watchlist

Answer

The mitigation plan failed

Answer

The risk is no longer relevant

Question 9

You are identifying a trend where multiple risks in a specific category (e.g., 'Supply Chain') are occurring. What report should you generate?

Accepted Answer

Risk Category Trend Report. A Risk Category Trend Report aggregates risk data by category (e.g., Supply Chain, Technical, External) to reveal patterns, such as a rising frequency of risks in one area. This report helps the PM identify systemic issues and prioritize response efforts. It is the appropriate artifact when multiple risks in a specific category are occurring.

Answer

Budget Variance Report

Answer

Individual Risk Audit Report

Answer

Project Schedule Baseline

Question 10

Which tool in your PMIS allows you to track the 'Risk Response' implementation status across multiple work streams?

Accepted Answer

Risk Register Status Report. The Risk Register Status Report (Option D) is the PMIS tool designed to track the implementation status of risk responses across multiple work streams. It aggregates data from the risk register — such as response owner, due date, completion percentage, and effectiveness — into a report that gives a portfolio or program-level view. This enables risk managers to monitor whether responses are being executed as planned and to identify work streams that are falling behind.

Answer

Individual Risk Response Plan

Answer

Project Charter

Answer

Risk Impact Analysis Matrix

Question 11

When reporting to an external regulatory agency, how should you present 'Risk Exposure'?

Accepted Answer

Present a summary of risk exposure and mitigation efficacy. When reporting risk exposure to an external regulatory agency, you should present a summary of risk exposure and mitigation efficacy (Option C). This provides the agency with an accurate, aggregated view of the organization's risk posture and the effectiveness of controls, which is what regulators need to assess compliance and safety. It also respects confidentiality by not exposing raw internal risk data that could contain sensitive commercial or personal information.

Answer

Omit any risks that have been mitigated

Answer

Only report risks with a low probability

Answer

Present the full Risk Register with all sensitive data

Question 12

When a risk response is found to be ineffective during an audit, what is the next step?

Accepted Answer

Revise the risk response plan and update the register. When an audit reveals that a risk response is ineffective, the correct action is to revise the risk response plan and update the risk register to reflect the new approach, reassessed probability/impact, and revised ownership. This closes the loop on the Plan-Do-Check-Act cycle for risk management. Simply changing the owner or continuing an ineffective plan leaves the risk unaddressed.

Answer

Close the risk to avoid future audits

Answer

Assign a different owner to the same ineffective plan

Answer

Continue with the plan until the project ends

Question 13

Which section of the 'Risk Register' is most important for monitoring the status of a specific risk?

Accepted Answer

Risk Status. The Risk Status section of the Risk Register is specifically designed to track the current state of a risk, such as whether it is active, closed, or occurred. It provides the most direct information for monitoring a specific risk's status. Other sections like Risk ID, Description, and Owner are important for identification and assignment but do not indicate current status.

Answer

Risk ID

Answer

Risk Description

Answer

Owner

Question 14

You are managing a project with a 'high' risk profile. Stakeholders request a report that shows the 'Residual Risk' vs 'Target Risk' levels. What does this indicate?

Accepted Answer

The gap shows the extent of required further mitigation. Residual risk is the risk that remains after planned responses have been applied, while target risk is the acceptable level the organization is willing to tolerate. The gap between them quantifies how much additional mitigation is still required to bring exposure down to the target threshold. Reporting this gap gives stakeholders a clear, actionable view of remaining work on the risk profile.

Answer

The project is over budget

Answer

The project is ahead of schedule

Answer

The project risk is fully mitigated

Question 15

Which TWO features in a modern PMIS are best suited for automated 'Risk Monitoring'?

Accepted Answer

Dynamic dashboard updates based on register changes. Option A is correct because a PMIS dashboard that dynamically refreshes from the risk register gives real-time visibility into risk status, exposure, and trends, which is the essence of automated risk monitoring. Option D is correct because automated email notifications tied to trigger dates or thresholds proactively alert stakeholders when a risk is approaching or has breached its trigger, enabling timely response without manual tracking. Option B is not a monitoring feature; manually typing risk descriptions is data entry, not automation. Option C is wrong because automatically deleting risks after 30 days would destroy risk history and violate the need for continuous tracking. Option E is not automated monitoring; manually exporting a spreadsheet to PDF is a static, one-off reporting action.

Answer

Manual typing of risk descriptions

Answer

Automatic deletion of risks after 30 days

Answer

Manual spreadsheet export to PDF