PMI-RMP Risk Process Facilitation Practice Test 2 — 15 Questions

Question 1

A quantitative risk assessment reveals that a risk has a 10% probability of a $1,000,000 impact. What is the Expected Monetary Value (EMV) of this risk?

Accepted Answer

$100,000. Expected Monetary Value (EMV) is calculated by multiplying the probability of the risk by its monetary impact. Here, 10% × $1,000,000 = $100,000. This value represents the average expected loss or gain from the risk and is used to prioritize risks and set contingency reserves.

Answer

$10,000

Answer

$1,000,000

Answer

$110,000

Question 2

What is the purpose of a Risk Breakdown Structure (RBS)?

Accepted Answer

To provide a hierarchical representation of potential sources of risk. The Risk Breakdown Structure (RBS) is a hierarchical decomposition of potential risk sources or categories, organized to help identify and categorize risks systematically. It provides a structured framework that ensures risks are considered across all relevant areas (e.g., technical, external, organizational, project management) rather than ad hoc.

Answer

To assign risk owners

Answer

To document the project schedule

Answer

To calculate the total cost of risks

Question 3

Which of the following is NOT a common risk identification technique?

Accepted Answer

Risk response planning. Risk response planning is part of the Plan Risk Responses process, which occurs after risk identification is complete — it is not an identification technique. Identification techniques generate the list of risks, while response planning determines what to do about them. SWOT analysis, brainstorming, and checklist analysis are all standard identification tools listed in PMBOK.

Answer

SWOT analysis

Answer

Brainstorming

Answer

Checklist analysis

Question 4

During a risk workshop, stakeholders identify a risk that could impact multiple departments. How should this be handled?

Accepted Answer

Document the risk and ensure all affected department leads are involved in response planning. When a risk spans multiple departments, the correct approach is to document it in the risk register and engage all affected department leads in response planning so that ownership, dependencies, and cross-functional impacts are addressed collectively. This ensures no department is blindsided and that the response is integrated rather than siloed. It also aligns with the PMBOK principle that risk ownership and response planning should involve all relevant stakeholders.

Answer

Assign one department head as the owner

Answer

Ignore the risk until it impacts a specific department

Answer

Delegate the risk to the project sponsor

Question 5

You are managing a software development project. Your team has identified a potential integration risk. What is the most effective way to communicate this to the stakeholders?

Accepted Answer

Add it to the Risk Report. The Risk Report is the formal project document specifically designed to communicate identified risks, their analysis, and planned responses to stakeholders. In PMI-RMP, risk communication follows the Plan Risk Management process, which defines how risk information will be shared; the Risk Report is the standard vehicle for conveying risk status, including newly identified integration risks. It ensures stakeholders receive consistent, documented, and traceable risk information rather than ad hoc notifications.

Answer

Hold an emergency meeting

Answer

Update the issue log

Answer

Send an email to the stakeholder team

Question 6

Which facilitation technique involves presenting an anonymous survey to experts to reach a consensus on risk impacts?

Accepted Answer

Delphi Technique. The Delphi Technique is a structured, iterative facilitation method in which a facilitator distributes anonymous questionnaires to a panel of subject-matter experts, collects their responses, summarizes them, and then re-circulates the results for further rounds of input until the group converges on a consensus. Anonymity is the defining feature — it removes the influence of seniority, dominant personalities, and groupthink, which is exactly what the question describes. In PMI-RMP risk management, Delphi is used specifically to estimate probability and impact of risks when objective data is scarce.

Answer

Brainstorming

Answer

Root Cause Analysis

Answer

Interviewing

Question 7

You have performed a quantitative analysis and identified a risk that is significantly impacting the schedule. What is the next step to address this?

Accepted Answer

Develop a risk response plan for this specific risk. After quantitative analysis confirms a risk significantly impacts the schedule, the next step is to develop a targeted risk response plan for that specific risk. Quantitative analysis (e.g., Monte Carlo simulation) identifies and prioritizes risks but does not itself reduce them — the response plan translates the finding into concrete actions such as schedule buffers, resource leveling, or scope adjustments. Only after the response is planned should the schedule be updated to reflect it.

Answer

Ask the team to work overtime to buffer the risk

Answer

Update the project schedule

Answer

Ignore the risk as it is only a potential occurrence

Question 8

When facilitating a risk workshop, how do you handle a suggestion that is clearly out of scope for the current project?

Accepted Answer

Acknowledge the input and record it in the 'Parking Lot' for future consideration. When a risk workshop participant offers a suggestion that is clearly out of scope, the facilitator should acknowledge the input and record it in the 'Parking Lot' for future consideration (Option C). This respects the contributor, keeps the workshop focused on the current project's risks, and preserves the idea in case it becomes relevant later or belongs to another initiative. The Parking Lot technique is a standard facilitation tool for managing off-topic but potentially valuable input.

Answer

Include it in the risk register anyway

Answer

Ask the stakeholder to leave

Answer

Immediately dismiss it

Question 9

You have multiple risks that appear to be related. What tool would help you visualize the relationships between them?

Accepted Answer

Cause-and-Effect Diagram. A Cause-and-Effect Diagram (also known as a Fishbone or Ishikawa diagram) is used to visualize the relationships between a problem or effect and its potential causes. When multiple risks appear related, this tool helps identify root causes and show how they interconnect, making it ideal for understanding relationships between risks.

Answer

Probability and Impact Matrix

Answer

Risk Breakdown Structure

Answer

Risk Register

Question 10

What is the primary role of a 'Risk Owner'?

Accepted Answer

To monitor the risk and manage the response strategy. The Risk Owner is the individual assigned accountability for a specific identified risk. Their core responsibility is to monitor that risk throughout the project lifecycle and ensure the agreed-upon response strategy is implemented and effective. This role is distinct from analysis or funding duties — it is about ownership and ongoing management of the risk itself.

Answer

To perform quantitative analysis

Answer

To fund the mitigation

Answer

To identify all project risks

Question 11

Which TWO of the following are essential components of a well-maintained risk register?

Accepted Answer

Risk owner. A well-maintained risk register must include a risk owner (B), because every identified risk needs an assigned individual accountable for monitoring, mitigating, and reporting on it throughout the risk management lifecycle. It must also include a risk description (D), since documenting the nature of the risk — its cause, potential impact, and likelihood — is the core purpose of the register and enables proper analysis and response planning. Options A, C, and E are not essential components: meeting minutes, team member CVs, and vendor contact information are unrelated administrative artifacts that do not describe or manage risks, even if they may be stored elsewhere in project documentation.

Answer

Detailed historical log of all meeting minutes

Answer

Project team member CVs

Answer

Vendor contact information

Question 12

Which THREE factors should be considered when assessing the impact of a risk?

Accepted Answer

Technical performance degradation. When assessing the impact of a risk, three key dimensions are technical performance degradation (A), financial cost (B), and schedule delay (D). Technical performance degradation (A) matters because a risk can reduce system functionality, reliability, or quality below required specifications, directly affecting whether the deliverable meets its technical objectives. Financial cost (B) is a core impact factor since risks can trigger budget overruns through rework, penalties, or additional resources, which must be quantified against the approved budget baseline. Schedule delay (D) is equally essential because risks can push critical-path activities past milestones, delaying delivery and potentially incurring contractual penalties or lost business value. By contrast, personnel vacation schedule (C) is a resource-planning or staffing consideration rather than a direct impact dimension, and office supply availability (E) is a trivial operational detail with no meaningful bearing on risk impact assessment.

Answer

Personnel vacation schedule

Answer

Office supply availability

Question 13

You are managing a high-risk project and the quantitative model shows a high probability of missing a milestone. What is the most proactive action to take?

Accepted Answer

Implement risk mitigation strategies to address the root causes. When a quantitative model shows a high probability of missing a milestone, the most proactive action is to implement risk mitigation strategies that address the root causes of the risk. Mitigation reduces the probability and/or impact of the threat before it materializes, directly improving the schedule outcome. Updating the baseline or waiting does not reduce the risk exposure.

Answer

Update the project baseline

Answer

Wait for the risk to occur

Answer

Accept the risk

Question 14

If a qualitative risk analysis is showing inconsistent results, what should you review first?

Accepted Answer

The Risk Management Plan's definitions of probability and impact. Inconsistent qualitative risk analysis results almost always trace back to ambiguous or inconsistently applied rating scales. The Risk Management Plan defines the probability and impact scales, the probability-impact matrix, and the thresholds that determine risk ratings. If those definitions are vague (e.g., 'high probability' without numeric ranges), different team members will score the same risk differently, producing non-repeatable results. Reviewing and tightening these definitions restores consistency before any other artifact is examined.

Answer

The project charter

Answer

The risk register

Answer

The project budget

Question 15

Which TWO of the following are benefits of conducting regular risk workshops?

Accepted Answer

Improving stakeholder buy-in and awareness. Option C is correct because regular risk workshops bring stakeholders together to discuss, prioritize, and own risks, which builds shared understanding and commitment—directly improving stakeholder buy-in and awareness of risk exposure. Option D is correct because these workshops are a recurring review activity that identifies new risks, reassesses existing ones, updates probability/impact ratings, and closes obsolete entries, thereby keeping the risk register current and accurate. Option A is incorrect because assigning project tasks is a resource-management/team-planning activity, not a risk workshop benefit. Option B is incorrect because automating the project budget is a financial-tooling function unrelated to risk workshops. Option E is incorrect because the project management plan is a governing document that risk workshops inform and update, not replace.

Answer

Assigning project tasks to team members

Answer

Automating the project budget

Answer

Replacing the project management plan