PfMP · domain
Portfolio Risk Management
This domain covers portfolio risk management within the PfMP exam: identifying, assessing, and responding to risks that affect strategic goals. It tests your ability to select key inputs, classify risks, apply qualitative and quantitative methods, and align risk actions with portfolio governance and strategic objectives.
Focused practice
Practice Portfolio Risk Management questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Portfolio Risk Management
A candidate must be able to identify key portfolio risk inputs, classify risks that impact strategic goals as strategic risks, assess risks using probability, impact, and strategic alignment, and select appropriate qualitative ranking methods. The most important thing is to always link portfolio risk management to strategic objectives.
Identifying key inputs for effective portfolio risk management, such as strategic objectives and risk tolerances.
Classifying a portfolio risk that impacts strategic goals as a strategic risk.
Assessing portfolio risk by considering probability, impact, and strategic alignment.
Using qualitative risk analysis methods like probability-impact matrices to rank portfolio risks.
Watch out for
Common Portfolio Risk Management exam traps
- ▸Confusing portfolio risk with project or program risk, ignoring the strategic-level impact and aggregation across components.
- ▸Overlooking that when a portfolio risk occurs and affects strategic goals, it becomes a strategic risk, not just an operational issue.
- ▸Assuming quantitative methods are always best for ranking risks, when qualitative methods like probability-impact matrices are often more suitable for portfolio-level prioritization.
Question index
All Portfolio Risk Management questions (54)
Click any question to see the full explanation, or start a practice session above.
You are the portfolio manager for a global retail portfolio spanning e-commerce, supply chain, and store operations programs. The portfolio board has approved a risk appetite statement and now wants assurance that portfolio risk responses remain aligned with it as conditions change. Which two actions should you take to maintain that alignment? (Choose two.)
Medium2What is the primary purpose of a Portfolio Risk Management Plan?
Easy3A Portfolio Manager identifies a high-impact risk that correlates across multiple programs. How should this be managed?
Hard4Which TWO of the following are sources for identifying portfolio risks?
Easy5You are performing a portfolio-level qualitative risk analysis. Which method is best for ranking risks?
Hard6Which document is used to track the status of approved risk responses?
Easy7You are the portfolio manager for a pharmaceutical R&D portfolio with three drug-development programs. A key contract manufacturer shared audited financials showing a debt covenant breach that will likely trigger restructuring within two quarters, which could halt supply of a critical excipient used by two programs. The programs' risk registers list this supplier only as 'medium likelihood, medium impact.' What should you do FIRST as the portfolio manager?
Medium8Which of the following describes 'Portfolio Risk Exposure'?
Easy9A portfolio manager is reviewing the risk management approach for a portfolio of strategic initiatives. The organization's leadership wants to ensure that portfolio risks are managed consistently and aligned with strategic objectives. Which document should the portfolio manager primarily reference to understand the risk management framework, including roles, responsibilities, and risk tolerances?
Easy10A major vendor supporting your portfolio has filed for bankruptcy. This is an example of:
Medium11A risk is identified that could positively impact the portfolio's strategic goals. How should this be handled?
Medium12Which TWO of the following are primary objectives of portfolio risk management?
Easy13You are preparing a portfolio risk report for the executive committee. Which of the following best describes the purpose of a portfolio risk heat map?
Medium14Your portfolio board is concerned about the impact of sudden market volatility on the portfolio. You decide to perform a quantitative risk analysis. Which tool is most effective for this?
Hard15You are leading a portfolio risk management workshop. Which TWO of the following are key inputs to the portfolio risk management process? (Choose two.)
Hard16When updating the Portfolio Risk Register, which information is most critical to include to ensure stakeholders understand the risk?
Medium17Your portfolio has a risk tolerance that allows for moderate risk-taking to achieve strategic goals. A new project is proposed that has a high potential return but also a high probability of failure. The project's risk exposure exceeds the portfolio's risk tolerance. As the portfolio manager, what should you do first?
Medium18You are managing a portfolio with a mix of projects and programs. A new risk has been identified that could affect multiple components simultaneously, but its probability and impact are uncertain. The portfolio board wants to understand the potential worst-case scenario and the likelihood of exceeding the portfolio's risk tolerance. Which technique is most appropriate to use?
Hard19A risk response is proving ineffective. What should you do?
Medium20Your portfolio includes a large infrastructure program and several smaller IT projects. A new regulatory requirement mandates that all projects comply with stricter data privacy controls within six months. You need to prioritize where to apply limited compliance resources. Which portfolio risk management action should you take FIRST?
Medium21A portfolio board member asks you to explain how portfolio risk management differs from the risk management performed by the individual program managers in your portfolio. Which statement best describes the portfolio manager's distinctive risk responsibility?
Easy22Which TWO of the following are steps in the portfolio risk management process?
Hard23You are managing a portfolio of infrastructure projects. A new regulatory requirement is expected to increase costs for all projects using a specific technology. This risk has a high probability and high impact, but it is not yet reflected in any project risk register. As the portfolio manager, what should you do first?
Hard24As a Portfolio Manager, you are documenting an identified risk that could affect multiple programs. Where should this be primarily recorded?
Easy25When a portfolio risk occurs and impacts the strategic goals, this event is now classified as:
Hard26You are the portfolio manager for a financial services firm's digital transformation portfolio. Your portfolio risk management plan specifies a 95% confidence level and a one-year horizon for quantitative risk analysis. The CIO asks why the aggregate portfolio contingency reserve, calculated via Monte Carlo simulation, is significantly larger than the sum of the individual component contingency reserves. What is the most likely explanation for this difference?
Hard27Which TWO of the following are appropriate portfolio risk response strategies for threats?
Hard28Which TWO are common triggers for a portfolio risk review?
Easy29Your organization's portfolio includes a large infrastructure program that is 70% complete. A new regulatory requirement is announced that will mandate significant design changes across all remaining deliverables. The program manager reports that the changes can be absorbed within the existing schedule float but will increase costs by 12%. As the portfolio manager, what is the most appropriate first action?
Medium30You are the portfolio manager for a pharmaceutical R&D portfolio. A new regulatory guideline is expected to significantly increase the cost and timeline for all clinical trials in the portfolio. You need to assess the overall impact on the portfolio's strategic objectives. Which action should you take first?
Medium31You are the portfolio manager for a retail company. The portfolio includes a project to implement a new e-commerce platform. A risk has been identified that a key supplier of payment processing services may increase fees by 20% next year. This risk is currently listed in the project risk register. During a portfolio risk review, you determine that this risk could also affect two other projects that use the same supplier. What should you do?
Easy32Which of the following is an input to Portfolio Risk Identification?
Easy33You are reporting portfolio risk status to the governance board. What is the most effective way to communicate this?
Medium34A Portfolio Manager identifies a high-level risk where the cumulative budget of active projects exceeds the total portfolio funding ceiling. Which action best aligns with Portfolio Risk Management best practices?
Medium35Which THREE are key elements of a portfolio risk management culture?
Medium36During a quarterly portfolio risk review, you plot each component's risk exposure against its contribution to strategic objectives. One program shows low individual risk exposure but underpins three of the five strategic objectives, while two larger programs with high individual exposure contribute to only one objective each. The portfolio board asks how to prioritize risk response funding. Which portfolio risk management concept should drive your recommendation?
Hard37You are the portfolio manager for a pharmaceutical company. Your portfolio includes projects developing new drugs. A new regulatory guideline is expected to be released in six months, which may require additional clinical trials for one of the drugs. The project manager for that drug development project has not included this in the project risk register because the guideline is not yet final. How should you handle this in the portfolio risk management process?
Medium38What is the primary role of the Portfolio Manager regarding risk?
Easy39You are conducting a portfolio risk review with your team. The portfolio board has asked you to identify inputs that are essential for effective portfolio risk management. Which two of the following are considered key inputs to the portfolio risk management process? (Choose two.)
Medium40Which THREE of the following are considered when assessing portfolio risk?
Medium41You are assessing the 'risk-adjusted return' of your portfolio. Which components are critical for this calculation?
Hard42During a portfolio review, you note that several projects are reporting risks that, if materialized, would impact shared resources and strategic initiatives. You need to ensure these risks are managed cohesively. Which portfolio document should you update to reflect the consolidated view of these risks?
Easy43A Portfolio Manager identifies a high probability risk involving resource scarcity across all active projects. What is the most appropriate risk response?
Medium44You are assessing the 'aggregate risk exposure' of a portfolio. What is the most critical factor to consider?
Hard45You are developing a portfolio risk management plan. Which TWO elements are essential to include in this plan? (Choose two.)
Medium46You are reviewing the portfolio risk register and notice that a risk related to a key supplier's financial stability has been marked as 'accepted.' Under what circumstances is accepting this risk most appropriate?
Easy47Which THREE of the following are quantitative analysis techniques?
Hard48You are the portfolio manager for a financial services firm. A new regulatory requirement mandates that all customer data be stored within the country. Your portfolio includes a project upgrading the CRM system, which currently stores data in a foreign cloud region. The project manager reports that the compliance risk is not in the project risk register because it is considered a portfolio-level concern. What should you do first to ensure this risk is managed appropriately?
Medium49You are leading a portfolio risk workshop with project managers. One project manager suggests that since their project is ahead of schedule, they can ignore a medium-probability risk because it won't affect their timeline. How should you respond as the portfolio manager?
Medium50Which THREE components are found in a Portfolio Risk Register?
Medium51You are managing a portfolio of IT projects for a healthcare organization. During a portfolio risk review, you identify that three projects rely on the same external vendor for a critical software component. The vendor has recently been acquired by a competitor, and there is a risk that support and licensing terms may change unfavorably. Which action best addresses this portfolio-level risk?
Hard52During a quarterly portfolio risk review, you notice that two strategic initiatives have risks that are individually rated as low, but when combined, they could cause a critical shared supplier to fail. This situation is an example of:
Hard53During a portfolio review, you observe that the actual ROI is consistently lower than predicted due to cumulative risk impacts. What is the most logical next step?
Medium54You are managing a portfolio of IT infrastructure projects. A new regulatory requirement is expected to increase the cost of compliance for all projects in the portfolio by 10-15% over the next fiscal year. Your portfolio sponsor asks you to update the portfolio risk register and recommend a response strategy. Which action best aligns with portfolio risk management principles?
MediumOther domains
All PfMP exam domains
Frequently asked questions
- What does the Portfolio Risk Management domain cover on the PfMP exam?
- A candidate must be able to identify key portfolio risk inputs, classify risks that impact strategic goals as strategic risks, assess risks using probability, impact, and strategic alignment, and select appropriate qualitative ranking methods. The most important thing is to always link portfolio risk management to strategic objectives.
- How many questions are in this domain?
- This page lists all 54 Portfolio Risk Management questions in the PfMP question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Portfolio Risk Management questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.