200 questions total · 3pages · All types, answers revealed
Page 3 of 3
When a risk response is found to be ineffective during an audit, what is the next step?
If the audit confirms the plan is ineffective, it must be corrected.
Why this answer
The risk management plan must be updated, and the risk response strategy revised.
Two project stakeholders disagree on the severity of a risk, leading to an impasse. What is the best way to resolve this?
Objective criteria provide a neutral basis for consensus.
Why this answer
Using objective, data-driven assessment criteria helps move from subjective opinion to logical agreement.
During a risk audit, you identify that a previously closed risk has manifested. What is the most appropriate action to ensure accurate project risk status?
Re-opening the original risk maintains historical context and traceability.
Why this answer
Re-opening the risk and updating the status ensures the audit trail reflects the current project reality.
You are leading a project where the stakeholders have a 'neutral' risk attitude. Which risk strategy is most appropriate for this environment?
A balanced approach aligns with a neutral risk appetite.
Why this answer
A neutral attitude implies balancing risk and reward; the strategy should focus on objective analysis and moderate risk taking.
When monitoring risk triggers, what is the primary purpose of a 'Risk Trigger' threshold field in your project management software?
Triggers are defined conditions that signal the potential occurrence of a risk.
Why this answer
Thresholds provide objective criteria for when a risk response plan should be activated.
Which THREE factors should be considered when assessing the impact of a risk?
A primary impact factor.
Why this answer
Impact can be measured across cost, schedule, and technical/quality performance.
In a quantitative risk analysis, the cost contingency has been depleted, yet the risk remains. What is the next logical step in the risk process?
Once authorized contingency is depleted, the risk exceeds the project manager's authority level.
Why this answer
When contingency is exhausted, the risk must be re-evaluated and potentially escalated to management or the project board.
Which TWO stakeholders are most likely to request a detailed 'Risk Report'?
Sponsors are accountable and need visibility on major risks.
Why this answer
The project sponsor and project manager need high-level and detailed risk insights respectively.
Which THREE criteria are commonly used to score risks during qualitative analysis?
Likelihood is a primary dimension.
Why this answer
Standard qualitative analysis uses probability, impact, and a secondary attribute like urgency to rank risks.
A project is utilizing a 'Risk-Adjusted Schedule'. What does this imply about the project's risk planning?
Risk-adjusted schedules explicitly model risk impacts on the timeline.
Why this answer
A risk-adjusted schedule incorporates contingency buffers based on identified risks, requiring a mature risk planning approach.
Which document outlines how risk management activities will be communicated to stakeholders?
This plan explicitly defines communication protocols.
Why this answer
The Communications Management Plan defines the 'who, what, when, and how' of project communication.
You are reviewing a 'Risk Burndown' chart and see that it is flat. What does this mean?
A flat chart indicates zero reduction in aggregate risk exposure.
Why this answer
A flat line indicates that no risks have been closed or mitigated during the period, suggesting progress in risk management has stalled.
Which TWO output reports are commonly used in Primavera Risk Analysis to communicate risk results to the project sponsor?
Tornado diagrams show which risks are most important.
Why this answer
S-curves (probability of success) and Tornado diagrams (sensitivity/priority) are the standard communication tools for stakeholders.
Which THREE elements are necessary for a high-quality quantitative risk analysis?
Essential for valid model results.
Why this answer
Reliable data, appropriate models, and expert input are the cornerstones of quantitative analysis.
Which TWO of the following are essential components of a well-maintained risk register?
Essential for accountability and action.
Why this answer
A risk register must have at least a clear description and an identified owner to be actionable.
Which THREE categories are typically found in a standard Risk Breakdown Structure (RBS)?
External risks are a standard level-one category.
Why this answer
A standard RBS includes categories like technical, management, and external risks.
Which TWO factors should be documented in a 'Risk Management Plan' to ensure successful stakeholder buy-in?
Stakeholders support what they understand and can see.
Why this answer
Buy-in is gained by showing the plan's value through clear benefits and accessible reporting.
When configuring a simulation in Oracle Primavera Risk Analysis, what is the impact of checking the 'Correlate Task Durations' option?
Correlation links the random variables of different tasks.
Why this answer
Correlating task durations allows the user to link the uncertainty of one task to another, reflecting real-world dependencies where a delay in one area often leads to delays in related areas.
You have multiple risks that appear to be related. What tool would help you visualize the relationships between them?
Also known as a fishbone diagram, it is excellent for showing how factors relate to a problem.
Why this answer
An Interrelationship Digraph or a Cause-and-Effect diagram helps visualize complex relationships between factors.
Which THREE steps are part of the 'Qualitative Risk Analysis' process?
Helps in understanding risk context.
Why this answer
This process involves evaluating probability/impact, ranking, and categorizing.
What is the primary function of a 'Risk Dashboard' compared to a 'Risk Register'?
Dashboards are designed for quick visualization of trends and status.
Why this answer
Dashboards provide visual summaries for decision-making, while the register holds the detailed data.
What is the primary benefit of maintaining a transparent risk register accessible to all project stakeholders?
Transparency empowers stakeholders to identify and report risks early.
Why this answer
Transparency encourages proactive risk identification and shared responsibility across the team.
A project manager is facing pushback from a functional manager who refuses to allocate resources to risk response activities. What is the most appropriate risk strategy planning response?
When planning or execution is stalled by resource allocation, formal escalation is the appropriate governance path.
Why this answer
Conflict resolution regarding resources should be addressed by referencing the approved Risk Management Plan and organizational risk appetite.
In a decision tree analysis, what occurs if you 'fold back' the decision tree?
This is the core definition of folding back a decision tree.
Why this answer
Folding back involves calculating the EMV for each chance node and choosing the alternative at each decision node that maximizes the expected value (or minimizes cost).
When calculating the Expected Monetary Value (EMV) for a risk, why do we multiply probability by impact?
The multiplication provides the expected value for a specific event.
Why this answer
This provides the 'weighted' value of the risk, which is the standard methodology for normalizing risk impact across different types of potential events.
Which communication method is most appropriate for informing stakeholders about a significant change in the project's risk profile?
Formal reporting ensures clarity, documentation, and proper stakeholder awareness.
Why this answer
Formal, direct communication ensures that key stakeholders receive the information clearly and can provide feedback.
Which THREE factors influence the choice of a 'risk management methodology' for a project?
Higher complexity requires more rigorous methodologies.
Why this answer
Methodology selection depends on project complexity, organizational maturity, and the nature of the project environment.
You are selecting a risk management methodology for a high-security government project. Which factor is most important to consider?
Security projects require rigid governance frameworks.
Why this answer
High-security environments require strict documentation, audit trails, and formal approval processes for all risk activities.
You are presenting a report on high-impact risks. The project sponsor asks how these risks affect the overall business strategy. What is the most effective way to explain this?
Connecting risks to KPIs provides the strategic context the sponsor requested.
Why this answer
Connecting project risks to business strategy demonstrates the strategic value of risk management.
When facilitating a risk workshop, how do you handle a suggestion that is clearly out of scope for the current project?
The 'Parking Lot' is a standard facilitation tool for off-topic but important ideas.
Why this answer
Address the suggestion respectfully and document it as a potential item for future consideration or outside the project's current bounds.
You are reviewing a S-curve generated from a cost simulation. What does the P80 value represent on this curve?
P80 is the standard benchmark for high-confidence budget estimation.
Why this answer
The P80 value on a cumulative probability distribution (S-curve) indicates that there is an 80% probability that the project cost will be at or below that value.
Which TWO of the following are common types of probability distributions used in risk simulation?
Standard distribution for task duration estimation.
Why this answer
Triangular and Beta distributions are the most widely used distributions in project risk modeling because they are intuitive to estimators.
During a project, a stakeholder refuses to accept a risk mitigation strategy that requires their department to allocate resources. What should the risk practitioner do first?
Addressing the underlying concerns enables the practitioner to tailor the mitigation strategy.
Why this answer
Understanding the stakeholder's constraints is necessary before negotiating or escalating the issue.
You are identifying a trend where multiple risks in a specific category (e.g., 'Supply Chain') are occurring. What report should you generate?
This report aggregates risk data by category, revealing systemic issues.
Why this answer
A category-based analysis reveals systemic weaknesses in the project's risk environment.
When interpreting the results of a cost simulation, what does the 'Distribution' (histogram) tell you that a 'Mean' value does not?
The histogram displays the likelihood of all possible outcomes.
Why this answer
The distribution provides the range and shape of potential outcomes, including the likelihood of extreme events, whereas the mean is just a single point of average performance.
Which THREE items should be included in a 'Risk Audit' report to project governance?
Governance needs the results of the audit.
Why this answer
Audit findings, recommendations, and process status are essential for governance review.
A PMO is standardizing risk management across multiple projects. They want to ensure that risk appetite is consistent across the organization. What is the most effective approach?
ERM policies provide the necessary framework for organizational consistency.
Why this answer
Organizational consistency requires top-down governance through defined policies and standardized thresholds.
In the context of the Risk Management Plan, what is a 'Risk Threshold'?
Thresholds are operational triggers for risk management actions.
Why this answer
A threshold is a specific point where a risk's impact requires a predefined management action or escalation.
Your organization is transitioning to a hybrid methodology. During risk management planning, you must select an approach that accommodates both Agile delivery and Waterfall governance. Which strategy is most effective?
Tailoring the methodology to specific delivery cadences is a core competency in risk strategy.
Why this answer
Hybrid environments require a tailored risk management methodology that balances iterative risk identification with formal reporting cycles.
During planning, you identify that your project relies on a 'Single Point of Failure' (SPOF) in the supply chain. What is the best strategy to integrate into your plan?
Developing secondary suppliers is a direct mitigation for a supply chain SPOF.
Why this answer
Risk strategy for critical dependencies must include proactive mitigation and contingency planning.
Which tool in your PMIS allows you to track the 'Risk Response' implementation status across multiple work streams?
A filtered status report is the standard way to track implementation progress across work streams.
Why this answer
A dashboard or a filtered list view in a PMIS allows for aggregated tracking of status across the project.
Which THREE outcomes are expected from an effective stakeholder engagement plan for risk management?
Diverse input leads to better quality data.
Why this answer
Effective engagement results in better risk identification, ownership, and overall project performance.
You discover that a risk response plan is no longer effective due to changing market conditions. What is your next step?
Adaptability is a key component of effective risk management.
Why this answer
The risk must be re-assessed to determine if the strategy is still valid or if a change is required.
Which TWO of the following are considered 'Risk Triggers'?
A warning sign of quality failure.
Why this answer
Triggers are early warning signs that a risk is about to occur.
Which TWO inputs are required to properly tailor a risk management methodology?
OPAs provide the existing standards to tailor from.
Why this answer
Tailoring requires understanding both the environment (enterprise) and the specific project needs (context).
A stakeholder expresses concern about the timing of risk review meetings. How should you address this?
Aligning with stakeholder availability increases participation.
Why this answer
Collaborative scheduling is key to ensuring that all necessary stakeholders can attend.
A project stakeholder discovers an unmanaged risk and is upset that it wasn't captured. How do you resolve this?
Prompt and professional action shows you value their contribution.
Why this answer
Acknowledging the miss and immediately integrating the feedback into the risk management process builds trust.
Which TWO documents are essential to have on hand during a risk facilitation workshop?
Defines the rules for the workshop.
Why this answer
The risk register (current state) and the risk management plan (the process) are essential.
During a risk review meeting, a stakeholder asks for the definition of a specific risk term. How should you respond?
Using standardized terminology ensures everyone is aligned.
Why this answer
Promoting a shared understanding of terminology is key to effective communication.
Why is it important to include stakeholders in the initial risk identification phase?
Diverse viewpoints help catch risks that one person might miss.
Why this answer
Diverse perspectives improve the quality and coverage of risk identification.
Page 3 of 3
Practice PMI-RMP by domain
Target a specific domain to shore up weak areas.