PMI-RMP Risk Strategy And Planning Practice Test 2 — 15 Questions

Question 1

What is the primary purpose of defining 'Risk Roles and Responsibilities' in the Risk Management Plan?

Accepted Answer

To clarify who has the authority to approve risk responses and risk reserve usage.. Defining Risk Roles and Responsibilities in the Risk Management Plan clarifies who is accountable for identifying, analyzing, responding to, and monitoring risks, and specifically who has the authority to approve risk responses and use contingency reserves. This ensures clear decision-making and avoids delays or conflicts during risk events.

Answer

To identify who gets paid more for risk management tasks.

Answer

To assign blame if the project fails.

Answer

To reduce the number of stakeholders involved in the project.

Question 2

Your organization uses a 'Risk Management Information System' (RMIS). During planning, you are configuring the system to track risk data. Which parameter is critical to define to ensure meaningful risk reporting?

Accepted Answer

Standardized probability and impact scoring scales.. A Risk Management Information System (RMIS) aggregates risk data across projects and portfolios, and meaningful reporting requires that all inputs use consistent, standardized probability and impact scoring scales. Without a common scale (e.g., 1–5 for probability, 1–5 for impact with defined monetary or schedule thresholds), risk scores from different projects cannot be compared, aggregated, or trended — the RMIS would produce apples-to-oranges data. Defining these scales is a foundational configuration step in the risk management plan and a prerequisite for quantitative and qualitative analysis.

Answer

The exact date of the project's completion.

Answer

The project manager's salary.

Answer

A list of all possible project vendors.

Question 3

When planning for risk management, which stakeholder is usually the final authority on risk appetite for the project?

Accepted Answer

The project sponsor.. The project sponsor is the executive who funds the project and owns the business case, so they are the final authority on the project's risk appetite — the amount of risk the organization is willing to accept in pursuit of the project's objectives. The project manager and team apply that appetite but do not set it.

Answer

The project manager.

Answer

Project team members.

Answer

The external auditor.

Question 4

A project is utilizing a 'Risk-Adjusted Schedule'. What does this imply about the project's risk planning?

Accepted Answer

The schedule accounts for identified risks via time buffers or logic changes.. A Risk-Adjusted Schedule is a project schedule that has been deliberately modified to reflect the impact of identified risks and agreed-upon risk responses. This is typically achieved by adding time buffers (such as contingency reserves or feeding buffers) or by altering the logical sequence of activities (e.g., adding lag, changing dependencies, or re-sequencing work) to reduce the probability or impact of risk events. In PMI's risk management framework, this schedule is an output of the Plan Risk Responses process and is used to establish a realistic baseline that accounts for uncertainty rather than assuming a risk-free environment.

Answer

The schedule was created by a software tool without human input.

Answer

The schedule has no risks involved.

Answer

The schedule is fixed and cannot be changed.

Question 5

In the context of the Risk Management Plan, what is a 'Risk Threshold'?

Accepted Answer

A value that triggers a specific risk response or escalation path.. A Risk Threshold is a predefined value or level of risk exposure (e.g., cost, schedule, or quality impact) that, when reached or exceeded, triggers a specific risk response or escalation to a higher authority. It is documented in the Risk Management Plan and helps determine when a risk is no longer acceptable and requires action. For example, a threshold might state that any risk with a potential cost overrun greater than $50,000 must be escalated to the project sponsor. Thus, it acts as a decision trigger, not a date, budget total, or register limit.

Answer

The start date of the risk assessment phase.

Answer

The total budget allocated to the project.

Answer

The maximum number of risks allowed in the register.

Question 6

A project manager is planning to use 'Monte Carlo Simulation' for schedule risk analysis. What does this require from the risk planning phase?

Accepted Answer

Defined ranges for duration and cost, not just single-point estimates.. Monte Carlo simulation is a quantitative risk analysis technique that iteratively samples values from probability distributions assigned to schedule activities and cost elements. It requires three-point estimates (optimistic, most likely, pessimistic) or full probability distributions rather than single-point estimates, so that thousands of iterations can produce a probability distribution of possible project outcomes. Without defined ranges, the simulation has no variability to model and cannot generate meaningful P50, P80, or confidence-level results.

Answer

A verbal agreement from the team.

Answer

A simple list of risks.

Answer

Approval from the legal department.

Question 7

You are leading a project where the stakeholders have a 'neutral' risk attitude. Which risk strategy is most appropriate for this environment?

Accepted Answer

Perform balanced analysis to ensure risks are treated proportionally to their impact.. A neutral risk attitude means the organization neither seeks nor avoids risk but evaluates it on its merits, so the appropriate approach is balanced analysis that treats each risk proportionally to its impact. This aligns with the PMI-RMP principle of tailoring risk responses to the organization's risk appetite and tolerance. Option D reflects that measured, proportionate treatment rather than blanket acceptance or avoidance.

Answer

Accept all risks without analysis.

Answer

Outsource everything to external experts.

Answer

Avoid all risks regardless of cost.

Question 8

During planning, you identify that your project relies on a 'Single Point of Failure' (SPOF) in the supply chain. What is the best strategy to integrate into your plan?

Accepted Answer

Add the SPOF to the risk register with a mitigation strategy to develop secondary suppliers.. A Single Point of Failure in the supply chain is a classic risk that must be captured in the risk register and addressed with a proactive response. Developing secondary suppliers is a mitigation strategy that reduces the probability and impact of supply disruption by removing the single-source dependency. This integrates risk management into planning rather than reacting after the failure occurs.

Answer

Reduce the project scope immediately.

Answer

Accept the risk and hope it does not materialize.

Answer

Ignore the risk because it is external.

Question 9

You are tasked with defining the 'Risk Breakdown Structure' (RBS). What is the primary purpose of this tool?

Accepted Answer

To structure the identification of risks in a logical and comprehensive way.. The Risk Breakdown Structure (RBS) is a hierarchical representation of potential risk sources, organized by category and subcategory, used to structure risk identification systematically. Its primary purpose is to ensure comprehensive risk identification by providing a framework that prompts the team to consider risks across all relevant areas. This reduces the chance of overlooking categories of risk and supports consistent categorization in the risk register.

Answer

To list the names of all team members.

Answer

To calculate the final project budget.

Answer

To report progress to the project board.

Question 10

Which of the following is a 'tool and technique' used during the Plan Risk Management process?

Accepted Answer

Expert Judgment. Expert Judgment is explicitly listed as a tool and technique in the Plan Risk Management process per the PMBOK Guide. During this process, experts with experience in similar projects or risk management provide input on how to tailor the risk management approach, including methodologies, roles, responsibilities, and budget. This makes it a core technique for developing the risk management plan.

Answer

The Risk Register

Answer

The Project Scope Statement

Answer

The Project Team

Question 11

You are auditing a project and find that the Risk Management Plan was never socialized with the project team. What is the most significant risk of this situation?

Accepted Answer

Risks will not be identified or reported consistently throughout the project.. The Risk Management Plan defines the methodology, roles, responsibilities, budget, timing, and risk categories/thresholds the project will use — so if it is never socialized, team members will apply inconsistent identification techniques, use different probability/impact scales, and report risks through ad hoc channels. This directly undermines the plan's purpose of creating a common, repeatable approach to risk. The most significant consequence is therefore inconsistent risk identification and reporting across the project lifecycle.

Answer

The team will be confused about their project roles.

Answer

The project sponsor will be unhappy.

Answer

The project will be over budget immediately.

Question 12

When planning for risk, what does the term 'Tailoring' refer to?

Accepted Answer

Adjusting the risk management process to fit the project's complexity and needs.. Tailoring in risk management refers to adjusting the risk management processes, tools, and techniques to fit the specific project's size, complexity, industry, and organizational context. It ensures the risk approach is proportionate and relevant rather than applying a one-size-fits-all methodology.

Answer

Reducing the project team size.

Answer

Changing the project scope to avoid all risks.

Answer

Buying specialized software.

Question 13

A project manager wants to ensure that risk management is not viewed as a 'blame game'. How should they configure their risk communication strategy?

Accepted Answer

Focus on the root cause and mitigation during risk reviews, not on who identified the risk.. To prevent risk management from becoming a blame game, the communication strategy should focus on root causes and mitigation actions rather than on who identified or caused the risk. This fosters psychological safety, encouraging open and honest risk reporting without fear of retribution. PMI emphasizes a blame-free culture as essential for effective risk identification and stakeholder engagement.

Answer

Require team members to report risks to the project sponsor directly.

Answer

Only allow the project manager to identify risks.

Answer

Publicly document every risk identified by each team member.

Question 14

What is the primary role of the 'Risk Owner' during the planning phase?

Accepted Answer

To ensure the risk is monitored and the response is executed when triggered.. The Risk Owner is the person accountable for monitoring a specific risk and ensuring the agreed response is executed when triggers occur. During planning, this role involves understanding the risk, validating the response strategy, and preparing to act. This accountability is distinct from performing work, approving changes, or funding mitigation.

Answer

To perform all the project work.

Answer

To approve all project changes.

Answer

To fund the mitigation activities.

Question 15

Which TWO of the following are essential components of a robust Risk Management Plan?

Accepted Answer

Roles and responsibilities for risk management.. Option C is correct because a robust Risk Management Plan must define who is accountable for identifying, assessing, responding to, and monitoring risks, including the risk owner, risk manager, and team roles, which ensures clear ownership and escalation paths. Option D is correct because the plan must specify the risk methodology and processes to be used, such as risk identification techniques, qualitative and quantitative analysis approaches, probability/impact scales, risk tolerance thresholds, and response planning and monitoring procedures. Options A, B, and E are not essential components of a Risk Management Plan: the current project budget, a list of all project vendors, and a detailed project schedule are project artifacts that may inform risk identification but are not structural elements of the risk management plan itself.

Answer

The current project budget.

Answer

A list of all project vendors.

Answer

Detailed project schedule.