mediumMultiple Choice
PK0-005 Practice Question: In a risk register, the risk score is typically…
In a risk register, the risk score is typically calculated by multiplying which two fields?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Probability and impact
Risk score is usually probability multiplied by impact.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Impact and urgency
Why it's wrong here
Risk score multiplies probability by impact, not impact by urgency. Urgency belongs to incident prioritisation matrices, where it pairs with impact to set response times. It is tempting because urgency and impact both sound like severity measures, but a risk register's score uses likelihood of occurrence, not how soon action is needed.
- ✓
Probability and impact
Why this is correct
Risk scoring multiplies the likelihood (probability) of the risk occurring by the severity of its consequence (impact), producing a numeric exposure value that drives prioritisation in the register. These two fields form the standard qualitative risk calculation.
- ✗
Risk score and residual risk
Why it's wrong here
Risk score and residual risk are both outputs of the assessment, not inputs to the multiplication. It is tempting because residual risk is a recognised register field, useful after mitigation to show remaining exposure, but the score itself derives from probability and impact before any controls are applied.
- ✗
Probability and risk trigger
Why it's wrong here
A risk trigger is an event indicator that signals a risk is occurring, not a numeric multiplier. It is tempting because triggers are recorded in registers to prompt action, which is useful for monitoring, but the score multiplies probability by impact, both of which are rated numerically.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PK0-005 question from scratch — 954 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PK0-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PK0-005 exam.