Courseiva

PMI Risk Management Professional (PMI-RMP) (PMI-RMP) (PMI-RMP) — Questions 1–75

199 questions total · 3 pages · All types, answers revealed

Take a mock examExam hub

Page 1 of 3

Page 2
1
MCQhard

A stakeholder suggests a risk response that is significantly outside of the project's risk appetite. How should you handle this?

A.Implement the proposal but document that it was the stakeholder's decision.
B.Accept the proposal because the stakeholder has budget authority.
C.Facilitate a meeting to discuss the risk, the stakeholder's proposal, and the organization's risk appetite.
D.Reject the proposal immediately and tell the stakeholder they are wrong.
AnswerC

Facilitating discussion directly addresses the mismatch between the proposed response and the organisation's risk appetite. Rather than unilaterally rejecting the stakeholder's suggestion, this collaborative approach surfaces the appetite constraint, explores alternatives, and preserves stakeholder engagement — satisfying the need to align the response with documented tolerance thresholds before deciding.

Why this answer

When a stakeholder proposes a risk response outside the organization's risk appetite, the best approach is to facilitate a meeting to discuss the risk, the proposal, and the risk appetite. This collaborative approach allows all parties to understand the constraints and work toward a mutually acceptable solution. It respects the stakeholder's input while ensuring alignment with organizational risk tolerance.

Exam trap

PMI-RMP often tests the balance between stakeholder engagement and adherence to risk appetite; candidates may choose to simply accept or reject, but the exam favors facilitated discussion to resolve misalignment.

How to eliminate wrong answers

Option A is wrong because implementing a proposal that violates risk appetite without addressing the misalignment can expose the project to unacceptable risks. Option B is wrong because budget authority does not override risk appetite; accepting the proposal solely for that reason is poor risk management. Option D is wrong because rejecting the proposal outright without discussion is dismissive and may damage relationships.

Full explanation →
2
MCQhard

Your organization uses a 'Risk Management Information System' (RMIS). During planning, you are configuring the system to track risk data. Which parameter is critical to define to ensure meaningful risk reporting?

A.Standardized probability and impact scoring scales.
B.The exact date of the project's completion.
C.The project manager's salary.
D.A list of all possible project vendors.
AnswerA

Standardised probability and impact scales give every risk a common scoring basis, so the RMIS can aggregate, compare and rank risks consistently. Without this shared calibration, reporting thresholds and heat maps become meaningless, defeating the system's purpose during planning.

Why this answer

A Risk Management Information System (RMIS) aggregates risk data across projects and portfolios, and meaningful reporting requires that all inputs use consistent, standardized probability and impact scoring scales. Without a common scale (e.g., 1–5 for probability, 1–5 for impact with defined monetary or schedule thresholds), risk scores from different projects cannot be compared, aggregated, or trended — the RMIS would produce apples-to-oranges data. Defining these scales is a foundational configuration step in the risk management plan and a prerequisite for quantitative and qualitative analysis.

Exam trap

The trap is selecting a project-specific detail (completion date, salary, vendor list) when the question asks about a *system-wide configuration parameter* — candidates must recognize that RMIS value comes from cross-project comparability, which requires standardized scoring scales.

How to eliminate wrong answers

Option B is wrong because the project completion date is a schedule attribute, not a risk data parameter — it does not affect how risks are scored, compared, or reported in the RMIS. Option C is wrong because the project manager's salary is a cost/HR detail with no relevance to risk scoring or reporting; it would never be a configuration parameter for risk data. Option D is wrong because a vendor list is a procurement artifact, not a risk scoring input — while vendors may be risk sources, listing them does not standardize risk reporting.

Full explanation →
3
Multi-Selectmedium

Which TWO of the following are benefits of conducting regular risk workshops?

Select 2 answers
A.Assigning project tasks to team members
B.Automating the project budget
C.Improving stakeholder buy-in and awareness
D.Ensuring the risk register remains current and accurate
E.Replacing the project management plan
AnswersC, D

Regular risk workshops bring stakeholders together to identify and assess threats collaboratively, which builds shared ownership of the risk register and raises awareness of exposures beyond individual silos. This directly satisfies the stem's requirement for benefits, since participation fosters commitment to mitigation actions rather than passive acceptance of risk decisions made elsewhere.

Why this answer

Option C is correct because regular risk workshops bring stakeholders together to discuss, prioritize, and own risks, which builds shared understanding and commitment—directly improving stakeholder buy-in and awareness of risk exposure. Option D is correct because these workshops are a recurring review activity that identifies new risks, reassesses existing ones, updates probability/impact ratings, and closes obsolete entries, thereby keeping the risk register current and accurate. Option A is incorrect because assigning project tasks is a resource-management/team-planning activity, not a risk workshop benefit.

Option B is incorrect because automating the project budget is a financial-tooling function unrelated to risk workshops. Option E is incorrect because the project management plan is a governing document that risk workshops inform and update, not replace.

Exam trap

PMI-RMP often tests whether candidates can distinguish risk workshop benefits from general project management activities, planting options like task assignment or budget automation that sound productive but have no logical connection to the purpose of a risk workshop.

Full explanation →
4
MCQmedium

Which report type is best suited for providing senior management with a high-level view of current risk status versus the risk appetite threshold?

A.Individual Risk Response Plan
B.Project Schedule Variance Report
C.Risk Heat Map
D.Risk Register Detail Report
AnswerC

A risk heat map plots risks by probability and impact, giving senior management a consolidated visual against appetite thresholds. This satisfies the high-level status-versus-appetite constraint, unlike detailed registers or mitigation plans that obscure the aggregate exposure picture.

Why this answer

A risk heat map visually plots probability against impact and highlights which risks exceed the organization's risk appetite thresholds. Senior management can quickly see the overall risk posture and where intervention is needed. This makes it the best high-level reporting tool for comparing current risk status to appetite.

Exam trap

PMI-RMP often tests report selection by audience, tempting candidates to choose detailed registers or response plans when executives need a visual, threshold-oriented view.

How to eliminate wrong answers

Option A is wrong because an Individual Risk Response Plan is a detailed, per-risk document, not a high-level portfolio view. Option B is wrong because a Project Schedule Variance Report tracks schedule performance, not risk status versus appetite. Option D is wrong because a Risk Register Detail Report is a granular list of risks and responses, too detailed for executive-level appetite comparison.

Full explanation →
5
MCQhard

The project has a significant risk with a high probability of occurring. The stakeholder responsible for the risk response is unavailable due to personal leave. What should you do?

A.Pause all activities related to the risk until the stakeholder returns.
B.Identify a deputy or delegate with the authority to execute the agreed-upon risk response.
C.Take over the responsibility and execute the response yourself.
D.Update the risk register to state the risk is unmitigated until the stakeholder returns.
AnswerB

Delegating to a deputy preserves the planned risk response despite the owner's absence, keeping the agreed mitigation on schedule. Escalating or waiting would leave a high-probability risk unaddressed, so transferring execution authority to a competent substitute is the appropriate action.

Why this answer

When a risk owner is unavailable, the risk practitioner must ensure the agreed response can still be executed by identifying a deputy or delegate with the authority to act. This maintains response readiness and avoids delays in addressing a high-probability risk. PMI emphasizes proactive risk response execution and continuity of ownership, so delegating authority is the correct action rather than pausing or reassigning unilaterally.

Exam trap

The trap is choosing the passive or heroic option — pausing or personally taking over — instead of the PMI-preferred answer of maintaining response capability through proper delegation.

How to eliminate wrong answers

Option A is wrong because pausing risk response activities leaves the project exposed to a high-probability risk and violates the principle of proactive risk management. Option C is wrong because taking over the responsibility yourself bypasses proper ownership and authority; the project manager may lack the technical authority or capacity, and it undermines the risk owner structure. Option D is wrong because simply documenting the risk as unmitigated does not address it and effectively abandons the planned response, which is a failure of risk response implementation.

Full explanation →
6
MCQeasy

What is the purpose of a risk owner in a project?

A.To pay for any damages caused by the risk.
B.To perform all tasks related to the risk.
C.To blame if the risk event occurs.
D.To provide regular updates on the status and mitigation progress of the assigned risk.
AnswerD

A risk owner is accountable for monitoring an assigned risk and reporting its status, so providing regular updates on mitigation progress directly fulfils that duty. This satisfies the stem's requirement for ongoing communication, distinguishing the role from identification or analysis tasks performed elsewhere in the risk process.

Why this answer

A risk owner is the person accountable for monitoring an assigned risk and driving its response actions. Their core responsibility is to track the risk's status, execute or coordinate the agreed response, and report progress and changes to the project manager. This is a monitoring-and-controls role, not a financial, blame, or all-tasks role.

Exam trap

PMI-RMP often tests the misconception that a risk owner is the person who does all the work or absorbs the blame, when the correct PMI definition is accountability for monitoring and reporting on the assigned risk.

How to eliminate wrong answers

Option A is wrong because paying for damages is a financial/insurance matter, not the risk owner's defined responsibility; risk ownership is about managing the response, not indemnifying losses. Option B is wrong because performing all tasks related to the risk conflates the risk owner with the response implementers; the owner coordinates and monitors, but individual response actions may be delegated to team members. Option C is wrong because assigning blame is a punitive misconception — PMI's risk management is non-punitive and focused on proactive response, not fault-finding after an event.

Full explanation →
7
MCQmedium

You are conducting sensitivity analysis using a scatter plot in a simulation tool. What does a tight clustering of data points along a diagonal line suggest?

A.The variable is independent of the outcome.
B.Low sensitivity.
C.High sensitivity.
D.The simulation failed to converge.
AnswerC

A tight diagonal clustering means output values change proportionally with each input change, so the tornado/scatter relationship is strong. This directly satisfies the stem's sensitivity question: the tighter the points hug the diagonal, the more sensitive the model is to that variable.

Why this answer

In a tornado diagram or scatter plot sensitivity analysis, a tight clustering of data points along a diagonal line indicates a strong positive correlation between the input variable and the outcome. This means small changes in the variable produce predictable, proportional changes in the project outcome, which is the definition of high sensitivity. The variable is therefore a key driver of risk exposure.

Exam trap

The trap here is confusing 'tight clustering along a diagonal' with low variability or convergence failure; candidates must recognize that tightness along a diagonal means strong correlation, i.e., high sensitivity, not low.

How to eliminate wrong answers

Option A is wrong because independence would show a random scatter cloud with no discernible pattern, not a tight diagonal line. Option B is wrong because low sensitivity would produce a diffuse, wide scatter with little correlation between the variable and the outcome. Option D is wrong because simulation convergence is assessed through statistical stability of outputs (e.g., mean and standard deviation across iterations), not through the shape of a scatter plot between an input and the outcome.

Full explanation →
8
MCQmedium

During project execution, you find that the 'Risk Response Owner' is not reporting updates. How should this be addressed within the project governance framework?

A.Update the risk yourself and hide the lack of participation
B.Escalate the accountability issue to the project sponsor
C.Assign a new owner without informing the original owner
D.Remove the risk from the register
AnswerB

Escalating to the project sponsor satisfies the governance constraint because the sponsor owns project-level accountability when a designated owner fails to perform. The risk response owner's silence is a performance and authority gap the project manager cannot resolve alone; the sponsor can enforce accountability, reassign ownership, or direct corrective action.

Why this answer

In project governance, the Risk Response Owner is accountable for executing and reporting on risk responses. If they fail to report, the issue is an accountability gap that should be escalated to the project sponsor, who has the authority to enforce governance and address performance issues. This maintains transparency and ensures the risk management process remains effective.

Exam trap

PMI-RMP often tests governance and accountability, and the trap is choosing to 'fix' the issue quietly or reassign without escalation, which violates transparency and proper authority.

How to eliminate wrong answers

Option A is wrong because updating the risk yourself and hiding the lack of participation violates transparency and integrity, and it does not address the root cause of non-reporting. Option C is wrong because assigning a new owner without informing the original owner bypasses proper change control and can cause confusion or conflict. Option D is wrong because removing the risk from the register is not justified; the risk still exists and must be managed, and removal would falsify the risk profile.

Full explanation →
9
Multi-Selectmedium

Which THREE steps are essential for a project manager when planning for 'Stakeholder Risk Attitudes'?

Select 3 answers
A.Identify key stakeholders and their attitudes.
B.Ignore the stakeholder's feelings.
C.Adjust risk response strategies based on identified attitudes.
D.Change the project objectives to match the sponsor's personality.
E.Document the risk attitude in the Stakeholder Register.
AnswersA, C, E

Identifying stakeholders and their individual risk attitudes establishes the baseline input for stakeholder risk planning, satisfying the stem's requirement. Without knowing who holds which attitude, response tailoring and communication approaches cannot be aligned to tolerance levels.

Why this answer

Option A is correct because the first essential step in planning for stakeholder risk attitudes is to identify the key stakeholders and determine whether each one is risk-averse, risk-neutral, or risk-seeking, since these attitudes directly shape how risks will be perceived and tolerated. Option C is correct because once attitudes are identified, the project manager must tailor risk response strategies — for example, choosing avoidance or mitigation for risk-averse stakeholders versus acceptance or exploitation for risk-seeking ones — so that responses align with stakeholder expectations. Option E is correct because the Stakeholder Register is the standard project document for recording stakeholder analysis information, including risk attitude, and documenting it there ensures the data is available for ongoing risk planning and communication.

Option B is incorrect because ignoring stakeholder feelings contradicts the entire purpose of stakeholder risk-attitude analysis and would undermine engagement and risk buy-in. Option D is incorrect because project objectives are derived from the charter, scope, and business case, not from altering them to match a sponsor's personality; risk attitudes influence risk responses, not the fundamental objectives.

Exam trap

The trap here is the distractor that sounds proactive but actually violates scope or governance (changing objectives to match a sponsor's personality), which candidates may pick because it seems responsive to stakeholder concerns.

Full explanation →
10
MCQeasy

A risk audit has just been completed. What is the most critical activity to perform with the findings?

A.Update the risk management plan and register
B.Discard the report to avoid negative visibility
C.Request a project budget increase immediately
D.Send the report to external regulatory bodies
E.Delete the risks identified during the audit
AnswerA

Audit findings only create value once fed back into the risk management plan and risk register, updating response strategies, owners and reassessed exposures. This closes the audit loop and satisfies the stem's requirement to act on findings, ensuring risk processes reflect current effectiveness rather than remaining static documentation.

Why this answer

A risk audit evaluates the effectiveness of risk management processes and identifies areas for improvement. The most critical follow-up is to update the risk management plan and risk register with findings, ensuring that lessons learned are incorporated and that risk responses are adjusted. This closes the loop on the audit and supports continuous improvement.

Exam trap

PMI-RMP often tests the misconception that audit findings should be immediately escalated for budget or regulatory action, but the primary step is to update the risk management plan and register to reflect the findings and improve future risk handling.

How to eliminate wrong answers

Option B is wrong because discarding the report hides valuable information and violates transparency and governance; it also prevents corrective action. Option C is wrong because immediately requesting a budget increase is premature; the audit findings should first be analyzed to determine if additional funds are needed. Option D is wrong because sending the report to external regulatory bodies is not a standard step unless required by compliance; it could breach confidentiality.

Option E is wrong because deleting risks identified during the audit is destructive and ignores the purpose of the audit, which is to improve risk management.

Full explanation →
11
MCQmedium

A project manager wants to ensure that risk management is not viewed as a 'blame game'. How should they configure their risk communication strategy?

A.Focus on the root cause and mitigation during risk reviews, not on who identified the risk.
B.Require team members to report risks to the project sponsor directly.
C.Only allow the project manager to identify risks.
D.Publicly document every risk identified by each team member.
AnswerA

Directing discussion to root cause and mitigation removes personal attribution, so participants report risks without fearing reprisal. This keeps the risk register honest and satisfies the stem's requirement that risk management not become a blame game.

Why this answer

To prevent risk management from becoming a blame game, the communication strategy should focus on root causes and mitigation actions rather than on who identified or caused the risk. This fosters psychological safety, encouraging open and honest risk reporting without fear of retribution. PMI emphasizes a blame-free culture as essential for effective risk identification and stakeholder engagement.

Exam trap

PMI-RMP often tests the distinction between accountability for risk response and blame for risk occurrence — candidates may pick options that seem transparent but actually reinforce a blame culture.

How to eliminate wrong answers

Option B is wrong because requiring team members to report risks directly to the sponsor bypasses the project manager and can create fear or political pressure, worsening the blame culture. Option C is wrong because restricting risk identification to the project manager severely limits input and contradicts the principle that risk identification should involve all relevant stakeholders. Option D is wrong because publicly documenting every risk by team member name invites blame and discourages reporting, directly undermining a healthy risk culture.

Full explanation →
12
MCQmedium

You are organizing a risk workshop for a multi-disciplinary team. Which tool would be best to identify risks from different perspectives?

A.Cost Baseline
B.Resource Breakdown Structure
C.Risk Breakdown Structure
D.Schedule Network Diagram
AnswerC

A Risk Breakdown Structure hierarchically categorises risk sources, giving a multi-disciplinary team a shared framework to surface risks from technical, external, organisational and project management perspectives. This structured taxonomy prompts diverse viewpoints that a single flat list would miss.

Why this answer

The Risk Breakdown Structure (RBS) is a hierarchical representation of risk categories, organized by source (technical, external, organizational, project management), that helps a workshop team systematically examine risks from multiple perspectives. It ensures coverage across disciplines and prevents the group from overlooking categories. It is the standard PMI tool for structuring risk identification in a multi-disciplinary setting.

Exam trap

PMI-RMP often tests the distinction between the RBS and other breakdown structures, and candidates confuse the RBS (risk sources) with the WBS (deliverables) or RBS with resource/cost structures.

How to eliminate wrong answers

Option A is wrong because the cost baseline is a time-phased budget used for cost control and earned value analysis, not for identifying risks from different perspectives. Option B is wrong because the Resource Breakdown Structure organizes resources by category for resource management and cost accounting, not for risk identification. Option D is wrong because the schedule network diagram shows activity dependencies and the critical path; it is a scheduling artifact, not a risk-identification framework.

Full explanation →
13
MCQhard

During a risk review, a stakeholder asks why a risk's impact has not changed despite a completed mitigation plan. What is the most likely cause?

A.The project manager forgot to save the update
B.The mitigation addressed probability, not impact
C.The risk is a secondary risk
D.The risk register is corrupted
AnswerB

Mitigation plans often reduce likelihood without altering the severity of consequences. If the response lowered probability only, the impact rating stays unchanged, explaining why the stakeholder sees no movement in the impact value despite completed mitigation work.

Why this answer

Risk responses target either the probability of a risk occurring or its impact if it does occur — and sometimes both. If a mitigation plan was completed but the impact score in the risk register is unchanged, the most likely explanation is that the response was designed to reduce probability only, leaving the potential impact untouched. This is a normal and valid outcome of certain response strategies.

Exam trap

PMI-RMP often tests the misconception that any completed mitigation must reduce both probability and impact, when in fact responses are frequently designed to address only one dimension — candidates who assume uniform reduction pick administrative or structural explanations instead.

How to eliminate wrong answers

Option A is wrong because a forgotten save is an administrative error, not a risk management explanation — the question asks for the most likely cause from a risk management perspective. Option C is wrong because a secondary risk is a new risk arising from a response, which would appear as a separate entry in the register, not explain why an existing risk's impact is unchanged. Option D is wrong because a corrupted risk register is a data integrity failure, not a plausible explanation for a specific risk's unchanged impact score.

Full explanation →
14
MCQmedium

When modeling a risk event that might happen multiple times (e.g., machine breakdowns), what is the most appropriate technique in a simulation?

A.Use frequency modeling (Poisson or similar distribution).
B.Increase the task duration by the total estimated impact.
C.Assign a fixed date for each occurrence.
D.Delete the task and recreate it as multiple tasks.
AnswerA

Frequency modelling represents how often a risk event occurs within a period, using distributions such as Poisson for independent, repeated events like machine breakdowns. This captures recurrence count, which single-occurrence probability modelling cannot, matching the stem's multiple-occurrence scenario.

Why this answer

When a risk can occur multiple times during a simulation, frequency modeling with a Poisson or similar distribution captures both how often the event happens and its per-occurrence impact. Monte Carlo tools then sample the number of occurrences per period and multiply by the impact distribution, producing a realistic aggregate exposure. This is the standard technique for recurring events such as machine breakdowns, rework cycles, or defect arrivals.

Exam trap

The trap is treating a recurring risk as a single deterministic delay; PMI-RMP tests whether candidates know that frequency and severity must be modeled separately in simulation rather than folded into one duration or cost number.

How to eliminate wrong answers

Option B is wrong because inflating a task duration by the total estimated impact collapses a stochastic, recurring event into a single deterministic delay, losing the variability and frequency information that simulation is meant to capture. Option C is wrong because assigning a fixed date for each occurrence treats a random event as deterministic and ignores the probability distribution that drives when breakdowns actually happen. Option D is wrong because deleting and recreating a task as multiple tasks is a scheduling workaround, not a simulation technique; it does not model the random frequency or severity of the recurring event.

Full explanation →
15
MCQhard

You are performing a periodic risk reassessment. A key risk has shifted from 'Low' to 'High' probability. What is the next immediate step in the reporting workflow?

A.Update the Probability and Impact Matrix and trigger a stakeholder notification
B.Schedule an immediate Steering Committee meeting
C.Close the risk and add it to the Issues Log
D.Immediately activate the contingency reserve
AnswerA

Re-scoring the risk in the Probability and Impact Matrix formally records the Low-to-High shift, and notifying stakeholders ensures the changed exposure is communicated before further response planning. Reporting workflow demands the register and matrix reflect current ratings first.

Why this answer

When a risk's probability shifts from Low to High, the immediate step is to update the Probability and Impact Matrix to reflect the new risk rating and trigger a stakeholder notification as per the communication plan. This ensures the risk is re-prioritized and stakeholders are aware of the increased exposure. The matrix update is foundational for subsequent response planning.

Exam trap

PMI-RMP often tests the confusion between responding to a risk that has occurred versus one whose probability has increased, where candidates may jump to activating reserves or escalating instead of updating the risk matrix and notifying stakeholders.

How to eliminate wrong answers

Option B is wrong because scheduling an immediate Steering Committee meeting may be premature; the first step is to update the risk documentation and notify stakeholders according to the plan, not escalate immediately. Option C is wrong because closing the risk and adding it to the Issues Log is incorrect; the risk has not occurred, only its probability increased, so it remains a risk. Option D is wrong because immediately activating the contingency reserve is premature; contingency reserves are used when risks occur or when approved responses require funding, not merely when probability increases.

Full explanation →
16
MCQeasy

What is the benefit of keeping a historical log of risk events and their outcomes?

A.To provide valuable data for future projects and improve risk identification.
B.To satisfy legal requirements.
C.To create more paperwork for the team.
D.To prove that the risk practitioner was right.
AnswerA

A historical log captures which risks actually occurred, their triggers and the effectiveness of responses. This empirical record sharpens future risk identification and probability estimates, satisfying the need to improve risk identification by replacing guesswork with evidence from comparable past projects.

Why this answer

A historical log of risk events and their outcomes (often called a lessons-learned or risk historical database) provides empirical data that feeds future risk identification, qualitative/quantitative analysis, and response planning. Option A captures this core benefit: past events inform probability estimates, impact baselines, and the risk checklists and prompt lists used in Identify Risks. This is explicitly recognized in the PMBOK as an organizational process asset.

Exam trap

PMI-RMP often tests whether candidates confuse the primary purpose of the risk historical log (improving future risk identification and analysis) with secondary administrative or compliance justifications, causing them to pick B or C.

How to eliminate wrong answers

Option B is wrong because while some industries have regulatory record-keeping requirements, the primary risk-management benefit of a historical log is not legal compliance; that is a secondary or incidental concern. Option C is wrong because creating paperwork is an administrative byproduct, not a benefit, and framing it as such misrepresents the purpose of the log. Option D is wrong because the log exists to improve organizational risk capability, not to validate an individual practitioner's judgment or assign credit.

Full explanation →
17
MCQhard

You are leading risk management for a global ERP rollout. The program management office has issued a directive that all projects must use a single enterprise risk register with a fixed scoring scale of 1-5 for probability and impact. During a risk workshop, a regional project manager argues that the fixed scale does not reflect the severe regulatory penalties unique to their region. What is the most appropriate action for you as the risk manager?

A.Propose a calibrated scale within the enterprise framework that defines region-specific anchors for the impact levels while preserving the 1-5 structure.
B.Allow the region to define a separate parallel register with its own scale and report only aggregate results upward.
C.Instruct the regional manager to use the enterprise scale unchanged to preserve cross-project comparability.
D.Escalate the disagreement to the PMO and request an exemption for the region from the enterprise register requirement.
AnswerA

Calibrating impact anchors for a region while keeping the 1-5 structure maintains enterprise comparability and captures the region's severe regulatory consequences. This satisfies the PMO's standardization goal and the regional manager's legitimate concern. It is a common tailoring approach in risk management planning, where scales are defined with context-specific descriptors to improve rating accuracy without abandoning the shared framework.

Why this answer

The best resolution preserves the enterprise's need for consistent, comparable risk data while accommodating legitimate contextual differences. Calibrating the impact scale's descriptive anchors by region keeps the 1-5 structure intact and makes ratings more accurate. This is an application of tailoring within Plan Risk Management, balancing standardization with relevance.

The other choices either ignore the regional concern, fragment the register, or bypass the framework entirely.

Exam trap

The trap here is treating standardization and contextual accuracy as mutually exclusive, when a calibrated scale within the shared framework satisfies both requirements.

Full explanation →
18
MCQeasy

What is the purpose of a Risk Breakdown Structure (RBS)?

A.To assign risk owners
B.To document the project schedule
C.To calculate the total cost of risks
D.To provide a hierarchical representation of potential sources of risk
AnswerD

A Risk Breakdown Structure arranges risk categories hierarchically, from high-level sources down to specific risk events, giving a structured taxonomy for identification and analysis. It organises sources of risk rather than ranking, scoring or assigning owners.

Why this answer

The Risk Breakdown Structure (RBS) is a hierarchical decomposition of potential risk sources or categories, organized to help identify and categorize risks systematically. It provides a structured framework that ensures risks are considered across all relevant areas (e.g., technical, external, organizational, project management) rather than ad hoc.

Exam trap

PMI-RMP often tests the distinction between the RBS (hierarchical risk source categorization) and the risk register (list of individual risks) — candidates confuse the RBS with tools for assigning owners, scheduling, or costing.

How to eliminate wrong answers

Option A is wrong because assigning risk owners is a risk response and register activity, not the purpose of the RBS — the RBS categorizes sources, it does not assign accountability. Option B is wrong because documenting the project schedule is the purpose of the schedule baseline and Gantt charts, not the RBS. Option C is wrong because calculating total risk cost is performed through quantitative risk analysis (e.g., Monte Carlo, EMV), not through the RBS, which is a qualitative categorization tool.

Full explanation →
19
Multi-Selecteasy

Which TWO of the following are common risk response strategies for negative risks?

Select 2 answers
A.Exploit
B.Enhance
C.Avoid
D.Share
E.Transfer
AnswersC, E

Avoidance eliminates the negative risk entirely by changing the project scope, schedule or approach so the threat no longer applies, for example dropping a risky technology. It differs from mitigation, which only lowers probability or impact, and is a recognised strategy for negative risks.

Why this answer

Option C (Avoid) is correct because avoiding a negative risk means changing the project plan or scope to eliminate the threat entirely, such as removing the risky activity or adopting a proven alternative approach. Option E (Transfer) is correct because transferring a negative risk shifts the financial impact and ownership of the threat to a third party, typically through insurance, warranties, or fixed-price contracts. The other options do not belong: Exploit (A) and Enhance (B) are strategies for positive risks (opportunities), aiming to maximize their probability or impact, and Share (D) is also an opportunity strategy that allocates ownership of a positive risk to a third party best able to capture the benefit.

Exam trap

PMI-RMP often tests whether candidates can correctly separate threat response strategies (Avoid, Transfer, Mitigate, Accept, Escalate) from opportunity response strategies (Exploit, Enhance, Share, Accept, Escalate), planting opportunity strategies as distractors in questions about negative risks.

Full explanation →
20
Multi-Selecthard

Which THREE actions are part of a 'Risk Audit' process?

Select 3 answers
A.Validating the documentation of the Risk Register
B.Evaluating the effectiveness of risk responses
C.Assigning new risks to owners
D.Updating the project budget for all contingencies
E.Verifying that the risk management process is followed
AnswersA, B, E

A risk audit examines whether the risk register is complete, current and correctly documented, so validating that documentation is a core action. It confirms risks, responses and owners are recorded accurately, satisfying the audit's purpose of assessing the risk management process itself.

Why this answer

A 'Risk Audit' is a tool/technique of the Control Risks process that examines the risk management process itself and its outputs. Option A is correct because the audit validates the documentation of the Risk Register, confirming that risks, responses, and status information are accurately and completely recorded. Option B is correct because the audit evaluates the effectiveness of implemented risk responses, determining whether they are actually reducing threats or exploiting opportunities as intended.

Option E is correct because the audit verifies that the risk management process is being followed according to the risk management plan, including the agreed policies, procedures, and roles. Option C does not belong because assigning new risks to owners is part of risk identification/qualitative analysis and ongoing risk management, not the audit itself. Option D does not belong because updating the project budget for all contingencies is a cost/funding activity, not an audit action.

Exam trap

PMI-RMP often tests the confusion between risk audit and other risk processes like risk reassessment or contingency planning. Candidates might select actions that are part of risk response planning rather than audit.

Full explanation →
21
MCQmedium

You are using a Risk Register template. Which field is most useful for tracking the 'Risk Reassessment' frequency?

A.Risk Owner
B.Risk ID
C.Next Review Date
D.Contingency Budget
AnswerC

The Next Review Date field records when each risk must be reassessed, letting the risk manager schedule and track reassessment frequency directly. Other register fields, such as owner, probability or response strategy, describe the risk itself rather than when it should next be reviewed.

Why this answer

The 'Next Review Date' field in a Risk Register is specifically designed to track when a risk should be reassessed, aligning with the 'Risk Reassessment' frequency defined in the Risk Management Plan. It ensures that risks are reviewed at planned intervals, enabling timely updates to probability, impact, and response strategies. This field directly supports the Control Risks process by scheduling regular reviews.

Exam trap

PMI-RMP often tests the distinction between fields that track risk status versus those that schedule activities; candidates may confuse 'Risk Owner' with review responsibilities, but the specific field for reassessment frequency is 'Next Review Date'.

How to eliminate wrong answers

Option A is wrong because the Risk Owner is responsible for managing the risk but does not indicate when reassessment should occur. Option B is wrong because the Risk ID is a unique identifier for tracking and referencing, not for scheduling reviews. Option D is wrong because the Contingency Budget tracks funds reserved for risk responses, not the timing of reassessments.

Full explanation →
22
MCQhard

You are auditing a project and find that the Risk Management Plan was never socialized with the project team. What is the most significant risk of this situation?

A.The team will be confused about their project roles.
B.The project sponsor will be unhappy.
C.The project will be over budget immediately.
D.Risks will not be identified or reported consistently throughout the project.
AnswerD

Without socialisation, team members apply inconsistent identification and reporting criteria, so risks surface unevenly or go unreported. This directly undermines the plan's purpose of uniform risk management across the project, making inconsistent identification the most significant consequence.

Why this answer

The Risk Management Plan defines the methodology, roles, responsibilities, budget, timing, and risk categories/thresholds the project will use — so if it is never socialized, team members will apply inconsistent identification techniques, use different probability/impact scales, and report risks through ad hoc channels. This directly undermines the plan's purpose of creating a common, repeatable approach to risk. The most significant consequence is therefore inconsistent risk identification and reporting across the project lifecycle.

Exam trap

PMI-RMP often tests the distinction between the Risk Management Plan (the process/methodology document) and the Risk Register (the list of identified risks), so candidates who pick role confusion or budget impact are confusing risk management with HR or cost management.

How to eliminate wrong answers

Option A is wrong because role confusion is a resource/HR management concern addressed by the Responsibility Assignment Matrix (RACI) and staffing management plan, not the primary purpose of the Risk Management Plan. Option B is wrong because sponsor dissatisfaction is a stakeholder engagement outcome, not a direct technical consequence of failing to socialize the risk plan. Option C is wrong because going over budget 'immediately' is an exaggerated, non-deterministic claim — poor risk management may increase cost exposure over time, but it does not cause instant budget overruns.

Full explanation →
23
Multi-Selecthard

Which THREE actions are appropriate when a decision tree analysis reveals that the 'Do Nothing' option has a higher EMV than the 'Investigate' option?

Select 3 answers
A.Re-verify the impact values used for the decision branches.
B.Perform a sensitivity analysis on the key variables.
C.Delete the decision tree and start over with a new software.
D.Immediately proceed with the 'Do Nothing' strategy.
E.Review the probability estimates for bias.
AnswersA, B, E

Re-verifying impact values directly tests the probability-weighted inputs driving each branch's EMV, since a higher 'Do Nothing' result often stems from overstated investigate costs or understated risk exposure. This satisfies the stem's need to validate the analysis before accepting a counterintuitive recommendation, ensuring the comparison reflects accurate monetary and probability figures.

Why this answer

Option A is correct because the expected monetary value (EMV) of each branch is computed as the sum of probability-weighted impact values, so if 'Do Nothing' unexpectedly beats 'Investigate,' the impact figures feeding the tree should be re-verified for accuracy or omission before trusting the result. Option B is correct because sensitivity analysis (e.g., varying one probability or impact at a time, or using a tornado diagram) shows how robust the 'Do Nothing' advantage is and whether small changes in key variables would flip the decision. Option E is correct because EMV depends directly on probability estimates, and subjective or anchoring bias in those estimates can artificially inflate the 'Do Nothing' branch, so the probabilities should be reviewed for bias and recalibrated.

Option C is not appropriate because the tool or software is irrelevant to the analytical result; the issue lies in the inputs or assumptions, not the platform. Option D is not appropriate because acting immediately on a counterintuitive EMV ignores the need to validate inputs and test sensitivity first, and EMV alone does not capture risk tolerance or qualitative factors.

Exam trap

The trap is assuming the EMV result is definitive and either immediately accepting 'Do Nothing' (D) or discarding the analysis (C), whereas PMI-RMP expects a skeptical, validate-first approach to quantitative outputs.

Full explanation →
24
Multi-Selecthard

Which THREE strategies help in building a strong risk culture within a project team?

Select 3 answers
A.Assigning all risk management tasks to the project manager.
B.Hiding risks from the team to prevent stress.
C.Integrating risk discussions as a standard agenda item in all team meetings.
D.Encouraging open and honest communication about risks without fear of blame.
E.Recognizing and rewarding team members who proactively identify risks.
AnswersC, D, E

Making risk a standing agenda item institutionalises the practise, converting it from an occasional workshop into routine team behaviour. This satisfies the stem's requirement for a risk-culture strategy because repetition normalises risk dialogue, ensuring threats are reviewed continuously rather than only at phase gates.

Why this answer

Option C is correct because embedding risk discussions as a standing agenda item in every team meeting normalizes risk awareness and makes it a continuous, shared practice rather than an occasional event. Option D is correct because a blame-free environment of open and honest communication encourages early disclosure of risks, which is essential for surfacing threats before they escalate. Option E is correct because recognizing and rewarding proactive risk identification positively reinforces the desired behavior and motivates the whole team to participate in risk management.

Options A and B do not belong: centralizing all risk tasks on the project manager undermines shared ownership and team engagement, while hiding risks to prevent stress suppresses transparency and prevents timely mitigation.

Exam trap

The trap is mistaking risk centralization or risk concealment for efficiency or stress reduction, when PMI-RMP actually rewards distributed ownership and transparent communication.

Full explanation →
25
MCQeasy

Which of the following is an example of a quantitative risk analysis technique?

A.Risk Probability and Impact Matrix.
B.SWOT analysis.
C.Monte Carlo simulation.
D.Risk Data Quality Assessment.
AnswerC

Monte Carlo simulation runs repeated random sampling across probability distributions for cost and schedule variables, producing quantified outputs such as confidence levels and contingency ranges. That numerical modelling of combined risk exposure is what distinguishes quantitative analysis from qualitative techniques like probability-impact matrices or risk categorisation.

Why this answer

Monte Carlo simulation is a quantitative risk analysis technique that runs thousands of iterations, sampling probability distributions for cost and schedule variables to produce a probabilistic range of outcomes (e.g., P50, P80 completion dates). It is explicitly listed in the PMBOK Guide as a quantitative technique, unlike the other options.

Exam trap

PMI-RMP often tests the qualitative vs. quantitative boundary — candidates see 'probability and impact matrix' and assume it is quantitative because it uses numbers, but it is a qualitative prioritization tool.

How to eliminate wrong answers

Option A is wrong because the Risk Probability and Impact Matrix is a qualitative technique used to prioritize risks by assigning probability and impact ratings — it does not produce numerical distributions. Option B is wrong because SWOT analysis (Strengths, Weaknesses, Opportunities, Threats) is a strategic planning and risk identification tool, not a quantitative analysis technique. Option D is wrong because Risk Data Quality Assessment is a qualitative technique that evaluates the accuracy, reliability, and integrity of risk data — it assesses data quality, not numerical risk exposure.

Full explanation →
26
Multi-Selectmedium

Which TWO approaches are recommended when a stakeholder is hesitant to participate in risk management activities?

Select 2 answers
A.Ignoring the stakeholder and working around them.
B.Showing the stakeholder how risk management will help their area succeed.
C.Threatening to lower their performance rating if they do not participate.
D.Discussing with the stakeholder to understand their specific concerns about the process.
E.Removing the stakeholder from all future project communications.
AnswersB, D

Demonstrating how risk management benefits the stakeholder's own area addresses reluctance rooted in perceived irrelevance. Framing it around their success builds buy-in by showing tangible value, satisfying the need to engage hesitant stakeholders through relevance rather than mandate.

Why this answer

Option B is correct because framing risk management in terms of the stakeholder's own goals and success demonstrates tangible value, which is the recommended way to overcome hesitancy and build buy-in. Option D is correct because engaging the stakeholder in a two-way discussion to uncover the root cause of their concerns (e.g., fear of blame, time burden, or unclear benefit) allows the risk manager to address those specific issues and adapt the approach accordingly. Options A and E are incorrect because ignoring or excluding a stakeholder damages communication and eliminates their input, which can leave risks unidentified and unmanaged.

Option C is incorrect because coercion and threats undermine trust and collaboration, violating the constructive, transparent spirit of risk management and stakeholder engagement.

Exam trap

PMI-RMP often tests the importance of empathy and value demonstration over coercion; candidates may choose to escalate or ignore, but the exam favors understanding and alignment.

Full explanation →
27
Multi-Selecteasy

Which TWO items should you check to verify if a risk is being monitored appropriately?

Select 2 answers
A.The 'Last Updated' date in the Risk Register
B.The weather forecast at the office location
C.The number of hours the team works
D.The color of the project binder
E.The agreed-upon frequency in the Risk Management Plan
AnswersA, E

The 'Last Updated' date in the Risk Register shows when the risk was last reviewed or modified. A stale date indicates monitoring has lapsed, giving an objective, evidence-based check against the required review cadence for verifying appropriate risk monitoring.

Why this answer

Option A, the 'Last Updated' date in the Risk Register, is correct because the Risk Register is the living document where each identified risk's status, owner, and response actions are recorded, so a recent update timestamp confirms the risk is actively being tracked rather than left stale. Option E, the agreed-upon frequency in the Risk Management Plan, is correct because the Risk Management Plan defines the cadence (e.g., weekly, monthly, or at each phase gate) at which risks must be reviewed and reassessed, so comparing actual review activity against that frequency verifies monitoring is happening as scheduled. The remaining options are irrelevant to risk monitoring: the weather forecast (B) is an environmental factor, not a risk-tracking artifact; team work hours (C) measure effort, not risk review; and the color of the project binder (D) is purely cosmetic and has no bearing on risk management.

Exam trap

PMI-RMP often tests the difference between monitoring frequency and other risk register fields; candidates might focus on risk owner or status, but the key indicators of monitoring are the last update date and the planned frequency.

Full explanation →
28
MCQmedium

During a risk workshop, stakeholders identify a risk that could impact multiple departments. How should this be handled?

A.Document the risk and ensure all affected department leads are involved in response planning
B.Assign one department head as the owner
C.Ignore the risk until it impacts a specific department
D.Delegate the risk to the project sponsor
AnswerA

Involving every affected department lead in response planning satisfies the cross-departmental constraint, since a risk spanning multiple functions requires coordinated ownership rather than isolated treatment. Documenting alone is insufficient; the workshop's purpose is collaborative response development, so engaging all impacted leads ensures shared accountability and avoids gaps between departmental mitigation efforts.

Why this answer

When a risk spans multiple departments, the correct approach is to document it in the risk register and engage all affected department leads in response planning so that ownership, dependencies, and cross-functional impacts are addressed collectively. This ensures no department is blindsided and that the response is integrated rather than siloed. It also aligns with the PMBOK principle that risk ownership and response planning should involve all relevant stakeholders.

Exam trap

PMI-RMP often tests the misconception that a single department head can own a cross-functional risk — candidates underestimate the need for multi-stakeholder involvement in response planning.

How to eliminate wrong answers

Option B is wrong because assigning a single department head as owner ignores the cross-functional nature of the risk and can lead to responses that optimize one department at the expense of others. Option C is wrong because ignoring a risk until it materializes is a reactive, non-compliant approach that violates proactive risk management and can cause severe downstream impact. Option D is wrong because delegating the risk to the project sponsor abdicates the PM's responsibility — the sponsor may be informed or escalate, but the PM and affected leads must own the response planning.

Full explanation →
29
Multi-Selecthard

Which THREE types of information are most critical to include in a risk status report for a steering committee?

Select 3 answers
A.The personal opinions of the project team on the company culture.
B.The latest updates on major risk mitigation actions.
C.Changes in the risk profile since the last report.
D.A summary of the top risks and their current status.
E.The daily task list for all project team members.
AnswersB, C, D

Steering committees govern by exception, so they need the current state of mitigation actions on major risks to judge whether exposure is being controlled and where intervention is required. This satisfies the stem's emphasis on critical information for executive oversight, rather than granular register detail.

Why this answer

A steering committee needs decision-grade risk information, so option B (latest updates on major risk mitigation actions) is correct because it shows whether the agreed responses to high-priority risks are on track, stalled, or complete, which directly affects governance decisions and resource allocation. Option C (changes in the risk profile since the last report) is correct because trend information—new risks, closed risks, and shifts in probability or impact—lets the committee see whether overall exposure is increasing or decreasing rather than reviewing a static snapshot. Option D (a summary of the top risks and their current status) is correct because it gives the committee the prioritized view of the most significant threats and opportunities, including current ratings and ownership, which is the core content of a steering-level risk report.

Option A does not belong because personal opinions about company culture are subjective and not a risk metric, and option E does not belong because daily task lists are operational detail managed by the project team, not strategic information for a steering committee.

Exam trap

The trap is confusing operational detail with governance-level information, leading candidates to select team-level task or opinion items instead of strategic risk summaries.

Full explanation →
30
Multi-Selecthard

Which THREE factors are primary triggers for conducting an unscheduled 'Risk Reassessment'?

Select 3 answers
A.Completion of a major project milestone
B.Change in the administrative assistant of the team
C.A major change in project scope
D.Daily routine status meetings
E.Evidence that a current mitigation plan is failing
AnswersA, C, E

Completing a major milestone materially changes the project's risk profile, since assumptions and dependencies tied to that phase are resolved or replaced. This satisfies the unscheduled trigger criterion by introducing new information that warrants reassessing the risk register outside the regular cycle.

Why this answer

Option A is correct because completing a major project milestone is a recognized trigger for unscheduled risk reassessment: milestones often invalidate prior assumptions, expose new risks, and change the risk profile, so the risk register must be re-examined. Option C is correct because a major change in project scope alters deliverables, assumptions, constraints, and the probability/impact of existing risks, which mandates an out-of-cycle reassessment rather than waiting for the next scheduled review. Option E is correct because evidence that a current mitigation plan is failing means the risk response is no longer effective, requiring immediate reassessment to re-analyze the risk, adjust response strategies, and identify secondary or residual risks.

Option B does not belong because a change of administrative assistant is a routine staffing matter that does not materially alter project risk exposure. Option D does not belong because daily routine status meetings are a regular monitoring and communication activity, not a trigger for an unscheduled risk reassessment.

Exam trap

PMI-RMP often tests the confusion between routine monitoring activities and triggers for unscheduled reassessment, where candidates may select routine events like daily meetings instead of significant change events.

Full explanation →
31
MCQmedium

Your project is highly sensitive to regulatory changes. How should you incorporate this into your risk strategy planning?

A.Outsource all regulatory compliance tasks to a third party.
B.Establish a regulatory risk watch list and define trigger conditions.
C.Increase the reserve budget based on expert judgment.
D.Ignore the risk until a specific regulation is passed.
AnswerB

A regulatory watch list with defined trigger conditions converts ongoing regulatory uncertainty into monitored, actionable signals, embedding it into risk strategy rather than treating it as a one-off. This gives the project early warning and predefined responses to regulatory change.

Why this answer

For a project highly sensitive to regulatory changes, the risk management plan should include a structured mechanism to monitor the external regulatory environment continuously. A regulatory risk watch list with defined trigger conditions operationalizes this by identifying specific regulations, assigning owners, and specifying the thresholds or events that would activate a risk response — turning an ambiguous 'regulatory uncertainty' into a manageable, trackable risk. This aligns with PMI's emphasis on proactive risk identification and the 'Monitor Risks' process, where triggers are the early-warning signals that prompt contingency plan execution.

Exam trap

The trap is choosing a response action (increasing reserves, outsourcing) instead of a monitoring/strategy mechanism — PMI-RMP questions about 'incorporating into risk strategy planning' are asking for the planning artifact, not the execution tactic.

How to eliminate wrong answers

Option A is wrong because outsourcing compliance does not transfer regulatory accountability — the organization remains legally liable, and outsourcing removes the internal visibility needed to detect and respond to regulatory shifts. Option C is wrong because increasing the reserve budget is a response tactic, not a strategy; without identified triggers and monitoring, the reserve may be misallocated or insufficient, and it does nothing to detect the risk event. Option D is wrong because ignoring a known, high-sensitivity risk until it materializes is the definition of a reactive (and negligent) approach that violates the core principle of proactive risk management.

Full explanation →
32
MCQhard

A senior leader is pressuring you to downplay a project risk in a report. What is the most professional course of action?

A.Report the risk accurately while providing additional context and mitigation options to address the leader's concerns.
B.Comply to maintain good relations with the leader.
C.Ask the leader to write the report themselves.
D.Quietly remove the risk from the report and add it to a private list.
AnswerA

Reporting the risk accurately preserves professional integrity and the risk register's reliability, while supplying context and mitigation options addresses the leader's underlying concerns constructively. Downplaying or omitting the risk would breach PMI ethical standards and could mislead decision-makers.

Why this answer

The PMI Code of Ethics and Professional Conduct requires risk practitioners to report risk information accurately and truthfully, regardless of pressure from senior leaders. Option A upholds this by maintaining the integrity of the risk report while also addressing the leader's concerns through added context and mitigation options, which is the balanced professional response. This satisfies both the ethical obligation to be honest and the practical need to manage stakeholder relationships constructively.

Exam trap

PMI-RMP often tests the tension between organizational pressure and ethical obligations, and candidates incorrectly pick the 'keep the boss happy' option (B) or the 'escalate/deflect' option (C) instead of the option that preserves accurate reporting while constructively addressing concerns.

How to eliminate wrong answers

Option B is wrong because complying to downplay a risk violates the PMI Code of Ethics and Professional Conduct's mandatory standards for honesty and accuracy, and it exposes the project to unmanaged threats. Option C is wrong because deflecting responsibility to the leader does not fulfill the risk practitioner's duty to report risks accurately and is an abdication of professional accountability. Option D is wrong because quietly removing a risk and keeping a private list is deceptive, destroys the integrity of the risk register, and prevents the organization from responding to a known threat.

Full explanation →
33
MCQmedium

When managing risks for a global project, what is a primary consideration for stakeholder communication?

A.Only communicating with the project manager at the central office.
B.Considering cultural differences in risk perception and communication norms.
C.Standardizing all reports to a single format regardless of local requirements.
D.Ensuring all risk communication is in English only.
AnswerB

Risk perception varies across cultures: some stakeholders expect explicit escalation and formal registers, others favour relationship-based, implicit dialogue. Tailoring communication style, language and cadence to these norms sustains engagement and surfaces risks that a single global approach would miss.

Why this answer

In global projects, stakeholders span multiple countries and cultures, and risk perception is culturally shaped — what one culture treats as a tolerable schedule risk, another may view as a critical threat requiring escalation. PMI's risk management approach (per the PMBOK Guide and the PMI-RMP Exam Content Outline, particularly the Stakeholder Engagement and Communication domain) requires the risk manager to tailor risk communication to stakeholder needs, including language, hierarchy, formality, and decision-making norms. Option B correctly captures that cultural differences must be factored into how risk information is framed, delivered, and interpreted, which directly supports effective stakeholder engagement and accurate risk response planning.

Exam trap

The trap here is that candidates equate 'global project' with 'standardization and efficiency,' leading them to pick options C or D because uniform formats and a single language feel like best practices for consistency — but PMI consistently rewards tailoring and stakeholder inclusivity over one-size-fits-all approaches.

How to eliminate wrong answers

Option A is wrong because funneling all risk communication through a single central-office project manager creates a bottleneck, violates the PMBOK emphasis on direct engagement with relevant stakeholders, and ignores local risk owners who are best positioned to assess and respond to in-country risks. Option C is wrong because imposing one standardized report format regardless of local requirements contradicts the 'tailoring' principle in PMI's risk management process — different regulatory, contractual, and cultural contexts require adapted reporting (e.g., different risk thresholds, currencies, or escalation paths). Option D is wrong because mandating English-only communication excludes or disadvantages non-English-speaking stakeholders, increases the chance of misinterpretation of risk severity and probability, and undermines the inclusive, transparent communication that PMI's Code of Ethics and stakeholder engagement practices demand.

Full explanation →
34
MCQhard

You have performed a quantitative analysis and identified a risk that is significantly impacting the schedule. What is the next step to address this?

A.Ask the team to work overtime to buffer the risk
B.Update the project schedule
C.Ignore the risk as it is only a potential occurrence
D.Develop a risk response plan for this specific risk
AnswerD

Quantitative analysis has already confirmed and prioritised the schedule risk; the next step is planning a specific response, such as mitigation, transfer, or avoidance, to reduce its schedule impact. This satisfies the stem's requirement to address the identified risk directly.

Why this answer

After quantitative analysis confirms a risk significantly impacts the schedule, the next step is to develop a targeted risk response plan for that specific risk. Quantitative analysis (e.g., Monte Carlo simulation) identifies and prioritizes risks but does not itself reduce them — the response plan translates the finding into concrete actions such as schedule buffers, resource leveling, or scope adjustments. Only after the response is planned should the schedule be updated to reflect it.

Exam trap

PMI-RMP often tests process sequencing, and candidates frequently pick 'update the project schedule' because it sounds like the logical next action, missing that the response plan must be developed first to determine what schedule changes are needed.

How to eliminate wrong answers

Option A is wrong because blanket overtime is not a risk response strategy — it is an ad hoc action that ignores the structured Plan Risk Responses process and may introduce new risks like burnout. Option B is wrong because updating the project schedule is a downstream action that should occur after the response plan is defined, not before. Option C is wrong because ignoring a quantitatively significant risk contradicts the entire purpose of performing quantitative analysis.

Full explanation →
35
Multi-Selecthard

Which THREE elements should be explicitly defined in the Risk Management Plan regarding 'Risk Thresholds'?

Select 3 answers
A.The favorite hobby of the project sponsor.
B.Specific trigger values for metrics like cost or time variance.
C.The alignment between thresholds and organizational risk tolerance.
D.The font style for reports.
E.The approval process for exceeding the threshold.
AnswersB, C, E

Thresholds need concrete, measurable trigger values — for example a cost variance exceeding 10 per cent — so the team can detect when a risk response or escalation is required. This satisfies the stem's demand for explicitly defined thresholds rather than qualitative statements, making monitoring objective and repeatable.

Why this answer

Option B is correct because a Risk Management Plan must state concrete, measurable trigger values — for example, a cost variance of ±10% or a schedule variance of 5 days — so that the team can objectively detect when a risk threshold has been breached. Option C is correct because thresholds are only meaningful if they are calibrated to the organization's documented risk tolerance and appetite, ensuring that escalation and response decisions reflect the enterprise's acceptable exposure levels. Option E is correct because the plan must define who is authorized to approve actions when a threshold is exceeded, such as the sponsor or PMO, along with the required escalation and change-control steps.

Option A is incorrect because a sponsor's personal hobby is irrelevant to risk threshold definition and has no bearing on project risk management. Option D is incorrect because report font style is a formatting/presentation detail, not a substantive element of risk thresholds.

Exam trap

The trap is including obviously irrelevant distractors (hobby, font style) that are easy to eliminate, but candidates may still miss the need to include the approval process for exceeding thresholds, which is a less obvious but essential element.

Full explanation →
36
MCQhard

During a Monte Carlo simulation in @RISK, you notice the project completion date distribution is heavily skewed. Which distribution type is most appropriate for modeling task durations that have a hard 'minimum' but a long 'maximum' tail?

A.Normal distribution.
B.Beta distribution.
C.Discrete distribution.
D.Uniform distribution.
AnswerB

The Beta distribution is flexible and ideal for skewed data with fixed bounds.

Why this answer

The Beta distribution is highly flexible and can model task durations with a hard minimum and a long right tail, making it ideal for skewed project completion distributions. In @RISK, the Beta distribution is often used for expert elicitation because it can be bounded between a minimum and maximum while allowing various shapes, including right-skewed. This matches the scenario where durations cannot go below a certain value but can extend significantly beyond the most likely estimate.

Exam trap

The trap is assuming that the Normal distribution is always appropriate for task durations, ignoring its symmetry and unbounded nature, which fails to model hard minimums and long tails.

How to eliminate wrong answers

Option A is wrong because the Normal distribution is symmetric and unbounded, so it cannot enforce a hard minimum and would allow negative or unrealistically low durations, and it does not capture long right tails well. Option C is wrong because a Discrete distribution is used for categorical or integer outcomes, not for continuous task durations with a hard minimum and long tail. Option D is wrong because the Uniform distribution assumes all values between minimum and maximum are equally likely, which does not reflect the skewed nature of the described durations.

Full explanation →
37
Multi-Selecthard

Which THREE criteria are used to perform a 'Risk Data Quality Assessment'?

Select 3 answers
A.Reliability of the data
B.Accuracy of the data
C.Extent of the data's understanding
D.Total volume of data
E.Color of the spreadsheet cells
AnswersA, B, C

Reliability measures how consistently the data source produces the same result across repeated collection. It is one of the three Risk Data Quality Assessment criteria, satisfying the stem by testing whether the risk information is dependable enough to support qualitative or quantitative analysis.

Why this answer

In PMBOK's Perform Qualitative Risk Analysis process, the Risk Data Quality Assessment evaluates how usable the risk data is by examining its reliability (A) — whether the data comes from consistent, trustworthy sources — its accuracy (B) — how free the data is from bias and error — and the extent of the data's understanding (C) — how well the team comprehends the data's meaning and implications. These three criteria directly determine whether the risk information is sound enough to support qualitative rating and prioritization. The total volume of data (D) is not a quality criterion, since large amounts of poor data do not improve risk analysis, and the color of spreadsheet cells (E) is purely cosmetic formatting with no bearing on data quality.

Exam trap

PMI-RMP often tests the specific criteria of the Risk Data Quality Assessment, and candidates commonly select volume or format-related options because they sound plausible; the trap is forgetting that quality is about reliability, accuracy, and understanding, not quantity or appearance.

Full explanation →
38
MCQhard

You are reviewing a Monte Carlo simulation result. The histogram shows a bimodal distribution for the project completion date. What does this likely suggest about your model?

A.The input distributions are all Normal.
B.The simulation count is too low.
C.The project is guaranteed to finish on time.
D.The model contains a high-impact conditional branch.
AnswerD

A bimodal histogram shows two distinct completion-date peaks, which arises when a high-impact conditional branch splits outcomes into separate paths — for example, a go/no-go decision or weather window. That branch, not ordinary continuous uncertainty, produces the two humps.

Why this answer

A bimodal histogram in a Monte Carlo simulation indicates two distinct clusters of outcomes, which typically arise when the model contains a conditional branch or discrete event that switches the project between two very different paths. For example, a make-or-buy decision or a regulatory approval gate can produce one completion distribution if the condition is met and another if it is not. The two peaks represent those two scenarios.

Exam trap

PMI-RMP often tests the interpretation of simulation outputs, and candidates confuse bimodality (a structural conditional branch) with sampling noise or assume any distribution shape guarantees a schedule outcome.

How to eliminate wrong answers

Option A is wrong because if all inputs were Normal, the output would tend toward a unimodal, roughly Normal distribution due to the central limit theorem, not a bimodal one. Option B is wrong because a low simulation count produces a noisy or jagged histogram, not two distinct, separated peaks; bimodality is a structural feature of the model, not a sampling artifact. Option C is wrong because a bimodal distribution says nothing about on-time completion; it shows two possible outcome clusters, and neither guarantees the project finishes on schedule.

Full explanation →
39
MCQhard

A quantitative risk assessment reveals that a risk has a 10% probability of a $1,000,000 impact. What is the Expected Monetary Value (EMV) of this risk?

A.$10,000
B.$1,000,000
C.$100,000
D.$110,000
AnswerC

Multiplying the 10% probability by the $1,000,000 impact yields $100,000, satisfying the stem's requirement for the risk's Expected Monetary Value. EMV quantifies probability-weighted impact, so this figure correctly represents the average expected loss should the risk recur across many projects.

Why this answer

Expected Monetary Value (EMV) is calculated by multiplying the probability of the risk by its monetary impact. Here, 10% × $1,000,000 = $100,000. This value represents the average expected loss or gain from the risk and is used to prioritize risks and set contingency reserves.

Exam trap

PMI-RMP often tests basic EMV arithmetic, and candidates either forget to multiply by probability or confuse the impact with the expected value, picking the full impact instead of the weighted result.

How to eliminate wrong answers

Option A is wrong because $10,000 would result from a 1% probability, not 10%. Option B is wrong because $1,000,000 is the full impact if the risk occurs, not the probability-weighted value. Option D is wrong because $110,000 is the sum of the impact and the EMV, which is not a meaningful calculation in EMV analysis.

Full explanation →
40
Multi-Selectmedium

Which TWO strategies are effective for improving the quality of risk data provided by stakeholders?

Select 2 answers
A.Providing clear definitions and templates for reporting risks.
B.Focusing only on threats and ignoring opportunities.
C.Allowing stakeholders to use any format they prefer, including verbal descriptions.
D.Providing training sessions on how to identify and assess risks accurately.
E.Automatically rejecting any risk report that is not perfect.
AnswersA, D

Standardised definitions and templates reduce ambiguity by specifying required fields, scales and terminology, so stakeholders submit comparable, complete risk data. This directly satisfies the stem's quality constraint, since consistent structure enables reliable aggregation and analysis rather than free-form descriptions that vary between reporters.

Why this answer

Option A is correct because clear definitions and standardized templates give stakeholders a consistent structure and common vocabulary for reporting risks, which reduces ambiguity, omissions, and misinterpretation in the risk data they submit. Option D is correct because training sessions build stakeholders' competence in identifying risks and assessing them accurately (for example, applying consistent likelihood and impact criteria), directly raising the quality and reliability of the data they provide. Option B is not appropriate because risk management covers both threats and opportunities, so ignoring opportunities narrows and biases the risk data.

Option C is not appropriate because allowing arbitrary formats, including verbal descriptions, undermines consistency, comparability, and traceability of risk information. Option E is not appropriate because automatically rejecting imperfect reports is punitive and discourages reporting rather than improving data quality through feedback and guidance.

Exam trap

PMI-RMP often tests the misconception that 'more freedom equals better data' — candidates pick the permissive option (any format) instead of recognizing that standardization and training are the actual quality levers.

Full explanation →
41
Multi-Selecthard

Which THREE factors can lead to an ineffective risk facilitation workshop?

Select 3 answers
A.Poorly defined workshop objectives
B.Absence of key stakeholders
C.Too much coffee provided
D.Lack of preparation by the facilitator
E.Using a projector instead of a whiteboard
AnswersA, B, D

Poorly defined workshop objectives leave participants without a shared scope, so discussion drifts and risks are neither identified nor assessed consistently. This directly satisfies the stem's ineffective-facilitation constraint: absent clear purpose, the facilitator cannot steer the group, prioritise threats, or produce usable risk outputs.

Why this answer

Option A is correct because poorly defined workshop objectives leave participants without a clear scope, agenda, or success criteria, so the risk discussion drifts and produces no actionable risk register entries. Option B is correct because the absence of key stakeholders means the people who own the risks, controls, and decisions are not present, so identified risks cannot be validated, prioritized, or assigned owners. Option D is correct because a facilitator who has not prepared — no pre-read materials, no risk taxonomy, no tailored techniques — cannot guide the group through identification, analysis, and evaluation effectively.

Option C is not a genuine factor; coffee is a comfort/logistics detail and does not determine facilitation effectiveness. Option E is not a genuine factor either; a projector versus a whiteboard is a tooling preference, and either medium can support effective risk facilitation.

Exam trap

The trap here is including distractor options that seem plausible but are logistical or cosmetic (coffee, projector) rather than substantive factors that affect workshop effectiveness, tempting candidates to overthink minor details.

Full explanation →
42
MCQeasy

What is the primary function of a 'risk-adjusted' schedule?

A.To eliminate the need for project management.
B.To justify budget cuts to stakeholders.
C.To ensure the schedule is as short as possible.
D.To provide a realistic project finish date considering uncertainties.
AnswerD

A risk-adjusted schedule incorporates uncertainty by adding buffers derived from quantitative analysis, such as Monte Carlo simulation, to activity durations. This produces a finish date reflecting probable outcomes rather than a best-case estimate, directly satisfying the stem's requirement for realism when uncertainties are considered.

Why this answer

A risk-adjusted schedule incorporates uncertainty by adding buffers or reserves (e.g., contingency reserves) to the baseline schedule, resulting in a finish date that reflects the probability of achieving it. This provides a realistic date rather than an optimistic one. It is a key output of quantitative risk analysis, often using Monte Carlo simulation.

Exam trap

The trap is confusing 'risk-adjusted' with 'risk-avoidance' or 'schedule compression,' leading candidates to pick C (shortest possible) or A (eliminate PM), when the core idea is realism through uncertainty integration.

How to eliminate wrong answers

Option A is wrong because a risk-adjusted schedule does not eliminate the need for project management; it is a tool used by project managers to plan more realistically. Option B is wrong because justifying budget cuts is not the purpose; in fact, risk-adjusted schedules often require additional reserves, which may increase budget. Option C is wrong because making the schedule as short as possible is the opposite of risk adjustment, which adds time for uncertainty; a compressed schedule increases risk.

Full explanation →
43
MCQhard

During a project's mid-lifecycle review, you discover that the original risk management strategy is no longer effective due to a change in the market environment. What is the best course of action?

A.Continue using the current plan to maintain consistency.
B.Ask stakeholders to sign off on the original plan again.
C.Formally review and update the Risk Management Plan to reflect current realities.
D.Switch to a quantitative-only approach immediately.
AnswerC

The Risk Management Plan is a living document; when market conditions invalidate its assumptions, it must be formally reviewed and updated through change control. This restores alignment between the strategy and the current environment, satisfying the stem's constraint that the original strategy is no longer effective.

Why this answer

When the market environment changes and the original risk management strategy is no longer effective, the project manager must formally review and update the Risk Management Plan to reflect current realities. Risk management is iterative, and the plan is a living document that must be revised when assumptions, constraints, or external conditions change. This ensures responses remain relevant and resources are allocated appropriately.

Exam trap

The trap is the false comfort of 'consistency' — candidates may think sticking to the approved plan is always correct, but PMI-RMP emphasizes that risk management is iterative and plans must adapt to changing conditions.

How to eliminate wrong answers

Option A is wrong because continuing with an ineffective plan for the sake of consistency ignores the dynamic nature of risk and can lead to unmanaged exposure. Option B is wrong because re-signing the original plan does not address the changed environment; stakeholder sign-off on outdated content provides no risk management value. Option D is wrong because switching to a quantitative-only approach is an overreaction; quantitative analysis complements but does not replace qualitative analysis and the broader risk management framework, and the problem is the strategy, not the analysis method.

Full explanation →
44
MCQeasy

Which technique is most appropriate for a quick, qualitative assessment of multiple risks in a time-constrained environment?

A.Decision Tree Analysis
B.Monte Carlo Simulation
C.Expected Monetary Value (EMV)
D.Probability and Impact Matrix
AnswerD

The Probability and Impact Matrix ranks risks qualitatively by likelihood and consequence, letting many risks be assessed rapidly without quantitative modelling. This suits the time-constrained environment, whereas techniques such as Monte Carlo simulation demand far more effort per risk.

Why this answer

The Probability and Impact Matrix is most appropriate for a quick, qualitative assessment of multiple risks because it allows risks to be prioritized based on their likelihood and potential impact, without requiring quantitative data or complex simulations.

Exam trap

PMI-RMP often tests the distinction between qualitative and quantitative risk analysis. Candidates might choose quantitative techniques like Monte Carlo or EMV, but the question specifies 'quick, qualitative' and 'multiple risks'.

How to eliminate wrong answers

Option A is wrong because Decision Tree Analysis is a quantitative technique used for specific decisions, not for quick qualitative assessment of multiple risks. Option B is wrong because Monte Carlo Simulation is a quantitative technique that requires significant data and computation. Option C is wrong because Expected Monetary Value (EMV) is a quantitative technique that calculates expected value based on probabilities and impacts, not a quick qualitative assessment.

Full explanation →
45
MCQmedium

A project stakeholder is concerned about the impact of a risk response on their budget. How should the risk practitioner respond?

A.Explain that risk management is separate from the project budget.
B.Immediately remove the mitigation strategy from the project plan.
C.Dismiss the concern as the mitigation is already approved.
D.Quantify the impact of the risk versus the cost of mitigation and present the analysis to the stakeholder.
AnswerD

Quantifying risk impact against mitigation cost directly addresses the stakeholder's budget concern, giving objective data to justify whether the response is worth its expense. This satisfies the stem's requirement to resolve the stakeholder's worry through analysis rather than reassurance.

Why this answer

The correct approach is to perform a cost-benefit analysis that quantifies the expected monetary value (EMV) of the risk versus the cost of the mitigation, then present this objective analysis to the stakeholder. This addresses the budget concern with data rather than opinion, enabling informed decision-making. PMI emphasizes that risk responses should be justified by comparing the cost of the response to the expected risk exposure reduction.

Exam trap

PMI-RMP often tests whether candidates default to data-driven cost-benefit analysis rather than emotional or authority-based responses when stakeholders challenge risk response costs.

How to eliminate wrong answers

Option A is wrong because risk management is not separate from the project budget; risk response costs and contingency reserves are integral parts of the project budget and cost baseline. Option B is wrong because immediately removing the mitigation strategy without analysis is a reactive, unjustified decision that could expose the project to significant loss. Option C is wrong because dismissing the stakeholder's concern damages stakeholder engagement and ignores a legitimate budget question; approval does not eliminate the need to justify costs.

Full explanation →
46
MCQhard

You are analyzing a project schedule and realize that a 'Risk Event' is correlated with multiple tasks. How should this be handled in your risk simulation tool?

A.Manually adjust the duration of each affected task.
B.Add the risk only to the critical path.
C.Create separate risks for each task and hope they correlate.
D.Link the risk to multiple activities via impact mapping.
AnswerD

A single risk correlated with several tasks must be mapped to each affected activity so the simulation applies its probability and impact across all of them. Linking via impact mapping satisfies the stem's requirement, preventing duplicated or missed risk effects during schedule simulation.

Why this answer

The correct approach is to link the risk to multiple activities via impact mapping because a single risk event can affect several tasks simultaneously, and risk simulation tools (like @RISK, Oracle Primavera Risk Analysis, or Safran Risk) support mapping one risk to multiple activities with defined impact distributions. This preserves the correlation between tasks, ensuring the Monte Carlo simulation reflects that when the risk occurs, all affected tasks are impacted together rather than independently. Impact mapping allows you to assign probabilistic impacts (e.g., duration or cost ranges) to each linked activity, maintaining the integrity of the risk model.

Exam trap

PMI-RMP often tests the misconception that risks should be managed in isolation per task, but the key is to recognize that a single risk event can have multiple impacts and must be linked to all affected activities to preserve correlation in simulation.

How to eliminate wrong answers

Option A is wrong because manually adjusting task durations is a deterministic, static change that does not model the probabilistic nature of the risk or its correlation across tasks, and it would need to be repeated for every simulation run. Option B is wrong because limiting the risk to only the critical path ignores that the risk event affects multiple tasks, some of which may not be on the critical path but could become critical under certain conditions, and it fails to capture the full impact. Option C is wrong because creating separate risks for each task and hoping they correlate introduces artificial independence; simulation tools treat separate risks as independent events, so the correlation is lost, leading to inaccurate results (e.g., underestimating the probability of simultaneous impacts).

Full explanation →
47
MCQmedium

You are facilitating a risk workshop for a construction project. A subcontractor raises a concern that a new environmental regulation could delay permitting. The team agrees this is a risk, but they are unsure whether it should be escalated to the program level. What should you do FIRST to help the team make this decision?

A.Assign the risk to the subcontractor and ask them to develop a mitigation plan.
B.Ask the team to assess the risk's probability and impact using the project's risk matrix.
C.Immediately escalate the risk to the program manager because it involves a regulatory change.
D.Review the project charter and risk management plan to confirm the project's risk thresholds and escalation criteria.
AnswerD

The project charter and risk management plan define the project's risk thresholds, tolerances, and escalation criteria. Reviewing these documents first gives the team the objective basis for deciding whether the regulatory risk exceeds the project's authority or impact tolerance, ensuring escalation is consistent with governance rather than ad hoc.

Why this answer

Escalation decisions should be based on documented risk thresholds and escalation criteria, typically found in the project charter and risk management plan. By reviewing these first, the facilitator ensures the team uses a consistent, governance-aligned approach. This prevents both unnecessary escalation and failure to escalate risks that exceed project authority.

Exam trap

The trap here is assuming that any regulatory or external risk automatically belongs to the program level, rather than checking the project's defined escalation criteria.

Full explanation →
48
MCQmedium

When modeling 'uncertainty' using a distribution, what does the 'Mode' value represent in a Triangular distribution?

A.The average of the minimum and maximum.
B.The lowest possible duration.
C.The most likely duration estimate.
D.The absolute maximum duration.
AnswerC

The mode in a Triangular distribution marks the peak of the probability density function, representing the most probable outcome. For duration estimates, this is the most likely duration — the value with the highest likelihood of occurring, sitting between the optimistic and pessimistic bounds. This directly satisfies the stem's requirement to identify what the mode represents.

Why this answer

In a Triangular distribution, the Mode represents the most likely duration estimate. The Triangular distribution is defined by three parameters: minimum, most likely (mode), and maximum. The mode is the peak of the distribution, indicating the value that is most probable.

Exam trap

PMI-RMP often tests the confusion between the parameters of a Triangular distribution (min, mode, max) and other distributions like Beta or Normal, leading candidates to misidentify the mode.

How to eliminate wrong answers

Option A is wrong because the average of the minimum and maximum is not a parameter of the Triangular distribution; it is a simple calculation but not the mode. Option B is wrong because the lowest possible duration is the minimum, not the mode. Option D is wrong because the absolute maximum duration is the maximum, not the mode.

Full explanation →
49
MCQmedium

When running a Monte Carlo simulation, you find that the results do not change between runs. What is the most likely cause?

A.The iteration count is too high.
B.The random seed is fixed.
C.The project file is corrupted.
D.All risks have a probability of 100%.
AnswerB

A fixed random seed makes the pseudo-random number generator reproduce the identical sequence of values on every run, so the simulation yields the same output distribution each time. This directly explains the stem's constraint: results remain unchanged across runs, since no new random sampling variation is introduced.

Why this answer

If Monte Carlo simulation results do not change between runs, the most likely cause is that the random seed is fixed. A fixed seed produces the same sequence of random numbers, leading to identical results.

Exam trap

The trap is assuming that identical simulation results indicate a problem with the model or data, rather than recognizing the effect of a fixed random seed.

How to eliminate wrong answers

Option A is wrong because a high iteration count would not cause identical results; it would provide more stable but still varying results. Option C is wrong because a corrupted project file would likely cause errors or crashes, not consistent results. Option D is wrong because if all risks had 100% probability, the simulation would still vary if other uncertain variables exist, and it is an unlikely scenario.

Full explanation →
50
MCQmedium

You are fostering a risk culture in a team that historically hides risks. What is the best first step?

A.Communicate that identifying risks is a positive contribution to project success and not a sign of failure.
B.Mandate a minimum number of risk entries for every team member.
C.Implement a reward system for those who identify the most risks.
D.Threaten to remove team members who fail to report risks.
AnswerA

Communicating that risk identification is valued reframes the behaviour as a contribution rather than an admission of failure, directly addressing the psychological safety gap that causes the team to hide risks. This cultural signal must precede any process or tooling change to be effective.

Why this answer

The root cause of hiding risks is usually fear of blame, so the first step is to reframe risk identification as a positive contribution to project success rather than an admission of failure. This addresses the cultural barrier directly and aligns with PMI's emphasis on creating a safe, transparent risk culture. Only after trust is established do mandates or incentives become effective.

Exam trap

The trap here is choosing a punitive or incentive-based approach (B, C, or D) because it seems like a quick fix, but PMI-RMP consistently favors addressing the human and cultural root cause first, especially when the question mentions a behavioral problem like hiding risks.

How to eliminate wrong answers

Option B is wrong because mandating a minimum number of risk entries creates a compliance-driven, quantity-over-quality behavior that can flood the register with trivial or fabricated risks and does not address the underlying fear. Option C is wrong because rewarding the most risks identified incentivizes volume and gaming rather than honest, high-value risk reporting, and it can discourage reporting by those who find fewer but more critical risks. Option D is wrong because threatening removal is coercive and will deepen the culture of hiding risks, directly contradicting the goal of psychological safety.

Full explanation →
51
MCQmedium

Which facilitation technique involves presenting an anonymous survey to experts to reach a consensus on risk impacts?

A.Delphi Technique
B.Brainstorming
C.Root Cause Analysis
D.Interviewing
AnswerA

The Delphi Technique gathers expert judgements through successive anonymous questionnaires, with responses aggregated and fed back between rounds. Anonymity removes pressure to conform to dominant personalities, so consensus on risk impacts emerges iteratively. This matches the stem's requirement for an anonymous survey reaching expert consensus.

Why this answer

The Delphi Technique is a structured, iterative facilitation method in which a facilitator distributes anonymous questionnaires to a panel of subject-matter experts, collects their responses, summarizes them, and then re-circulates the results for further rounds of input until the group converges on a consensus. Anonymity is the defining feature — it removes the influence of seniority, dominant personalities, and groupthink, which is exactly what the question describes. In PMI-RMP risk management, Delphi is used specifically to estimate probability and impact of risks when objective data is scarce.

Exam trap

PMI-RMP often tests the distinction between anonymous, iterative consensus techniques (Delphi) and open group ideation (brainstorming) — candidates pick brainstorming because both involve experts, but only Delphi guarantees anonymity across multiple rounds.

How to eliminate wrong answers

Option B is wrong because brainstorming is a group ideation technique where participants openly and verbally generate ideas together — it is not anonymous and does not use iterative survey rounds to converge on consensus. Option C is wrong because Root Cause Analysis (e.g., fishbone, 5 Whys) is a diagnostic technique used to trace a problem back to its underlying cause, not a consensus-building survey method for rating risk impacts. Option D is wrong because interviewing is a one-on-one or small-group information-gathering technique that collects qualitative data from a single source at a time and does not involve anonymous multi-round convergence.

Full explanation →
52
MCQeasy

What is the purpose of 'Risk Reassessment' sessions held throughout the project?

A.To ensure compliance with the procurement plan
B.To identify new risks and retire old ones
C.To change the project manager
D.To increase the contingency budget
AnswerB

Risk reassessment explicitly reviews the register to surface newly emerged threats and opportunities while closing risks that are no longer relevant, satisfying the stem's requirement for ongoing sessions across the project lifecycle. This differs from one-off identification or qualitative analysis, which do not retire obsolete entries.

Why this answer

Risk Reassessment is the process of re-evaluating existing risks, closing risks that are no longer relevant, and identifying new risks that have emerged as the project progresses. Its core purpose is to keep the risk register current and accurate by retiring obsolete risks and capturing new ones, ensuring the risk response plan reflects the actual project environment. This is distinct from other monitoring activities like risk audits or variance analysis.

Exam trap

PMI-RMP often tests the boundary between Risk Reassessment and other Monitor Risks techniques (risk audits, variance analysis) — the trap is choosing an option that describes a different process or an unrelated project action.

How to eliminate wrong answers

Option A is wrong because procurement compliance is addressed through procurement audits and contract administration, not risk reassessment sessions. Option C is wrong because changing the project manager is an HR/organizational action unrelated to the risk management process. Option D is wrong because increasing the contingency budget is a possible output of risk response planning or reserve analysis, not the purpose of reassessment — reassessment may inform such a decision but is not defined by it.

Full explanation →
53
MCQhard

If a risk's 'Risk Proximity' is approaching, what does this indicate for reporting?

A.The risk should be moved to the watchlist
B.The mitigation plan failed
C.The risk requires immediate and frequent monitoring
D.The risk is no longer relevant
AnswerC

Risk proximity measures how soon a risk is expected to occur. As it approaches, the risk moves closer to materialising, so it demands immediate attention and frequent monitoring to enable timely response actions before it impacts objectives.

Why this answer

Risk proximity measures how soon a risk is expected to occur relative to the current point in the project. When proximity is approaching, the risk is moving from a future possibility into the near-term window, which means it must be actively tracked with immediate and frequent monitoring so the team can trigger the response plan before impact. This is a reporting signal that urgency has increased, not that the risk has changed category or been resolved.

Exam trap

PMI-RMP often tests the confusion between proximity (when a risk will occur) and status (whether a risk is active, closed, or on the watchlist), causing candidates to pick the watchlist option for a risk that is actually escalating in urgency.

How to eliminate wrong answers

Option A is wrong because the watchlist is for low-priority risks that are monitored passively, whereas an approaching risk demands active, frequent attention. Option B is wrong because proximity is a timing attribute of the risk itself and says nothing about whether a mitigation plan succeeded or failed. Option D is wrong because an approaching risk is becoming more relevant, not less — it is moving toward occurrence, not out of scope.

Full explanation →
54
MCQmedium

You notice that the 'Residual Risk' is higher than the 'Inherent Risk' after mitigation. What does this suggest?

A.The risk is now fully accepted
B.The mitigation was highly successful
C.The mitigation strategy may have introduced secondary risks
D.The project is complete
AnswerC

Residual risk is what remains after mitigation, so it should fall below inherent risk. A higher residual figure indicates the mitigation introduced new exposures — secondary risks — that outweigh the original threat, meaning the response increased overall risk rather than reducing it.

Why this answer

Residual risk is the risk remaining after mitigation, while inherent risk is the risk before mitigation. If residual risk is higher than inherent risk, it suggests that the mitigation strategy may have introduced secondary risks or that the mitigation was ineffective and actually increased the overall risk exposure. This is a red flag indicating the need to reassess the response strategy.

Exam trap

PMI-RMP often tests the relationship between inherent and residual risk; candidates might assume residual is always lower, but the exam may present a scenario where it is higher to test understanding of secondary risks.

How to eliminate wrong answers

Option A is wrong because full acceptance would not increase residual risk above inherent risk; acceptance means acknowledging the risk without action, so residual equals inherent. Option B is wrong because successful mitigation would reduce residual risk below inherent risk. Option D is wrong because project completion is irrelevant to the comparison of residual and inherent risk.

Full explanation →
55
MCQeasy

A project manager is facilitating a risk response planning session. The team identifies a risk that a key supplier might go bankrupt. They decide to split the order between two suppliers to reduce the impact if one fails. Which risk response strategy are they applying?

A.Transfer
B.Avoid
C.Mitigate
D.Accept
AnswerC

Mitigation reduces the probability or impact of a risk. By splitting the order between two suppliers, the team reduces the impact of a single supplier's bankruptcy. The risk still exists, but its effect is lessened. This is a classic example of mitigation through redundancy or diversification.

Why this answer

Mitigation is the risk response strategy that reduces the probability and/or impact of a threat. Splitting the order between two suppliers lowers the impact of a single supplier's failure, so it is mitigation. Avoidance would eliminate the risk, transfer would shift it, and acceptance would involve no proactive action.

Exam trap

The trap here is confusing mitigation with avoidance, because both involve taking action; however, mitigation only reduces the risk, while avoidance eliminates it entirely.

Full explanation →
56
MCQhard

You are presenting a risk report. The sponsor points out that a specific risk was closed, but the cost impact was never updated. What is the correct way to handle this during reporting?

A.Suggest the sponsor look at the Issues Log instead
B.Blame the Risk Owner for the missing data
C.Argue that cost updates are not required for closed risks
D.Update the record with actuals and apologize for the reporting gap
AnswerD

Closing a risk without recording its realised cost leaves the risk register inaccurate, so the record must be updated with actual figures before the report is finalised. Acknowledging the reporting gap maintains transparency with the sponsor and preserves data integrity.

Why this answer

When a risk is closed, the risk register must reflect the actual outcome, including any realized cost impact, so that the historical record and lessons-learned data are accurate. The correct action is to update the record with actuals and acknowledge the reporting gap, since the risk report must present current, accurate information to the sponsor. This aligns with PMI's emphasis on transparency, accuracy, and continuous improvement in risk reporting.

Exam trap

PMI-RMP often tests the misconception that once a risk is closed, no further updates are needed, when in fact closure requires recording actual outcomes and cost impacts for accuracy and lessons learned.

How to eliminate wrong answers

Option A is wrong because the Issues Log tracks problems that have already occurred, not closed risks with cost data that still needs updating. Option B is wrong because blaming the Risk Owner is unprofessional and does not fix the data gap; accountability for reporting accuracy lies with the risk manager. Option C is wrong because closed risks still require cost actuals to be recorded for historical accuracy, lessons learned, and reserve reconciliation.

Full explanation →
57
MCQeasy

What is the primary output of a sensitivity analysis in a project risk assessment?

A.A total project cost estimate.
B.A project management plan.
C.Identification of the most influential project variables.
D.A list of all possible project risks.
AnswerC

Sensitivity analysis varies one input at a time and measures the resulting swing in the model's output, so its primary output is a ranked indication of which variables most influence the outcome, satisfying the stem's request for the most influential project variables.

Why this answer

Sensitivity analysis, often performed using tornado diagrams, determines which individual project variables (e.g., cost, duration, or risk factors) have the greatest impact on project objectives. Its primary output is the identification of the most influential variables, allowing the risk manager to focus attention and response planning on those drivers. This is a core quantitative risk analysis technique in PMI-RMP.

Exam trap

The trap is confusing sensitivity analysis with other risk processes, such as risk identification or cost estimation, causing candidates to select outputs that belong to different PMI processes.

How to eliminate wrong answers

Option A is wrong because a total project cost estimate is an output of cost estimation or budgeting processes, not sensitivity analysis; sensitivity analysis may use cost variables but does not produce a single cost estimate. Option B is wrong because the project management plan is a comprehensive document developed in the Planning process group, not an output of sensitivity analysis. Option D is wrong because a list of all possible project risks is an output of risk identification (e.g., from brainstorming or checklists), not sensitivity analysis, which analyzes already-identified risks or variables.

Full explanation →
58
MCQeasy

Which of the following is a 'tool and technique' used during the Plan Risk Management process?

A.The Risk Register
B.The Project Scope Statement
C.Expert Judgment
D.The Project Team
AnswerC

Expert judgment draws on specialists' experience to tailor how risk management is planned, including methodology, roles, budgeting and timing. It is a recognised tool and technique of Plan Risk Management, alongside meetings and data analysis.

Why this answer

Expert Judgment is explicitly listed as a tool and technique in the Plan Risk Management process per the PMBOK Guide. During this process, experts with experience in similar projects or risk management provide input on how to tailor the risk management approach, including methodologies, roles, responsibilities, and budget. This makes it a core technique for developing the risk management plan.

Exam trap

PMI-RMP often tests the distinction between inputs, tools and techniques, and outputs (ITTO) of each process, and candidates frequently confuse outputs like the Risk Register with tools and techniques.

How to eliminate wrong answers

Option A is wrong because the Risk Register is an output of the Identify Risks process, not a tool and technique used during Plan Risk Management. Option B is wrong because the Project Scope Statement is an input to Plan Risk Management, not a tool and technique. Option D is wrong because the Project Team is a resource or participant, not a formal tool and technique; while team members may contribute, the PMBOK Guide does not list 'Project Team' as a tool and technique for this process.

Full explanation →
59
MCQmedium

You are auditing a project's risk management methodology. You notice that risk identification happens only at the start of the project. What should you recommend to align with standard PMI-RMP best practices?

A.Request additional funding for a dedicated risk consultant.
B.Create a separate document for residual risks only.
C.Integrate risk identification into each project stage gate or iteration review.
D.Use a quantitative risk analysis tool to automate identification.
AnswerC

Risk identification is iterative, not a one-off activity. Embedding it in stage gates and iteration reviews surfaces new threats as scope, assumptions and external conditions change, satisfying PMI-RMP's requirement for continuous risk identification throughout the project life cycle.

Why this answer

PMI-RMP best practice treats risk identification as an iterative, ongoing process conducted throughout the project lifecycle, not a one-time activity. Integrating identification into stage gates or iteration reviews ensures new risks emerging from changing conditions are captured and existing risks are re-evaluated. This aligns with the 'Identify Risks' process being repeated in every phase and with progressive elaboration.

Exam trap

The trap is confusing risk identification with a one-time planning activity, leading candidates to pick tooling or documentation options instead of the iterative process fix.

How to eliminate wrong answers

Option A is wrong because hiring a dedicated risk consultant does not fix the process gap of one-time identification; it addresses resourcing, not methodology. Option B is wrong because creating a separate residual risk document is a documentation artifact, not a corrective action for continuous identification, and residual risks are already tracked in the risk register. Option D is wrong because quantitative analysis tools automate analysis, not identification; identification relies on techniques like brainstorming, Delphi, interviews, and checklists, and automation cannot replace iterative human identification.

Full explanation →
60
Multi-Selectmedium

Which TWO of the following are essential components of a formal 'Risk Report' provided to project stakeholders?

Select 2 answers
A.Personal performance reviews of risk owners
B.Full list of all individual risk task assignments
C.Summary of top risks by impact
D.Trend of aggregate risk exposure
E.Detailed log of every risk register edit
AnswersC, D

Ranking top risks by impact gives stakeholders the prioritised view needed to allocate contingency reserves and attention. It satisfies the report's purpose of communicating which exposures most threaten project objectives, enabling informed escalation and response decisions rather than exhaustive risk listing.

Why this answer

Option C is correct because a formal Risk Report must give stakeholders a concise, prioritized view of the most significant threats, typically summarizing the top risks ranked by impact (and often probability) so decision-makers can focus on what matters most. Option D is correct because the report should also communicate how the overall risk exposure is changing over time, i.e., the trend of aggregate risk exposure, which shows whether the project's risk profile is improving or worsening across reporting periods. Options A and B are incorrect because personal performance reviews of risk owners and full lists of individual risk task assignments are operational/HR-level details, not stakeholder-facing risk reporting content.

Option E is incorrect because a detailed log of every risk register edit is raw audit-level data; the Risk Report summarizes and interprets risk information rather than reproducing every register change.

Exam trap

PMI-RMP often tests the distinction between the Risk Register (detailed, operational) and the Risk Report (summarized, stakeholder-facing), so the trap is selecting detailed register-level items as report components.

Full explanation →
61
MCQhard

You are facilitating a risk analysis session for a project with high technical uncertainty. Quantitative analysis results show a wide range of variance. What is the most appropriate action to improve the accuracy of the risk model?

A.Increase the number of iterations in the Monte Carlo simulation
B.Incorporate sensitivity analysis (Tornado Diagram) to refine input assumptions
C.Remove the extreme outliers from the risk dataset
D.Change the probability distribution type from Normal to Triangular
AnswerB

Sensitivity analysis via a Tornado Diagram isolates which input variables drive the widest variance in the quantitative model, letting the team refine those specific assumptions first. This directly addresses the stem's high technical uncertainty by targeting the inputs contributing most to output spread, improving model accuracy efficiently.

Why this answer

When quantitative analysis shows wide variance, the root cause is usually uncertainty in input assumptions rather than insufficient simulation iterations. Sensitivity analysis (Tornado Diagram) identifies which input variables contribute most to output variance, allowing the team to refine those specific assumptions and improve model accuracy. This is the most appropriate action because it targets the source of the variance.

Exam trap

PMI-RMP often tests the misconception that more simulation iterations or different distributions fix wide variance — the real fix is improving input assumptions via sensitivity analysis, not tweaking the simulation mechanics.

How to eliminate wrong answers

Option A is wrong because increasing Monte Carlo iterations improves the precision of the simulation's statistical estimate but does not reduce variance caused by uncertain or poorly estimated inputs — it just gives a more stable estimate of the same wide range. Option C is wrong because removing outliers distorts the model and hides legitimate extreme risks, which is analytically dishonest and dangerous in risk management. Option D is wrong because changing the distribution type from Normal to Triangular does not inherently improve accuracy — the distribution should reflect the actual data-generating process, not be swapped arbitrarily to narrow results.

Full explanation →
62
MCQeasy

Which component of the risk management plan details the frequency and level of detail for risk reports?

A.Risk Breakdown Structure
B.Risk Response Matrix
C.Probability and Impact Matrix
D.Risk Reporting Requirements
AnswerD

Risk Reporting Requirements specify the format, cadence and level of detail for risk reports, plus their audience and purpose. This component directly governs how often and how thoroughly risk information is communicated, matching the question's constraint.

Why this answer

The Risk Reporting Requirements section of the risk management plan defines the format, frequency, audience, and level of detail for risk reports — exactly what the question asks. It specifies who receives which reports (e.g., weekly risk dashboard for the PMO, monthly summary for the steering committee) and the granularity of data (e.g., top-10 risks vs. full register). This is a planning artifact that ensures stakeholders get timely, decision-useful risk information without over- or under-reporting.

Exam trap

The trap is selecting a risk *analysis* tool (RBS, P-I Matrix, Response Matrix) when the question asks about a *reporting* specification — candidates must distinguish between tools that categorize/prioritize risks and the plan component that defines how risks are communicated.

How to eliminate wrong answers

Option A is wrong because the Risk Breakdown Structure (RBS) is a hierarchical categorization of risk sources (technical, external, organizational, PM) used to structure risk identification — it does not address reporting cadence or detail. Option B is wrong because a Risk Response Matrix maps risks to response strategies (avoid, transfer, mitigate, accept) and owners; it is a response-planning tool, not a reporting specification. Option C is wrong because the Probability and Impact Matrix is a qualitative prioritization grid that classifies risks into high/medium/low zones — it informs which risks to report on, but does not define the reporting requirements themselves.

Full explanation →
63
Multi-Selectmedium

Which TWO factors contribute to a project's risk appetite?

Select 2 answers
A.The color of the project status report.
B.The number of pages in the risk register.
C.The software tool selected for the project.
D.Organizational culture and management style.
E.The strategic objectives and the value at stake.
AnswersD, E

Organisational culture and management style directly shape how much uncertainty senior leaders tolerate, which sets the project's risk appetite. A culture that rewards caution and a directive management style both lower the appetite, satisfying the stem's requirement for contributing factors rather than generic risk responses.

Why this answer

Option D is correct because an organization's culture and management style directly shape how much uncertainty stakeholders are willing to accept, since risk tolerance is set by leadership attitudes, governance norms, and decision-making behavior rather than by project artifacts. Option E is correct because risk appetite is fundamentally driven by strategic objectives and the value at stake: when a project supports high-value strategic goals, the organization may accept more risk to capture the reward, while low-value or compliance-critical efforts usually demand a more conservative posture. The unmarked options do not belong because A, the color of the project status report, is merely a reporting indicator and does not determine risk appetite; B, the number of pages in the risk register, reflects documentation volume, not the organization's willingness to take risk; and C, the software tool selected for the project, is a tactical delivery choice that has no bearing on the enterprise's risk tolerance.

Exam trap

The trap is selecting options that sound like project management artifacts (risk register, status report, tools) rather than the governance and strategic drivers — PMI-RMP tests whether you understand that risk appetite is a leadership/strategy concept, not a documentation concept.

Full explanation →
64
Multi-Selectmedium

Which TWO of the following are potential causes of a 'non-converging' Monte Carlo simulation?

Select 2 answers
A.Circular logic dependencies in the project schedule.
B.The use of a GUI-based interface.
C.Assigning too many resources to a task.
D.Using a modern, high-speed processor.
E.Insufficient number of iterations for the model's complexity.
AnswersA, E

Circular logic dependencies create feedback loops in the schedule network, so Monte Carlo sampling cannot resolve a stable completion date and the simulation fails to converge. This satisfies the stem's requirement for a potential cause of non-convergence.

Why this answer

Option A is correct because circular logic dependencies create feedback loops in the schedule network, so the Monte Carlo engine cannot resolve a valid critical path or finish date and the simulation fails to converge. Option E is correct because Monte Carlo convergence depends on running enough iterations relative to the model's complexity; too few iterations leave the output statistics (mean, standard deviation, percentiles) unstable and non-converged. Option B is incorrect because a GUI-based interface is merely a presentation layer and has no effect on the mathematical convergence of the simulation.

Option C is incorrect because assigning many resources to a task affects duration or cost estimates but does not inherently prevent the simulation from converging. Option D is incorrect because a faster processor only reduces runtime; it does not change the model's logic or the number of iterations needed for convergence.

Exam trap

PMI-RMP often tests whether candidates confuse computational performance factors (CPU speed, GUI) with the actual mathematical causes of non-convergence — the trap is picking plausible-sounding technical options that have no bearing on simulation stability.

Full explanation →
65
MCQmedium

A project team is conducting a risk planning workshop. A team member suggests that all risks identified should be mitigated. What is the most appropriate response from the project manager?

A.Transfer all identified risks to a third-party vendor.
B.Ignore the comment and document only the risks the manager likes.
C.Explain that risk responses are selected based on the cost-benefit analysis and risk appetite.
D.Agree with the team member to ensure project safety.
AnswerC

Not every risk warrants mitigation; responses are chosen through cost-benefit analysis against the organisation's risk appetite, so some risks are accepted, transferred or avoided. Blanket mitigation wastes resources and is not the project manager's appropriate guidance.

Why this answer

Risk responses are not automatically applied to every risk; they are selected through cost-benefit analysis and must align with the organization's risk appetite and tolerance. Some risks may be accepted, some avoided, some transferred, and some mitigated — the choice depends on whether the response's cost is justified by the reduction in exposure. The project manager should explain this decision framework rather than agree to mitigate everything.

Exam trap

The trap is the absolutist framing 'all risks should be mitigated,' which sounds safe but violates the principle that response selection is driven by cost-benefit analysis and risk appetite, not by blanket mitigation.

How to eliminate wrong answers

Option A is wrong because transferring all risks to a third party is neither feasible nor cost-effective; transfer typically applies to specific insurable or contractual risks and usually comes with a premium that must be justified. Option B is wrong because ignoring team input and selectively documenting risks violates the inclusive, documented approach required by the Identify Risks process and undermines stakeholder engagement. Option D is wrong because agreeing to mitigate all risks blindly ignores cost-benefit analysis and risk appetite, potentially wasting budget on low-priority risks while underfunding high-priority ones.

Full explanation →
66
MCQhard

In a project, you are facilitating a risk workshop. You discover that a risk has been mitigated, but the residual risk remains high. What is the next logical step?

A.Document the residual risk in the risk register
B.Assign a new risk owner
C.Remove the risk from the risk register
D.Close the risk
AnswerA

Documenting the residual risk in the risk register preserves the audit trail and keeps the mitigated risk's remaining exposure visible for ongoing monitoring. Since the stem states residual risk stays high, the register entry satisfies the PMI-RMP requirement to track it, enabling further response planning rather than closure.

Why this answer

After mitigating a risk, if the residual risk remains high, the next logical step is to document the residual risk in the risk register. This ensures that the remaining risk is formally tracked and monitored, and it may require further response planning. The risk register is the central repository for all risk-related information, including residual risks.

Exam trap

PMI-RMP often tests the appropriate action after mitigation; candidates might think the risk should be closed or removed, but the exam emphasizes that residual risks must be documented and monitored, especially if high.

How to eliminate wrong answers

Option B is wrong because assigning a new risk owner is not the immediate next step; the risk already has an owner, and the issue is the high residual risk, not ownership. Option C is wrong because removing the risk from the register would be inappropriate since the risk still exists with high residual. Option D is wrong because closing the risk is premature; the risk is not fully managed if residual risk is high.

Full explanation →
67
MCQeasy

A project manager is reviewing the results of a sensitivity analysis performed using a tornado diagram. The diagram shows that the 'Supplier Delivery Delay' risk has the longest bar. What does this indicate about this risk?

A.It has the highest probability of occurrence among all identified risks.
B.It has the greatest impact on the project's overall risk exposure.
C.It has the lowest priority for risk response planning.
D.It is the most expensive risk to mitigate.
AnswerB

In a tornado diagram, the length of each bar represents the magnitude of impact that a risk or uncertain variable has on the project outcome when varied across its range. The longest bar indicates the variable with the most significant influence. Therefore, 'Supplier Delivery Delay' is the most critical risk to address, as changes in its value cause the largest swings in project cost or schedule.

Why this answer

The tornado diagram is a sensitivity analysis tool that ranks risks by their impact on project objectives. The longest bar represents the risk with the greatest influence on the output, meaning that variations in that risk cause the largest changes in project cost or schedule. Therefore, 'Supplier Delivery Delay' is the most impactful risk and should be a top priority for mitigation.

The other options misinterpret the diagram by confusing sensitivity with probability, mitigation cost, or priority.

Exam trap

The trap here is equating the longest bar in a tornado diagram with the highest probability or mitigation cost, when it actually represents the magnitude of impact on the project outcome.

Full explanation →
68
Multi-Selectmedium

Which TWO of the following are prerequisites for conducting a valid Monte Carlo simulation in a project schedule?

Select 2 answers
A.Probability distributions for task durations.
B.Hardware specifications for the simulation server.
C.A finalized project charter.
D.A complete and logically linked network diagram.
E.A list of all project stakeholders.
AnswersA, D

Simulation samples durations repeatedly, so each task needs a defined probability distribution rather than a single deterministic estimate. Supplying distributions for task durations is what enables the random sampling that produces the probabilistic schedule output the stem requires.

Why this answer

Option A is correct because Monte Carlo schedule simulation works by repeatedly sampling task durations from probability distributions (for example, triangular, PERT-beta, or normal distributions) rather than using single deterministic estimates, so without defined distributions for task durations there is nothing to sample and the simulation cannot produce a meaningful probabilistic result. Option D is correct because the simulation must traverse the schedule's dependency logic to compute the critical path and total project duration for each iteration, which requires a complete and logically linked network diagram (predecessor/successor relationships, including any leads/lags). Options B, C, and E are not prerequisites for the simulation itself: server hardware specifications affect performance, not validity; a finalized project charter is a governance document, not a scheduling input; and a stakeholder list is irrelevant to the mathematical sampling and network calculations the simulation performs.

Exam trap

PMI-RMP often tests whether candidates confuse administrative or governance documents (charter, stakeholder list) with the technical modeling inputs (distributions, network logic) that are genuinely required for a valid quantitative simulation.

Full explanation →
69
MCQeasy

During a project kickoff meeting, a senior stakeholder states they are 'very risk-averse' regarding project timelines but 'open to innovation' regarding technical solutions. How should the risk management plan reflect this?

A.Escalate all technical risks to the project sponsor immediately.
B.Ignore the stakeholder's comment as it is subjective.
C.Create separate risk tolerance thresholds for schedule-related risks and technical risks.
D.Set a single, conservative risk tolerance threshold for all risk categories.
AnswerC

Risk tolerance thresholds are set per objective, so the stakeholder's low appetite for schedule slippage and high openness to technical experimentation require distinct thresholds. Separate schedule and technical tolerances satisfy both attitudes, letting responses to each risk category match the stated appetite.

Why this answer

The stakeholder has expressed two distinct risk attitudes: low tolerance for schedule risk and high tolerance for technical risk. PMI-RMP best practice recognizes that risk tolerance is not monolithic — it varies by risk category, stakeholder, and objective. Creating separate thresholds for schedule and technical risks accurately captures this differentiated appetite and allows appropriate response strategies for each category.

Exam trap

The trap here is assuming risk tolerance is a single universal value, causing candidates to pick the 'one conservative threshold' option instead of recognizing that PMI-RMP requires category-specific thresholds.

How to eliminate wrong answers

Option A is wrong because escalating all technical risks to the sponsor is an overreaction that ignores the stakeholder's stated openness to innovation and bypasses the normal risk response planning process. Option B is wrong because stakeholder risk attitudes are a legitimate and required input to risk management planning under PMI-RMP; dismissing them as subjective ignores a key input to the Risk Management Plan. Option D is wrong because a single conservative threshold for all categories would over-constrain technical risks that the stakeholder explicitly welcomes, misaligning the plan with actual stakeholder tolerance.

Full explanation →
70
MCQeasy

In the context of risk-adjusted cost analysis, what is the primary purpose of adding a 'Risk Contingency' reserve to the project budget?

A.To cover identified risks that have been quantified.
B.To cover scope creep requested by the client.
C.To account for inflation over the project lifecycle.
D.To replace the management reserve.
AnswerA

A risk contingency reserve is budget allocated for identified risks whose probability and impact have been quantified, typically via expected monetary value. It covers those known risks should they materialise, distinct from management reserve for unknown risks.

Why this answer

A risk contingency reserve is added to the project budget to cover identified risks that have been quantified through risk analysis. It is calculated based on the expected monetary value or simulation results of known risks and is controlled by the project manager. It is distinct from the management reserve, which covers unknown-unknowns.

Exam trap

PMI-RMP often tests the distinction between contingency reserve (known risks, PM-controlled) and management reserve (unknown risks, senior-management-controlled), so candidates who conflate them or assign scope creep/inflation to contingency pick the wrong answer.

How to eliminate wrong answers

Option B is wrong because scope creep is an uncontrolled change, not a quantified risk; it should be handled through change control, not contingency reserve. Option C is wrong because inflation is typically addressed through escalation clauses, economic price adjustment, or a separate allowance, not the risk contingency reserve, unless inflation is explicitly modeled as a quantified risk. Option D is wrong because the contingency reserve does not replace the management reserve; the two are separate budget components — contingency for known risks and management reserve for unknown risks.

Full explanation →
71
Multi-Selecthard

Which THREE of the following are common pitfalls when performing an Expected Monetary Value (EMV) analysis?

Select 3 answers
A.Failing to account for the impact of the risks on subsequent tasks.
B.Using overly optimistic probability estimates.
C.Ignoring the correlation between different risk events.
D.Performing the analysis before the project starts.
E.Using a currency that is too stable.
AnswersA, B, C

EMV typically values each risk in isolation, ignoring knock-on effects on downstream tasks such as schedule delays or rework. This omission understates true impact, because a risk's real cost includes its propagated consequences across dependent activities, not just its direct effect.

Why this answer

Option A is correct because EMV analysis often evaluates each risk in isolation, and failing to account for how a realized risk cascades into or delays subsequent tasks understates the true expected monetary impact. Option B is correct because optimistic probability estimates bias the EMV calculation, since EMV = probability × impact, so inflated or deflated likelihoods directly distort the expected value and lead to poor contingency reserves. Option C is correct because ignoring correlation between risk events treats them as independent, which misestimates the aggregate EMV when risks are positively or negatively correlated and can significantly understate or overstate total exposure.

Option D is not a pitfall because performing EMV analysis early, including before or during project initiation and planning, is normal and useful for budgeting and contingency planning. Option E is not a pitfall because using a stable currency improves comparability and reduces exchange-rate distortion in EMV calculations rather than harming them.

Exam trap

PMI-RMP often tests whether candidates can distinguish genuine analytical pitfalls from neutral or beneficial practices; options like 'performing analysis before the project starts' or 'using a stable currency' sound plausible but are actually good practices, not pitfalls.

Full explanation →
72
MCQmedium

You are configuring a risk dashboard in a PMIS. Stakeholders need to see the 'Risk Burn-down' trend. Which data point must be tracked consistently to enable this report?

A.Aggregate risk exposure value
B.Owner assignment frequency
C.Total number of risks identified
D.Number of risk responses completed
AnswerA

A risk burn-down chart plots remaining aggregate risk exposure over time, so the exposure value must be calculated and recorded consistently at each reporting interval. Tracking this single data point satisfies the stakeholder requirement to display the trend of diminishing overall risk exposure.

Why this answer

The Risk Burn-down trend tracks the aggregate risk exposure value over time, showing how the total risk exposure decreases as risks are mitigated or closed. This requires consistent tracking of the aggregate exposure value, typically calculated as the sum of probability times impact for all open risks. Without this data point, the burn-down chart cannot be generated.

Exam trap

PMI-RMP often tests the difference between counting risks and measuring risk exposure; candidates might think the number of risks or responses completed is sufficient, but the burn-down specifically requires the aggregate exposure value to show the trend of risk reduction.

How to eliminate wrong answers

Option B is wrong because owner assignment frequency does not reflect risk exposure reduction; it is an administrative metric. Option C is wrong because the total number of risks identified does not account for the severity or exposure of those risks; a project could have many low-impact risks. Option D is wrong because the number of risk responses completed indicates progress but does not directly measure the remaining risk exposure, as responses may not fully eliminate risks.

Full explanation →
73
Multi-Selecthard

Which THREE factors should you consider when choosing the distribution type for a specific project task during risk analysis?

Select 3 answers
A.The project manager's preference for a specific tool.
B.The defined logical bounds (minimum, maximum, mode).
C.The level of uncertainty or risk inherent in the task.
D.Whether the task is on the critical path.
E.The historical performance data for similar tasks.
AnswersB, C, E

Logical bounds — minimum, maximum and most likely (mode) values — define the range and shape of the distribution, so they must be established before selecting a type. Without these parameters, the distribution cannot be modelled or simulated meaningfully in the risk analysis.

Why this answer

Option B is correct because the distribution type must match the logical bounds a task can take — for example, a triangular or beta (PERT) distribution requires minimum, most likely (mode), and maximum values, while a uniform distribution assumes only a min and max with equal likelihood. Option C is correct because the degree of uncertainty or risk drives the choice: high-uncertainty tasks often warrant wider-tailed or skewed distributions, whereas low-risk, well-understood tasks may use a normal or uniform distribution. Option E is correct because historical performance data for similar tasks provides the empirical basis for selecting a distribution and calibrating its parameters, such as mean and standard deviation, so the model reflects actual past behavior.

Option A does not belong because a project manager's tool preference is subjective and unrelated to the statistical properties of the task. Option D does not belong because being on the critical path affects scheduling priority and float, not the selection of a probability distribution for risk analysis.

Exam trap

PMI-RMP often tests whether candidates can separate statistical/modeling criteria (bounds, uncertainty, historical data) from irrelevant factors (tool preference, critical path status), so distractors that sound project-relevant but are not distribution-selection criteria are the trap.

Full explanation →
74
Multi-Selectmedium

Which TWO actions should a practitioner take to maintain high levels of stakeholder engagement in risk management?

Select 2 answers
A.Keep all risk discussions confidential to prevent panic.
B.Limit risk communication to once per project phase.
C.Involve key stakeholders in the risk identification and response planning processes.
D.Share regular, concise, and relevant risk reports.
E.Exclude non-technical stakeholders from risk workshops.
AnswersC, D

Direct participation gives stakeholders ownership of identified risks and agreed responses, sustaining their commitment throughout the risk process rather than passive reporting. This satisfies the stem's requirement to maintain high engagement by embedding them in identification and response planning, the two activities where their input most shapes outcomes.

Why this answer

Option C is correct because actively involving key stakeholders in risk identification and response planning builds ownership, leverages their expertise, and increases their commitment to the risk management process. Option D is correct because sharing regular, concise, and relevant risk reports keeps stakeholders informed, maintains transparency, and sustains ongoing dialogue and trust. Option A is incorrect because excessive confidentiality reduces transparency and can erode stakeholder trust rather than maintain engagement.

Option B is incorrect because limiting risk communication to once per project phase is too infrequent to keep stakeholders actively engaged. Option E is incorrect because excluding non-technical stakeholders from risk workshops removes valuable perspectives and disengages a key stakeholder group.

Exam trap

PMI-RMP often tests the misconception that 'protecting' stakeholders from risk information (confidentiality, infrequent updates) is good practice, when the exam expects inclusive participation and regular transparent reporting.

Full explanation →
75
MCQmedium

You are tasked with defining the 'Risk Breakdown Structure' (RBS). What is the primary purpose of this tool?

A.To list the names of all team members.
B.To calculate the final project budget.
C.To report progress to the project board.
D.To structure the identification of risks in a logical and comprehensive way.
AnswerD

An RBS provides a hierarchical, category-based framework that organises risk identification across sources such as technical, external, organisational and project management, ensuring no category is overlooked. This structured decomposition satisfies the stem's requirement for a logical, comprehensive identification approach rather than ad hoc brainstorming.

Why this answer

The Risk Breakdown Structure (RBS) is a hierarchical representation of potential risk sources, organized by category and subcategory, used to structure risk identification systematically. Its primary purpose is to ensure comprehensive risk identification by providing a framework that prompts the team to consider risks across all relevant areas. This reduces the chance of overlooking categories of risk and supports consistent categorization in the risk register.

Exam trap

The trap is confusing the RBS with the WBS or with a risk register; PMI-RMP expects candidates to know the RBS is specifically a categorization tool for structuring risk identification.

How to eliminate wrong answers

Option A is wrong because listing team members is a resource management function, not the purpose of the RBS. Option B is wrong because calculating the project budget is a cost management activity; the RBS does not perform calculations. Option C is wrong because reporting progress to the project board is a performance reporting function, unrelated to the RBS's role in risk identification.

Full explanation →

Page 1 of 3

Page 2

All pages

123

Practice PMI-RMP by domain

Target a specific domain to shore up weak areas.

Risk Strategy And PlanningStakeholder EngagementRisk Monitoring And ReportingRisk Process FacilitationSpecialized Risk Analyses
See all domains with question counts →