PMI Risk Management Professional (PMI-RMP) (PMI-RMP) PMI-RMP Questions 1–75 | Page 1/3

MCQhard

A stakeholder suggests a risk response that is significantly outside of the project's risk appetite. How should you handle this?

A.Implement the proposal but document that it was the stakeholder's decision.

B.Accept the proposal because the stakeholder has budget authority.

C.Facilitate a meeting to discuss the risk, the stakeholder's proposal, and the organization's risk appetite.

D.Reject the proposal immediately and tell the stakeholder they are wrong.

AnswerC

Open communication ensures that the stakeholder understands the constraints.

Why this answer

Facilitating a discussion on risk appetite ensures that the final response is aligned with organizational limits.

Full explanation →

MCQhard

Your organization uses a 'Risk Management Information System' (RMIS). During planning, you are configuring the system to track risk data. Which parameter is critical to define to ensure meaningful risk reporting?

A.Standardized probability and impact scoring scales.

B.The exact date of the project's completion.

C.The project manager's salary.

D.A list of all possible project vendors.

AnswerA

Standardized scales are required to provide aggregate risk data and trends.

Why this answer

Without defined scoring criteria, the data in the system will be inconsistent and unreliable.

Full explanation →

MCQeasy

Which document is the primary output of the risk identification process?

A.Risk Register

B.Lessons Learned Register

C.Risk Management Plan

D.Risk Report

AnswerA

The risk register is updated throughout the project with information from risk identification.

Why this answer

The risk register is the central document where identified risks are recorded.

Full explanation →

Multi-Selectmedium

Which TWO of the following are benefits of conducting regular risk workshops?

Select 2 answers

A.Assigning project tasks to team members

B.Automating the project budget

C.Improving stakeholder buy-in and awareness

D.Ensuring the risk register remains current and accurate

E.Replacing the project management plan

AnswersC, D

Workshops engage stakeholders in the process.

Why this answer

Regular workshops keep risk awareness high and ensure the register stays relevant.

Full explanation →

MCQmedium

Which report type is best suited for providing senior management with a high-level view of current risk status versus the risk appetite threshold?

A.Individual Risk Response Plan

B.Project Schedule Variance Report

C.Risk Heat Map

D.Risk Register Detail Report

AnswerC

Heat maps visualize risk concentration relative to appetite thresholds.

Why this answer

A heat map is a standard tool for showing risk severity against risk appetite.

Full explanation →

MCQhard

The project has a significant risk with a high probability of occurring. The stakeholder responsible for the risk response is unavailable due to personal leave. What should you do?

A.Pause all activities related to the risk until the stakeholder returns.

B.Identify a deputy or delegate with the authority to execute the agreed-upon risk response.

C.Take over the responsibility and execute the response yourself.

D.Update the risk register to state the risk is unmitigated until the stakeholder returns.

AnswerB

Delegation ensures that the risk response plan is executed as scheduled.

Why this answer

Maintaining continuity in risk management is essential; the PM must ensure the response is executed.

Full explanation →

MCQeasy

What is the purpose of a risk owner in a project?

A.To pay for any damages caused by the risk.

B.To perform all tasks related to the risk.

C.To blame if the risk event occurs.

D.To provide regular updates on the status and mitigation progress of the assigned risk.

AnswerD

Ownership ensures continuity in monitoring and execution.

Why this answer

Assigning ownership ensures that someone is responsible for monitoring and managing each risk.

Full explanation →

MCQmedium

You are conducting sensitivity analysis using a scatter plot in a simulation tool. What does a tight clustering of data points along a diagonal line suggest?

A.The variable is independent of the outcome.

B.Low sensitivity.

C.High sensitivity.

D.The simulation failed to converge.

AnswerC

Strong correlation indicates the variable has a significant influence on the outcome.

Why this answer

A tight clustering along a line indicates a high linear correlation between the input variable (e.g., activity duration) and the output (e.g., project finish date).

Full explanation →

MCQmedium

During project execution, you find that the 'Risk Response Owner' is not reporting updates. How should this be addressed within the project governance framework?

A.Update the risk yourself and hide the lack of participation

B.Escalate the accountability issue to the project sponsor

C.Assign a new owner without informing the original owner

D.Remove the risk from the register

AnswerB

Governance issues require management intervention to restore accountability.

Why this answer

Escalation to the project sponsor or steering committee is the standard way to resolve accountability issues.

Full explanation →

Multi-Selectmedium

Which THREE steps are essential for a project manager when planning for 'Stakeholder Risk Attitudes'?

Select 3 answers

A.Identify key stakeholders and their attitudes.

B.Ignore the stakeholder's feelings.

C.Adjust risk response strategies based on identified attitudes.

D.Change the project objectives to match the sponsor's personality.

E.Document the risk attitude in the Stakeholder Register.

AnswersA, C, E

Identification is the first step.

Why this answer

Planning for attitudes involves identifying, documenting, and adjusting strategies to align with those attitudes.

Full explanation →

MCQeasy

A risk audit has just been completed. What is the most critical activity to perform with the findings?

A.Update the risk management plan and register

B.Discard the report to avoid negative visibility

C.Request a project budget increase immediately

D.Send the report to external regulatory bodies

E.Delete the risks identified during the audit

AnswerA

Audit findings should drive continuous improvement of the risk processes.

Why this answer

Integrating findings into the risk process improves the project's risk management approach for the future.

Full explanation →

MCQmedium

A project manager wants to ensure that risk management is not viewed as a 'blame game'. How should they configure their risk communication strategy?

A.Focus on the root cause and mitigation during risk reviews, not on who identified the risk.

B.Require team members to report risks to the project sponsor directly.

C.Only allow the project manager to identify risks.

D.Publicly document every risk identified by each team member.

AnswerA

Focusing on solutions promotes a positive, collaborative environment.

Why this answer

Emphasizing learning and proactivity, rather than individual accountability, fosters a supportive culture.

Full explanation →

MCQmedium

You are organizing a risk workshop for a multi-disciplinary team. Which tool would be best to identify risks from different perspectives?

A.Cost Baseline

B.Resource Breakdown Structure

C.Risk Breakdown Structure

D.Schedule Network Diagram

AnswerC

The RBS ensures all categories of risk (technical, external, etc.) are explored, promoting diverse perspectives.

Why this answer

Checklist analysis and brainstorming are effective, but a 'Risk Breakdown Structure' (RBS) provides a systematic framework to ensure comprehensive identification.

Full explanation →

MCQhard

During a risk review, a stakeholder asks why a risk's impact has not changed despite a completed mitigation plan. What is the most likely cause?

A.The project manager forgot to save the update

B.The mitigation addressed probability, not impact

C.The risk is a secondary risk

D.The risk register is corrupted

AnswerB

Mitigation plans often target either the likelihood or the consequence; if impact remains high, the plan likely targeted probability.

Why this answer

If the risk is an 'inherent' risk, mitigation might reduce probability but not the theoretical impact, or the plan was ineffective.

Full explanation →

MCQmedium

When modeling a risk event that might happen multiple times (e.g., machine breakdowns), what is the most appropriate technique in a simulation?

A.Use frequency modeling (Poisson or similar distribution).

B.Increase the task duration by the total estimated impact.

C.Assign a fixed date for each occurrence.

D.Delete the task and recreate it as multiple tasks.

AnswerA

Frequency distributions are designed to handle recurring events.

Why this answer

Frequency modeling allows the user to define the number of occurrences for a risk within the simulation period.

Full explanation →

MCQhard

You are performing a periodic risk reassessment. A key risk has shifted from 'Low' to 'High' probability. What is the next immediate step in the reporting workflow?

A.Update the Probability and Impact Matrix and trigger a stakeholder notification

B.Schedule an immediate Steering Committee meeting

C.Close the risk and add it to the Issues Log

D.Immediately activate the contingency reserve

AnswerA

The matrix update reflects the reassessment, and notification ensures stakeholders are aware of the shift.

Why this answer

Updating the risk register and notifying stakeholders ensures communication of the change in threat profile.

Full explanation →

MCQeasy

What is the benefit of keeping a historical log of risk events and their outcomes?

A.To provide valuable data for future projects and improve risk identification.

B.To satisfy legal requirements.

C.To create more paperwork for the team.

D.To prove that the risk practitioner was right.

AnswerA

Lessons learned help avoid repeating past mistakes.

Why this answer

Historical data enables lessons learned and improves future risk estimation.

Full explanation →

MCQeasy

What is the purpose of a Risk Breakdown Structure (RBS)?

A.To assign risk owners

B.To document the project schedule

C.To calculate the total cost of risks

D.To provide a hierarchical representation of potential sources of risk

AnswerD

The RBS is a tool for structuring risk identification efforts.

Why this answer

The RBS helps organize and categorize potential sources of risk to ensure thorough identification.

Full explanation →

Multi-Selecteasy

Which TWO of the following are common risk response strategies for negative risks?

Select 2 answers

A.Exploit

B.Enhance

C.Avoid

D.Share

E.Transfer

AnswersC, E

A primary negative risk strategy.

Why this answer

Common negative risk strategies include Avoid, Transfer, Mitigate, and Accept.

Full explanation →

Multi-Selecthard

Which THREE actions are part of a 'Risk Audit' process?

Select 3 answers

A.Validating the documentation of the Risk Register

B.Evaluating the effectiveness of risk responses

C.Assigning new risks to owners

D.Updating the project budget for all contingencies

E.Verifying that the risk management process is followed

AnswersA, B, E

Audits ensure that the register is complete and accurate.

Why this answer

Evaluating effectiveness, verifying documentation, and ensuring process compliance are core audit activities.

Full explanation →

MCQmedium

You are using a Risk Register template. Which field is most useful for tracking the 'Risk Reassessment' frequency?

A.Risk Owner

B.Risk ID

C.Next Review Date

D.Contingency Budget

AnswerC

This ensures the risk is reviewed at appropriate intervals.

Why this answer

A 'Next Review Date' field allows for automated tracking and scheduling of reassessments.

Full explanation →

MCQhard

You are auditing a project and find that the Risk Management Plan was never socialized with the project team. What is the most significant risk of this situation?

A.The team will be confused about their project roles.

B.The project sponsor will be unhappy.

C.The project will be over budget immediately.

D.Risks will not be identified or reported consistently throughout the project.

AnswerD

Socialization is essential for ensuring the team knows how to contribute to the risk process.

Why this answer

Without team awareness of the methodology, risk identification and reporting will be inconsistent or non-existent.

Full explanation →

Multi-Selecthard

Which THREE actions are appropriate when a decision tree analysis reveals that the 'Do Nothing' option has a higher EMV than the 'Investigate' option?

Select 3 answers

A.Re-verify the impact values used for the decision branches.

B.Perform a sensitivity analysis on the key variables.

C.Delete the decision tree and start over with a new software.

D.Immediately proceed with the 'Do Nothing' strategy.

E.Review the probability estimates for bias.

AnswersA, B, E

Impact accuracy is critical for the EMV calculation.

Why this answer

One must validate the assumptions, check the sensitivity of the probabilities, and ensure the risk assessment is comprehensive before deciding.

Full explanation →

MCQmedium

In a risk-adjusted schedule simulation, you want to see the impact of resource unavailability. Which feature should you enable?

A.Set all task priorities to 'High'.

B.Enable 'Resource Calendars' in the simulation settings.

C.Disable the 'Critical Path Method' (CPM) engine.

D.Increase the 'Buffer' duration.

AnswerB

Resource calendars are the mechanism for modeling unavailability.

Why this answer

Resource-driven duration allows the simulation to reflect how resource availability constraints directly affect task duration during each iteration.

Full explanation →

Multi-Selecthard

Which THREE strategies help in building a strong risk culture within a project team?

Select 3 answers

A.Assigning all risk management tasks to the project manager.

B.Hiding risks from the team to prevent stress.

C.Integrating risk discussions as a standard agenda item in all team meetings.

D.Encouraging open and honest communication about risks without fear of blame.

E.Recognizing and rewarding team members who proactively identify risks.

AnswersC, D, E

Consistency makes risk management a normal part of the project lifecycle.

Why this answer

A culture of openness, shared responsibility, and continuous learning is the foundation of effective risk management.

Full explanation →

MCQeasy

Which of the following is an example of a quantitative risk analysis technique?

A.Risk Probability and Impact Matrix.

B.SWOT analysis.

C.Monte Carlo simulation.

D.Risk Data Quality Assessment.

AnswerC

This is a key quantitative technique.

Why this answer

Monte Carlo simulation is a classic quantitative technique used to model the uncertainty of project outcomes.

Full explanation →

Multi-Selectmedium

Which TWO approaches are recommended when a stakeholder is hesitant to participate in risk management activities?

Select 2 answers

A.Ignoring the stakeholder and working around them.

B.Showing the stakeholder how risk management will help their area succeed.

C.Threatening to lower their performance rating if they do not participate.

D.Discussing with the stakeholder to understand their specific concerns about the process.

E.Removing the stakeholder from all future project communications.

AnswersB, D

Demonstrating personal or departmental value is highly motivating.

Why this answer

Understanding the hesitation and offering support or value are ways to overcome engagement barriers.

Full explanation →

Multi-Selecteasy

Which TWO items should you check to verify if a risk is being monitored appropriately?

Select 2 answers

A.The 'Last Updated' date in the Risk Register

B.The weather forecast at the office location

C.The number of hours the team works

D.The color of the project binder

E.The agreed-upon frequency in the Risk Management Plan

AnswersA, E

This shows if the risk has been reviewed recently.

Why this answer

The Risk Management Plan and the Risk Register indicate the monitoring frequency and current status.

Full explanation →

MCQmedium

During a risk workshop, stakeholders identify a risk that could impact multiple departments. How should this be handled?

A.Document the risk and ensure all affected department leads are involved in response planning

B.Assign one department head as the owner

C.Ignore the risk until it impacts a specific department

D.Delegate the risk to the project sponsor

AnswerA

Inclusive communication and planning are essential for enterprise-level or cross-departmental risks.

Why this answer

Risks affecting multiple departments must be clearly communicated to all stakeholders, and cross-functional owners should be identified.

Full explanation →

Multi-Selecthard

Which THREE types of information are most critical to include in a risk status report for a steering committee?

Select 3 answers

A.The personal opinions of the project team on the company culture.

B.The latest updates on major risk mitigation actions.

C.Changes in the risk profile since the last report.

D.A summary of the top risks and their current status.

E.The daily task list for all project team members.

AnswersB, C, D

Progress on mitigation shows the project is under control.

Why this answer

Steering committees need high-level insights, strategic alignment, and progress updates on major risks.

Full explanation →

Multi-Selecthard

Which THREE factors are primary triggers for conducting an unscheduled 'Risk Reassessment'?

Select 3 answers

A.Completion of a major project milestone

B.Change in the administrative assistant of the team

C.A major change in project scope

D.Daily routine status meetings

E.Evidence that a current mitigation plan is failing

AnswersA, C, E

Milestones are logical points to review assumptions and risks.

Why this answer

Significant project changes, major milestones, and failure of mitigation plans trigger reassessments.

Full explanation →

Multi-Selecthard

Which THREE activities are part of the 'Plan Risk Management' process?

Select 3 answers

A.Assigning roles and responsibilities for risk.

B.Executing the project work.

C.Defining the risk methodology.

D.Closing the project.

E.Developing the Risk Management Plan document.

AnswersA, C, E

Role assignment is a planning task.

Why this answer

Planning involves defining how the risk process will work, creating the plan document, and establishing the overall framework.

Full explanation →

MCQmedium

Your project is highly sensitive to regulatory changes. How should you incorporate this into your risk strategy planning?

A.Outsource all regulatory compliance tasks to a third party.

B.Establish a regulatory risk watch list and define trigger conditions.

C.Increase the reserve budget based on expert judgment.

D.Ignore the risk until a specific regulation is passed.

AnswerB

Proactive monitoring and defining triggers is a standard risk strategy for high-impact factors.

Why this answer

Risk strategy planning must be tailored to the specific context of the project, including high-impact external factors.

Full explanation →

MCQhard

A senior leader is pressuring you to downplay a project risk in a report. What is the most professional course of action?

A.Report the risk accurately while providing additional context and mitigation options to address the leader's concerns.

B.Comply to maintain good relations with the leader.

C.Ask the leader to write the report themselves.

D.Quietly remove the risk from the report and add it to a private list.

AnswerA

Professionalism involves being honest about risks while offering solutions.

Why this answer

Maintaining integrity and honesty in reporting is a core ethical responsibility of a risk practitioner.

Full explanation →

MCQmedium

When managing risks for a global project, what is a primary consideration for stakeholder communication?

A.Only communicating with the project manager at the central office.

B.Considering cultural differences in risk perception and communication norms.

C.Standardizing all reports to a single format regardless of local requirements.

D.Ensuring all risk communication is in English only.

AnswerB

Adapting communication to fit cultural contexts improves engagement and clarity.

Why this answer

Different cultures may have varying risk appetites and communication styles, requiring a tailored approach.

Full explanation →

MCQhard

You have performed a quantitative analysis and identified a risk that is significantly impacting the schedule. What is the next step to address this?

A.Ask the team to work overtime to buffer the risk

B.Update the project schedule

C.Ignore the risk as it is only a potential occurrence

D.Develop a risk response plan for this specific risk

AnswerD

Developing a response strategy is the standard procedure after identifying a significant risk.

Why this answer

Once a critical risk is identified through quantitative analysis, you must plan a response to mitigate its effect.

Full explanation →

Multi-Selecthard

Which THREE elements should be explicitly defined in the Risk Management Plan regarding 'Risk Thresholds'?

Select 3 answers

A.The favorite hobby of the project sponsor.

B.Specific trigger values for metrics like cost or time variance.

C.The alignment between thresholds and organizational risk tolerance.

D.The font style for reports.

E.The approval process for exceeding the threshold.

AnswersB, C, E

Triggers must be quantitative to be actionable.

Why this answer

Thresholds must be actionable, clear, and tied to specific organizational tolerance levels.

Full explanation →

Multi-Selecthard

Which THREE criteria are used to determine if a risk should be included in a quantitative risk analysis?

Select 3 answers

A.The risk is identified as a 'top priority' in the risk register.

B.The risk is already scheduled to be mitigated next month.

C.The risk has a low probability of occurring.

D.The risk has high uncertainty.

E.The risk has a high potential impact on the project.

AnswersA, D, E

Prioritization is the key filter for quantitative efforts.

Why this answer

Risks for quantitative analysis should be those with high uncertainty, high impact, or those that are critical to project success as identified in the qualitative phase.

Full explanation →

MCQhard

During a Monte Carlo simulation in @RISK, you notice the project completion date distribution is heavily skewed. Which distribution type is most appropriate for modeling task durations that have a hard 'minimum' but a long 'maximum' tail?

A.Normal distribution.

B.Beta distribution.

C.Discrete distribution.

D.Uniform distribution.

AnswerB

The Beta distribution is flexible and ideal for skewed data with fixed bounds.

Why this answer

A PERT or Triangular distribution is often used, but a Beta distribution is generally preferred for modeling skewed task durations with defined minimum, mode, and maximum values.

Full explanation →

Multi-Selecthard

Which THREE criteria are used to perform a 'Risk Data Quality Assessment'?

Select 3 answers

A.Reliability of the data

B.Accuracy of the data

C.Extent of the data's understanding

D.Total volume of data

E.Color of the spreadsheet cells

AnswersA, B, C

Can we trust the data source?

Why this answer

Data quality is assessed based on understanding, accuracy, and reliability.

Full explanation →

MCQhard

You are reviewing a Monte Carlo simulation result. The histogram shows a bimodal distribution for the project completion date. What does this likely suggest about your model?

A.The input distributions are all Normal.

B.The simulation count is too low.

C.The project is guaranteed to finish on time.

D.The model contains a high-impact conditional branch.

AnswerD

Bimodal distributions indicate two distinct project 'realities'.

Why this answer

A bimodal distribution suggests two distinct likely outcomes, often caused by a 'conditional' logic path or a major risk event that, if it occurs, significantly shifts the project path.

Full explanation →

MCQhard

A quantitative risk assessment reveals that a risk has a 10% probability of a $1,000,000 impact. What is the Expected Monetary Value (EMV) of this risk?

A.$10,000

B.$1,000,000

C.$100,000

D.$110,000

AnswerC

Correct calculation based on EMV formula.

Why this answer

EMV = Probability * Impact. 0.10 * $1,000,000 = $100,000.

Full explanation →

Multi-Selectmedium

Which TWO strategies are effective for improving the quality of risk data provided by stakeholders?

Select 2 answers

A.Providing clear definitions and templates for reporting risks.

B.Focusing only on threats and ignoring opportunities.

C.Allowing stakeholders to use any format they prefer, including verbal descriptions.

D.Providing training sessions on how to identify and assess risks accurately.

E.Automatically rejecting any risk report that is not perfect.

AnswersA, D

Standardization improves consistency and quality.

Why this answer

Clear guidance and structured templates help stakeholders provide higher quality data.

Full explanation →

Multi-Selecthard

Which THREE factors can lead to an ineffective risk facilitation workshop?

Select 3 answers

A.Poorly defined workshop objectives

B.Absence of key stakeholders

C.Too much coffee provided

D.Lack of preparation by the facilitator

E.Using a projector instead of a whiteboard

AnswersA, B, D

Causes the session to lose focus.

Why this answer

Lack of preparation, poor participation, or unclear objectives are common pitfalls.

Full explanation →

MCQeasy

What is the primary function of a 'risk-adjusted' schedule?

A.To eliminate the need for project management.

B.To justify budget cuts to stakeholders.

C.To ensure the schedule is as short as possible.

D.To provide a realistic project finish date considering uncertainties.

AnswerD

This is the core objective of risk-adjusted modeling.

Why this answer

A risk-adjusted schedule incorporates potential risks and uncertainties into the project timeline, resulting in a more realistic completion date than the deterministic schedule.

Full explanation →

MCQhard

During a project's mid-lifecycle review, you discover that the original risk management strategy is no longer effective due to a change in the market environment. What is the best course of action?

A.Continue using the current plan to maintain consistency.

B.Ask stakeholders to sign off on the original plan again.

C.Formally review and update the Risk Management Plan to reflect current realities.

D.Switch to a quantitative-only approach immediately.

AnswerC

Updating the plan ensures that the risk strategy remains aligned with project objectives.

Why this answer

Risk management plans must be reviewed and updated when the project environment changes significantly.

Full explanation →

MCQeasy

Which technique is most appropriate for a quick, qualitative assessment of multiple risks in a time-constrained environment?

A.Decision Tree Analysis

B.Monte Carlo Simulation

C.Expected Monetary Value (EMV)

D.Probability and Impact Matrix

AnswerD

This provides a simple, visual, and efficient way to rank risks by severity.

Why this answer

The Probability and Impact Matrix allows for a rapid assessment of multiple items based on established scales.

Full explanation →

MCQmedium

A project stakeholder is concerned about the impact of a risk response on their budget. How should the risk practitioner respond?

A.Explain that risk management is separate from the project budget.

B.Immediately remove the mitigation strategy from the project plan.

C.Dismiss the concern as the mitigation is already approved.

D.Quantify the impact of the risk versus the cost of mitigation and present the analysis to the stakeholder.

AnswerD

Data-driven analysis helps the stakeholder understand the ROI of the risk response.

Why this answer

Addressing financial concerns through objective analysis builds trust and leads to informed decisions.

Full explanation →

MCQhard

You are analyzing a project schedule and realize that a 'Risk Event' is correlated with multiple tasks. How should this be handled in your risk simulation tool?

A.Manually adjust the duration of each affected task.

B.Add the risk only to the critical path.

C.Create separate risks for each task and hope they correlate.

D.Link the risk to multiple activities via impact mapping.

AnswerD

This ensures the simulation treats them as a single causative event.

Why this answer

The risk should be modeled as a single event with a correlation mapping to the multiple tasks it impacts, ensuring the simulation triggers the impact across all affected tasks simultaneously.

Full explanation →

Multi-Selecthard

Which TWO actions should a project manager take when a project stakeholder has a risk appetite that conflicts with the organization's?

Select 2 answers

A.Facilitate a negotiation between the stakeholder and the board.

B.Consult the enterprise risk management policy to identify the correct stance.

C.Do nothing and hope the stakeholder changes their mind.

D.Ignore the organizational policy.

E.Change the project scope.

AnswersA, B

Mediating the conflict is a key PM responsibility.

Why this answer

Conflicts require formal resolution via corporate guidance and transparent communication.

Full explanation →

MCQmedium

When modeling 'uncertainty' using a distribution, what does the 'Mode' value represent in a Triangular distribution?

A.The average of the minimum and maximum.

B.The lowest possible duration.

C.The most likely duration estimate.

D.The absolute maximum duration.

AnswerC

The mode is the peak of the triangle.

Why this answer

In a Triangular distribution, the mode is the most likely value, which sits between the minimum and maximum.

Full explanation →

MCQmedium

When running a Monte Carlo simulation, you find that the results do not change between runs. What is the most likely cause?

A.The iteration count is too high.

B.The random seed is fixed.

C.The project file is corrupted.

D.All risks have a probability of 100%.

AnswerB

A fixed seed reproduces the exact same 'random' values every time.

Why this answer

If the results are identical, the simulation is likely using the same 'Random Seed'. Changing the seed ensures that each run uses a different sequence of random numbers.

Full explanation →

MCQmedium

You are fostering a risk culture in a team that historically hides risks. What is the best first step?

A.Communicate that identifying risks is a positive contribution to project success and not a sign of failure.

B.Mandate a minimum number of risk entries for every team member.

C.Implement a reward system for those who identify the most risks.

D.Threaten to remove team members who fail to report risks.

AnswerA

Changing the mindset from 'blame' to 'success' is the fundamental step in building a risk culture.

Why this answer

A non-punitive environment is essential to encourage honest risk reporting.

Full explanation →

MCQmedium

Which facilitation technique involves presenting an anonymous survey to experts to reach a consensus on risk impacts?

A.Delphi Technique

B.Brainstorming

C.Root Cause Analysis

D.Interviewing

AnswerA

This is the definition of the Delphi technique.

Why this answer

The Delphi technique is specifically designed for anonymous expert consensus.

Full explanation →

MCQeasy

What is the purpose of 'Risk Reassessment' sessions held throughout the project?

A.To ensure compliance with the procurement plan

B.To identify new risks and retire old ones

C.To change the project manager

D.To increase the contingency budget

AnswerB

The environment is dynamic, and the risk register must reflect current conditions.

Why this answer

Reassessment ensures that the risk register stays relevant as the project environment changes.

Full explanation →

MCQhard

If a risk's 'Risk Proximity' is approaching, what does this indicate for reporting?

A.The risk should be moved to the watchlist

B.The mitigation plan failed

C.The risk requires immediate and frequent monitoring

D.The risk is no longer relevant

AnswerC

Short proximity means the event could occur soon, necessitating increased management attention.

Why this answer

A short proximity indicates the risk is imminent, requiring higher reporting frequency and management attention.

Full explanation →

MCQmedium

You notice that the 'Residual Risk' is higher than the 'Inherent Risk' after mitigation. What does this suggest?

A.The risk is now fully accepted

B.The mitigation was highly successful

C.The mitigation strategy may have introduced secondary risks

D.The project is complete

AnswerC

A common sign of a failed or counterproductive mitigation strategy.

Why this answer

If residual risk is higher, the mitigation strategy may be introducing new threats or failing to address the primary risk.

Full explanation →

Multi-Selectmedium

Which THREE types of risks should always be included on a 'Watchlist' for regular monitoring?

Select 3 answers

A.Risks that have already been resolved

B.Critical path risks

C.Accepted risks that do not require active mitigation

D.Risks that are currently deferred

E.Low-priority risks

AnswersC, D, E

Accepted risks still require monitoring to ensure they don't escalate.

Why this answer

Low-priority, accepted, and deferred risks belong on the watchlist.

Full explanation →

MCQhard

You are presenting a risk report. The sponsor points out that a specific risk was closed, but the cost impact was never updated. What is the correct way to handle this during reporting?

A.Suggest the sponsor look at the Issues Log instead

B.Blame the Risk Owner for the missing data

C.Argue that cost updates are not required for closed risks

D.Update the record with actuals and apologize for the reporting gap

AnswerD

Transparency and data accuracy are required for professional risk reporting.

Why this answer

Acknowledge the oversight, update the register with the actual cost impact, and report the revised total at the next cycle.

Full explanation →

MCQeasy

What is the primary output of a sensitivity analysis in a project risk assessment?

A.A total project cost estimate.

B.A project management plan.

C.Identification of the most influential project variables.

D.A list of all possible project risks.

AnswerC

The core goal is identifying what matters most.

Why this answer

Sensitivity analysis identifies which variables have the most significant impact on project objectives, allowing teams to focus on critical risks.

Full explanation →

MCQeasy

Which of the following is a 'tool and technique' used during the Plan Risk Management process?

A.The Risk Register

B.The Project Scope Statement

C.Expert Judgment

D.The Project Team

AnswerC

Expert judgment is used to tailor the risk management approach.

Why this answer

Expert judgment is a standard tool for planning processes to ensure the plan is robust and suitable.

Full explanation →

MCQmedium

You are auditing a project's risk management methodology. You notice that risk identification happens only at the start of the project. What should you recommend to align with standard PMI-RMP best practices?

A.Request additional funding for a dedicated risk consultant.

B.Create a separate document for residual risks only.

C.Integrate risk identification into each project stage gate or iteration review.

D.Use a quantitative risk analysis tool to automate identification.

AnswerC

Continuous risk identification is required for effective project monitoring.

Why this answer

Risk management is an iterative process throughout the project lifecycle, not a one-time activity.

Full explanation →

Multi-Selectmedium

Which TWO of the following are essential components of a formal 'Risk Report' provided to project stakeholders?

Select 2 answers

A.Personal performance reviews of risk owners

B.Full list of all individual risk task assignments

C.Summary of top risks by impact

D.Trend of aggregate risk exposure

E.Detailed log of every risk register edit

AnswersC, D

Stakeholders need to know the most significant threats.

Why this answer

A, B are standard reporting components; C, D, E are either too granular, confidential, or irrelevant.

Full explanation →

MCQhard

You are facilitating a risk analysis session for a project with high technical uncertainty. Quantitative analysis results show a wide range of variance. What is the most appropriate action to improve the accuracy of the risk model?

A.Increase the number of iterations in the Monte Carlo simulation

B.Incorporate sensitivity analysis (Tornado Diagram) to refine input assumptions

C.Remove the extreme outliers from the risk dataset

D.Change the probability distribution type from Normal to Triangular

AnswerB

Tornado diagrams help identify which variables most influence the outcome, allowing for targeted refinement of those specific estimates.

Why this answer

Updating the risk model with more precise expert estimates or empirical data is the best way to tighten the variance in quantitative models.

Full explanation →

MCQeasy

Which component of the risk management plan details the frequency and level of detail for risk reports?

A.Risk Breakdown Structure

B.Risk Response Matrix

C.Probability and Impact Matrix

D.Risk Reporting Requirements

AnswerD

This section dictates the communication plan for risk management information.

Why this answer

The reporting format section of the Risk Management Plan defines how and when information flows to stakeholders.

Full explanation →

Multi-Selectmedium

Which TWO factors contribute to a project's risk appetite?

Select 2 answers

A.The color of the project status report.

B.The number of pages in the risk register.

C.The software tool selected for the project.

D.Organizational culture and management style.

E.The strategic objectives and the value at stake.

AnswersD, E

Culture defines the baseline for risk-taking.

Why this answer

Risk appetite is influenced by the organizational culture and the specific strategic importance of the project.

Full explanation →

Multi-Selectmedium

Which TWO of the following are potential causes of a 'non-converging' Monte Carlo simulation?

Select 2 answers

A.Circular logic dependencies in the project schedule.

B.The use of a GUI-based interface.

C.Assigning too many resources to a task.

D.Using a modern, high-speed processor.

E.Insufficient number of iterations for the model's complexity.

AnswersA, E

Circular logic prevents the calculation of a path.

Why this answer

Non-convergence is usually caused by excessive complexity (e.g., circular logic) or insufficient iterations relative to the model's volatility.

Full explanation →

MCQmedium

A project team is conducting a risk planning workshop. A team member suggests that all risks identified should be mitigated. What is the most appropriate response from the project manager?

A.Transfer all identified risks to a third-party vendor.

B.Ignore the comment and document only the risks the manager likes.

C.Explain that risk responses are selected based on the cost-benefit analysis and risk appetite.

D.Agree with the team member to ensure project safety.

AnswerC

This reflects the strategic approach to choosing appropriate, cost-effective responses.

Why this answer

Not all risks are worth mitigating; the cost of mitigation must be balanced against the potential impact.

Full explanation →

MCQhard

In a project, you are facilitating a risk workshop. You discover that a risk has been mitigated, but the residual risk remains high. What is the next logical step?

A.Document the residual risk in the risk register

B.Assign a new risk owner

C.Remove the risk from the risk register

D.Close the risk

AnswerA

The risk register must reflect the current state, including the level of residual risk.

Why this answer

If the residual risk is still above the threshold, further mitigation or acceptance is required.

Full explanation →

Multi-Selectmedium

Which TWO of the following are prerequisites for conducting a valid Monte Carlo simulation in a project schedule?

Select 2 answers

A.Probability distributions for task durations.

B.Hardware specifications for the simulation server.

C.A finalized project charter.

D.A complete and logically linked network diagram.

E.A list of all project stakeholders.

AnswersA, D

Distributions are needed for the random sampling process.

Why this answer

A well-defined network logic and accurate, probabilistic duration estimates are essential foundations for any reliable simulation.

Full explanation →

MCQeasy

During a project kickoff meeting, a senior stakeholder states they are 'very risk-averse' regarding project timelines but 'open to innovation' regarding technical solutions. How should the risk management plan reflect this?

A.Escalate all technical risks to the project sponsor immediately.

B.Ignore the stakeholder's comment as it is subjective.

C.Create separate risk tolerance thresholds for schedule-related risks and technical risks.

D.Set a single, conservative risk tolerance threshold for all risk categories.

AnswerC

Tailoring thresholds to specific stakeholder attitudes allows for more effective decision-making.

Why this answer

The plan must document these specific attitudes to ensure risk response thresholds are appropriately tiered.

Full explanation →

MCQeasy

In the context of risk-adjusted cost analysis, what is the primary purpose of adding a 'Risk Contingency' reserve to the project budget?

A.To cover identified risks that have been quantified.

B.To cover scope creep requested by the client.

C.To account for inflation over the project lifecycle.

D.To replace the management reserve.

AnswerA

Contingency is the budget allocated for identified risks.

Why this answer

Contingency reserves are specifically for 'known-unknowns' identified during the risk assessment process.

Full explanation →

Multi-Selecthard

Which THREE of the following are common pitfalls when performing an Expected Monetary Value (EMV) analysis?

Select 3 answers

A.Failing to account for the impact of the risks on subsequent tasks.

B.Using overly optimistic probability estimates.

C.Ignoring the correlation between different risk events.

D.Performing the analysis before the project starts.

E.Using a currency that is too stable.

AnswersA, B, C

Dependencies propagate risk throughout the project.

Why this answer

Overly optimistic probabilities, ignoring secondary risks, and failing to account for the impact of risks on project dependencies are all common errors.

Full explanation →

MCQmedium

You are configuring a risk dashboard in a PMIS. Stakeholders need to see the 'Risk Burn-down' trend. Which data point must be tracked consistently to enable this report?

A.Aggregate risk exposure value

B.Owner assignment frequency

C.Total number of risks identified

D.Number of risk responses completed

AnswerA

Tracking the aggregate quantitative risk exposure over time is required for a burn-down trend.

Why this answer

A burn-down requires consistent tracking of the sum of risk exposure over time.

Full explanation →

Multi-Selecthard

Which THREE factors should you consider when choosing the distribution type for a specific project task during risk analysis?

Select 3 answers

A.The project manager's preference for a specific tool.

B.The defined logical bounds (minimum, maximum, mode).

C.The level of uncertainty or risk inherent in the task.

D.Whether the task is on the critical path.

E.The historical performance data for similar tasks.

AnswersB, C, E

Bounds define the input parameters for most distributions.

Why this answer

The nature of the task, the historical data available, and the bounds (min/max) are the key drivers for choosing a distribution.

Full explanation →

PMI Risk Management Professional (PMI-RMP) (PMI-RMP) (PMI-RMP) — Questions 1–75