PMI-RMP Risk Process Facilitation — All Questions With Answers

Question 1

Which document is the primary output of the risk identification process?

Accepted Answer

Risk Register. The Risk Register is the primary output of the Identify Risks process. It is the living document that captures all identified individual risks, their causes, potential responses, and current status, and it serves as the input to all subsequent risk management processes (qualitative/quantitative analysis, response planning, monitoring). While other documents are touched or referenced, the Risk Register is the formal, mandated output per the PMBOK Guide.

Answer

Lessons Learned Register

Answer

Risk Management Plan

Answer

Risk Report

Question 2

During a risk workshop, stakeholders disagree on the impact of a technical risk. Which tool is most effective for resolving this conflict?

Accepted Answer

Standardized Probability and Impact Matrix. A standardized Probability and Impact Matrix provides an agreed-upon scale and definitions for probability and impact, so stakeholders can calibrate their judgments against the same criteria rather than arguing from personal intuition. Applying it consistently during the risk workshop resolves disagreements by anchoring the discussion to organizational risk thresholds and predefined ratings. This is the tool explicitly recommended in the PMBOK Guide for Perform Qualitative Risk Analysis to ensure consistency.

Answer

Assumption Analysis

Answer

Risk Data Quality Assessment

Answer

Expert Judgment

Question 3

You are facilitating a risk identification session where one senior stakeholder dominates the conversation. Which facilitation approach would best mitigate this bias?

Accepted Answer

Implement the Delphi Technique. The Delphi Technique is a structured, anonymous, iterative expert-elicitation method in which a facilitator collects input from experts individually and circulates summarized responses across rounds until consensus emerges. Because contributions are anonymous and written, a dominant senior stakeholder cannot steer or anchor the group, which directly neutralizes the bias described. It is the PMI-recommended tool for reducing the effects of personal influence and groupthink during risk identification.

Answer

Assign a scribe to record everything

Answer

Request the senior stakeholder leave the room

Answer

Use a round-robin brainstorming session

Question 4

In a quantitative risk analysis, the cost contingency has been depleted, yet the risk remains. What is the next logical step in the risk process?

Accepted Answer

Escalate the risk to the project board or project sponsor. When the cost contingency is exhausted but the risk remains, the project manager no longer has authority to absorb it within the project budget, so the risk must be escalated to the project board or sponsor. Escalation is the correct risk-process step when the risk exceeds the project manager's tolerance or available reserves. This aligns with PMI's risk escalation and reserve analysis principles.

Answer

Accept the risk without further action

Answer

Update the risk register with a new probability estimate

Answer

Reduce the scope of the project

Question 5

You are facilitating a risk analysis session for a project with high technical uncertainty. Quantitative analysis results show a wide range of variance. What is the most appropriate action to improve the accuracy of the risk model?

Accepted Answer

Incorporate sensitivity analysis (Tornado Diagram) to refine input assumptions. When quantitative analysis shows wide variance, the root cause is usually uncertainty in input assumptions rather than insufficient simulation iterations. Sensitivity analysis (Tornado Diagram) identifies which input variables contribute most to output variance, allowing the team to refine those specific assumptions and improve model accuracy. This is the most appropriate action because it targets the source of the variance.

Answer

Increase the number of iterations in the Monte Carlo simulation

Answer

Remove the extreme outliers from the risk dataset

Answer

Change the probability distribution type from Normal to Triangular

Question 6

You are managing a global project and need to perform a quantitative risk analysis. The data provided by local offices varies significantly in quality. What is your first step?

Accepted Answer

Perform a Risk Data Quality Assessment. When data quality varies significantly across sources, the first step is to perform a Risk Data Quality Assessment to evaluate accuracy, reliability, and completeness before feeding that data into quantitative models. Running Monte Carlo or other simulations on poor-quality data produces garbage-in-garbage-out results that mislead decision-makers. Assessing data quality first determines whether the data is usable, needs remediation, or should be excluded with documented rationale.

Answer

Discard the data from the office with the lowest quality

Answer

Proceed with Monte Carlo simulation and interpret the wide variance

Answer

Normalize the data using a standard deviation calculation

Question 7

A project manager wants to maintain the risk register. Which field is strictly required to prioritize risks during the qualitative analysis phase?

Accepted Answer

Probability and Impact. Qualitative risk analysis prioritizes risks by assessing the probability of occurrence and the impact if it occurs, typically plotted on a probability-impact matrix. These two dimensions are the minimum required inputs to derive a priority ranking or risk score. Without them, risks cannot be ordered for further analysis or response planning.

Answer

Risk Response Strategy

Answer

Risk Owner

Answer

Risk Category

Question 8

During a risk workshop, stakeholders are struggling to differentiate between root causes and symptoms. Which facilitation technique should you employ to ensure the risk register accurately reflects the true origin of risks?

Accepted Answer

Five Whys. The Five Whys technique drills down from a symptom to its underlying root cause by repeatedly asking 'why.' In a risk workshop, it helps stakeholders move past surface symptoms and identify the true origin of risks for accurate register entries. This directly addresses the stated difficulty of differentiating causes from symptoms.

Answer

Delphi Technique

Answer

SWOT Analysis

Answer

Monte Carlo Simulation

Question 9

Which of the following is the best definition of 'Residual Risk'?

Accepted Answer

The risk remaining after all response strategies have been implemented. Residual risk is defined in the PMBOK Guide as the risk that remains after risk responses have been implemented. It is the exposure that persists even after all planned risk response strategies (avoid, mitigate, transfer, accept) have been executed. This residual exposure must be documented and monitored throughout the project, and it is often formally accepted by the project sponsor or key stakeholders.

Answer

The risk that occurs after the primary risk is avoided

Answer

The total risk before any responses are taken

Answer

The risk accepted as part of the project budget

Question 10

Who is primarily responsible for maintaining the risk register throughout the project?

Accepted Answer

Project Manager. The Project Manager is accountable for maintaining the risk register throughout the project lifecycle. While risk owners manage individual risks and the risk management team may contribute updates, the project manager owns the process and ensures the register remains a living, current document. This aligns with PMI's view of the project manager as the central integrator of all project knowledge areas.

Answer

Risk Management Team

Answer

Project Sponsor

Answer

Risk Owner

Question 11

Which technique is most appropriate for a quick, qualitative assessment of multiple risks in a time-constrained environment?

Accepted Answer

Probability and Impact Matrix. The Probability and Impact Matrix is most appropriate for a quick, qualitative assessment of multiple risks because it allows risks to be prioritized based on their likelihood and potential impact, without requiring quantitative data or complex simulations.

Answer

Decision Tree Analysis

Answer

Monte Carlo Simulation

Answer

Expected Monetary Value (EMV)

Question 12

A project manager is conducting a risk review. During the meeting, a new risk is identified. What should be done immediately?

Accepted Answer

Assess the new risk's probability and impact. When a new risk is identified during a risk review, the immediate next step in the PMI risk management process is to perform qualitative risk analysis—assessing its probability and impact. This evaluation determines the risk's priority and informs subsequent actions such as assigning an owner, planning responses, or adding it to the risk register. Without this assessment, the team cannot make informed decisions about how to handle the risk, so it must come first.

Answer

Wait until the next scheduled risk review cycle

Answer

Add it to the issues log

Answer

Assign a risk owner immediately

Answer

Update the risk management plan

Question 13

In a project, you are facilitating a risk workshop. You discover that a risk has been mitigated, but the residual risk remains high. What is the next logical step?

Accepted Answer

Document the residual risk in the risk register. After mitigating a risk, if the residual risk remains high, the next logical step is to document the residual risk in the risk register. This ensures that the remaining risk is formally tracked and monitored, and it may require further response planning. The risk register is the central repository for all risk-related information, including residual risks.

Answer

Assign a new risk owner

Answer

Remove the risk from the risk register

Answer

Close the risk

Question 14

You are organizing a risk workshop for a multi-disciplinary team. Which tool would be best to identify risks from different perspectives?

Accepted Answer

Risk Breakdown Structure. The Risk Breakdown Structure (RBS) is a hierarchical representation of risk categories, organized by source (technical, external, organizational, project management), that helps a workshop team systematically examine risks from multiple perspectives. It ensures coverage across disciplines and prevents the group from overlooking categories. It is the standard PMI tool for structuring risk identification in a multi-disciplinary setting.

Answer

Cost Baseline

Answer

Resource Breakdown Structure

Answer

Schedule Network Diagram

Question 15

A project manager is updating the risk register. Which of the following is the most important element to include for a newly identified risk?

Accepted Answer

The risk description and its potential impact. When a risk is first identified and added to the risk register, the foundational entries are a clear description of the risk event and its potential impact on project objectives. Without these, the risk cannot be analyzed, prioritized, or assigned. Other elements like cost of mitigation, risk score, and owner are populated later during qualitative/quantitative analysis and response planning. Thus, the description and impact are the most critical initial elements.

Answer

The cost of mitigation

Answer

The risk score

Answer

The name of the risk owner

Question 16

A quantitative risk assessment reveals that a risk has a 10% probability of a $1,000,000 impact. What is the Expected Monetary Value (EMV) of this risk?

Accepted Answer

$100,000. Expected Monetary Value (EMV) is calculated by multiplying the probability of the risk by its monetary impact. Here, 10% × $1,000,000 = $100,000. This value represents the average expected loss or gain from the risk and is used to prioritize risks and set contingency reserves.

Answer

$10,000

Answer

$1,000,000

Answer

$110,000

Question 17

What is the purpose of a Risk Breakdown Structure (RBS)?

Accepted Answer

To provide a hierarchical representation of potential sources of risk. The Risk Breakdown Structure (RBS) is a hierarchical decomposition of potential risk sources or categories, organized to help identify and categorize risks systematically. It provides a structured framework that ensures risks are considered across all relevant areas (e.g., technical, external, organizational, project management) rather than ad hoc.

Answer

To assign risk owners

Answer

To document the project schedule

Answer

To calculate the total cost of risks

Question 18

Which of the following is NOT a common risk identification technique?

Accepted Answer

Risk response planning. Risk response planning is part of the Plan Risk Responses process, which occurs after risk identification is complete — it is not an identification technique. Identification techniques generate the list of risks, while response planning determines what to do about them. SWOT analysis, brainstorming, and checklist analysis are all standard identification tools listed in PMBOK.

Answer

SWOT analysis

Answer

Brainstorming

Answer

Checklist analysis

Question 19

During a risk workshop, stakeholders identify a risk that could impact multiple departments. How should this be handled?

Accepted Answer

Document the risk and ensure all affected department leads are involved in response planning. When a risk spans multiple departments, the correct approach is to document it in the risk register and engage all affected department leads in response planning so that ownership, dependencies, and cross-functional impacts are addressed collectively. This ensures no department is blindsided and that the response is integrated rather than siloed. It also aligns with the PMBOK principle that risk ownership and response planning should involve all relevant stakeholders.

Answer

Assign one department head as the owner

Answer

Ignore the risk until it impacts a specific department

Answer

Delegate the risk to the project sponsor

Question 20

You are managing a software development project. Your team has identified a potential integration risk. What is the most effective way to communicate this to the stakeholders?

Accepted Answer

Add it to the Risk Report. The Risk Report is the formal project document specifically designed to communicate identified risks, their analysis, and planned responses to stakeholders. In PMI-RMP, risk communication follows the Plan Risk Management process, which defines how risk information will be shared; the Risk Report is the standard vehicle for conveying risk status, including newly identified integration risks. It ensures stakeholders receive consistent, documented, and traceable risk information rather than ad hoc notifications.

Answer

Hold an emergency meeting

Answer

Update the issue log

Answer

Send an email to the stakeholder team

PMI-RMP Risk Process Facilitation — All Questions With Answers

Which document is the primary output of the risk identification process?

During a risk workshop, stakeholders disagree on the impact of a technical risk. Which tool is most effective for resolving this conflict?

You are facilitating a risk identification session where one senior stakeholder dominates the conversation. Which facilitation approach would best mitigate this bias?

In a quantitative risk analysis, the cost contingency has been depleted, yet the risk remains. What is the next logical step in the risk process?

You are facilitating a risk analysis session for a project with high technical uncertainty. Quantitative analysis results show a wide range of variance. What is the most appropriate action to improve the accuracy of the risk model?

You are managing a global project and need to perform a quantitative risk analysis. The data provided by local offices varies significantly in quality. What is your first step?

A project manager wants to maintain the risk register. Which field is strictly required to prioritize risks during the qualitative analysis phase?

During a risk workshop, stakeholders are struggling to differentiate between root causes and symptoms. Which facilitation technique should you employ to ensure the risk register accurately reflects the true origin of risks?

Which of the following is the best definition of 'Residual Risk'?

Who is primarily responsible for maintaining the risk register throughout the project?

Which technique is most appropriate for a quick, qualitative assessment of multiple risks in a time-constrained environment?

A project manager is conducting a risk review. During the meeting, a new risk is identified. What should be done immediately?

In a project, you are facilitating a risk workshop. You discover that a risk has been mitigated, but the residual risk remains high. What is the next logical step?

You are organizing a risk workshop for a multi-disciplinary team. Which tool would be best to identify risks from different perspectives?

A project manager is updating the risk register. Which of the following is the most important element to include for a newly identified risk?

A quantitative risk assessment reveals that a risk has a 10% probability of a $1,000,000 impact. What is the Expected Monetary Value (EMV) of this risk?

What is the purpose of a Risk Breakdown Structure (RBS)?

Which of the following is NOT a common risk identification technique?

During a risk workshop, stakeholders identify a risk that could impact multiple departments. How should this be handled?

You are managing a software development project. Your team has identified a potential integration risk. What is the most effective way to communicate this to the stakeholders?

Which facilitation technique involves presenting an anonymous survey to experts to reach a consensus on risk impacts?

You have performed a quantitative analysis and identified a risk that is significantly impacting the schedule. What is the next step to address this?

When facilitating a risk workshop, how do you handle a suggestion that is clearly out of scope for the current project?

You have multiple risks that appear to be related. What tool would help you visualize the relationships between them?

What is the primary role of a 'Risk Owner'?

Which TWO of the following are essential components of a well-maintained risk register?

Which THREE factors should be considered when assessing the impact of a risk?

You are managing a high-risk project and the quantitative model shows a high probability of missing a milestone. What is the most proactive action to take?

If a qualitative risk analysis is showing inconsistent results, what should you review first?

Which TWO of the following are benefits of conducting regular risk workshops?

Which THREE elements are necessary for a high-quality quantitative risk analysis?

Which TWO of the following techniques are commonly used for identifying risks during project initiation?

Which TWO of the following should be included in a risk report to executive management?

Which TWO of the following are common risk response strategies for negative risks?

Which THREE steps are part of the 'Qualitative Risk Analysis' process?

Which THREE criteria are used to perform a 'Risk Data Quality Assessment'?

Which TWO documents are essential to have on hand during a risk facilitation workshop?

Which THREE techniques are suitable for facilitating risk identification with a remote team?

Which THREE factors can lead to an ineffective risk facilitation workshop?

Which TWO of the following are considered 'Risk Triggers'?

You are facilitating a risk identification session for a software development project. The team is using a Delphi technique to reach consensus on the top risks. Which two actions are essential for you to perform as the facilitator to ensure the Delphi process is effective? (Choose two.)

A project manager is facilitating a risk response planning session. The team identifies a risk that a key supplier might go bankrupt. They decide to split the order between two suppliers to reduce the impact if one fails. Which risk response strategy are they applying?

PMI-RMP Risk Process Facilitation — All Questions With Answers

Which document is the primary output of the risk identification process?

During a risk workshop, stakeholders disagree on the impact of a technical risk. Which tool is most effective for resolving this conflict?

You are facilitating a risk identification session where one senior stakeholder dominates the conversation. Which facilitation approach would best mitigate this bias?

In a quantitative risk analysis, the cost contingency has been depleted, yet the risk remains. What is the next logical step in the risk process?

You are facilitating a risk analysis session for a project with high technical uncertainty. Quantitative analysis results show a wide range of variance. What is the most appropriate action to improve the accuracy of the risk model?

You are managing a global project and need to perform a quantitative risk analysis. The data provided by local offices varies significantly in quality. What is your first step?

A project manager wants to maintain the risk register. Which field is strictly required to prioritize risks during the qualitative analysis phase?

During a risk workshop, stakeholders are struggling to differentiate between root causes and symptoms. Which facilitation technique should you employ to ensure the risk register accurately reflects the true origin of risks?

Which of the following is the best definition of 'Residual Risk'?

Who is primarily responsible for maintaining the risk register throughout the project?

Which technique is most appropriate for a quick, qualitative assessment of multiple risks in a time-constrained environment?

A project manager is conducting a risk review. During the meeting, a new risk is identified. What should be done immediately?

In a project, you are facilitating a risk workshop. You discover that a risk has been mitigated, but the residual risk remains high. What is the next logical step?

You are organizing a risk workshop for a multi-disciplinary team. Which tool would be best to identify risks from different perspectives?

A project manager is updating the risk register. Which of the following is the most important element to include for a newly identified risk?

A quantitative risk assessment reveals that a risk has a 10% probability of a $1,000,000 impact. What is the Expected Monetary Value (EMV) of this risk?

What is the purpose of a Risk Breakdown Structure (RBS)?

Which of the following is NOT a common risk identification technique?

During a risk workshop, stakeholders identify a risk that could impact multiple departments. How should this be handled?

You are managing a software development project. Your team has identified a potential integration risk. What is the most effective way to communicate this to the stakeholders?

Which facilitation technique involves presenting an anonymous survey to experts to reach a consensus on risk impacts?

You have performed a quantitative analysis and identified a risk that is significantly impacting the schedule. What is the next step to address this?

When facilitating a risk workshop, how do you handle a suggestion that is clearly out of scope for the current project?

You have multiple risks that appear to be related. What tool would help you visualize the relationships between them?

What is the primary role of a 'Risk Owner'?

Which TWO of the following are essential components of a well-maintained risk register?

Which THREE factors should be considered when assessing the impact of a risk?

You are managing a high-risk project and the quantitative model shows a high probability of missing a milestone. What is the most proactive action to take?

If a qualitative risk analysis is showing inconsistent results, what should you review first?

Which TWO of the following are benefits of conducting regular risk workshops?

Which THREE elements are necessary for a high-quality quantitative risk analysis?

Which TWO of the following techniques are commonly used for identifying risks during project initiation?

Which TWO of the following should be included in a risk report to executive management?

Which TWO of the following are common risk response strategies for negative risks?

Which THREE steps are part of the 'Qualitative Risk Analysis' process?

Which THREE criteria are used to perform a 'Risk Data Quality Assessment'?