Question 1

Business rhythm can fluctuate greatly between different industries and vary between companies
within the same industry. What should be used 10 determine how often a project's risk register
should be updated or reviewed in a given year when the project is in an industry with a very high
business rhythm?

Accepted Answer

A

Explanation: The risk management plan provides guidance on how often the risk register should be updated or reviewed. It takes into account the specific industry, project, and organizational context, including the business rhythm.

Question 2

A risk manager for a hospital extension project is leading a project team in developing a risk
management plan. One team member is responsible for conducting risk identification. The team
member just joined the team and is struggling to ensure the coverage of all risks that might arise in
this complex project.
How should the risk manager address this concern?

Accepted Answer

A

Explanation: When a team member is struggling to ensure the coverage of all risks in a complex project, the risk manager should develop a risk breakdown structure (RBS). An RBS helps in systematically identifying risks by categorizing them into different levels and areas, making it easier to ensure that all potential risks are considered. This structured approach is particularly useful in complex projects where risks may arise from multiple sources. PMI advocates the use of an RBS as a best practice for comprehensive risk identification, particularly in large or complex projects where the range of potential risks can be extensive .

Question 3

A project lihat was in the execution phase for the last six months was put on hold and was eventually
cancelled after numerous scope related challenges. It was decided to re-plan the scope and divide
the project into multiple projects to have better insight into end objectives. As part of the project
start up. the project manager is developing the risk planning for the project.
What three artifacts should the project manager consult or review during this process? (Choose
three.)

Accepted Answer

A, B, D

Explanation: The project manager should consult or review project contracts, lessons learned registers from analogous projects, and the risk management plan to develop an effective risk planning for the project. According to the PMBOK® Guide, the risk management plan is one of the key inputs for the plan risk management process, which is the first process in the project risk management knowledge area. The risk management plan describes how risk management activities will be structured and performed throughout the project. It includes information such as the methodology, roles and responsibilities, budget, timing, risk categories, definitions of risk probability and impact, probability and impact matrix, revised stakeholders’ risk tolerances, reporting formats, and tracking (page 409). Therefore, option D is the correct answer. The project contracts are also an important input for the plan risk management process, as they may contain terms and conditions that can create or affect various project risks. For example, contracts may include clauses related to penalties, incentives, warranties, intellectual property rights, termination, force majeure, arbitration, indemnification, etc. The project manager should review the project contracts to identify any potential sources of risk and plan appropriate responses (page 410). Therefore, option A is the correct answer. The lessons learned registers from analogous projects are another valuable input for the plan risk management process, as they provide historical information and knowledge that can help the project manager identify and analyze risks, as well as plan risk responses. The lessons learned registers may contain information such as the risks that occurred, the root causes of the risks, the risk triggers, the effectiveness of the risk responses, the residual and secondary risks, the risk owners, the risk ratings, the risk trends, etc. The project manager should consult the lessons learned registers from similar or comparable projects to learn from past experiences and avoid repeating mistakes (page 411). Therefore, option B is the correct answer. The risk register is not an input for the plan risk management process, but an output. The risk register is a document that contains the list of identified risks, their causes, potential responses, and other relevant information. The risk register is created during the identify risks process, which is the second process in the project risk management knowledge area. The risk register is then updated and refined throughout the project as more information becomes available and new risks emerge (page 414). Therefore, option C is incorrect. The code of regulations is not an input for the plan risk management process, but a type of enterprise environmental factor. Enterprise environmental factors are the conditions, not under the control of the project team, that influence, constrain, or direct the project. The code of regulations refers to the rules and standards that govern the project’s industry, domain, or sector. The code of regulations may affect the project’s scope, schedule, cost, quality, resources, communications, procurement, and risk management. The project manager should consider the code of regulations when planning risk management activities, but it is not an artifact that needs to be reviewed or consulted (page 38). Therefore, option E is incorrect. Reference: PMBOK® Guide, pages 38, 409-411, 4141

Question 4

Which statement describes the risk portrayed on the risk matrix heat map below?

Accepted Answer

B

Explanation: The risk matrix heat map is a graphical tool that displays the probability and impact of risks in a project. The horizontal axis represents the probability of occurrence, and the vertical axis represents the impact rating. The colors indicate the level of risk exposure, from green (low) to red (high). The risk in question is located in the upper right quadrant of the matrix, which means it has a high impact rating. The probability of occurrence can be estimated by looking at the scale on the horizontal axis. The risk is slightly to the left of the 50% mark, which means it has a probability of occurrence of about 40%. Therefore, the correct statement that describes the risk is B. The risk has a probability of 40% of occurrence and a high impact rating. Reference: PMI, The Standard for Risk Management in Portfolios, Programs, and Projects, 2019, p. 104-105.

Question 5

Stakeholder deliverable reviews will start soon and additional work is expected to resolve any issues
or required adjustments. Budget overruns during execution have put serious constraints on the
remainder of the project's budget.
What should the project manager do next?

Accepted Answer

B

Explanation: The project manager should reassess the risks and analyze the reserve to determine if any adjustments can be made to accommodate the expected additional work. This will help in identifying potential budget-saving measures and making informed decisions on how to proceed. According to the PMI Risk Management Professional (PMI-RMP) Reference Materials, risk reassessment is the process of reanalyzing existing project risks and identifying new risks throughout the project life cycle1. Reserve analysis is the process of estimating the amount of contingency reserve and management reserve needed to account for the uncertainty and variability of the project2. In this case, the project manager should conduct a risk reassessment and reserve analysis as the next step, because the budget overruns during execution have changed the risk profile of the project and reduced the available funds to handle future risks. By conducting a risk reassessment, the project manager can update the risk register and the risk response plan with the current status of the project risks and the effectiveness of the risk responses. By conducting a reserve analysis, the project manager can determine if the remaining contingency reserve and management reserve are sufficient to cover the potential impact of the project risks, and request additional funds if needed. Reference: 1: PMI, A Guide to the Project Management Body of Knowledge (PMBOK® Guide), Sixth Edition, 2017, p. 442 2: PMI, A Guide to the Project Management Body of Knowledge (PMBOK® Guide), Sixth Edition, 2017, p. 215

Question 6

A risk management professional is currently facilitating the risk planning process with the project
team. To increase the breadth of considered risks, the team wants to include high-level and strategic
project risks.
What should the risk management professional do next?

Accepted Answer

C

Explanation: A SWOT analysis is a risk identification technique that helps to identify high-level and strategic project risks by examining the internal and external factors that may affect the project objectives. A SWOT analysis involves listing the strengths, weaknesses, opportunities, and threats of the project, and then analyzing how they may impact the project positively or negatively. A SWOT analysis can help to uncover potential risks that may not be obvious from other techniques, such as prompt lists, interviews, or brainstorming12 : 1: PMI Risk Management Professional (PMI-RMP)® Handbook, page 10 2: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Seventh Edition, page 11.2.2.1

Question 7

After presenting a list of risks to the major project stakeholders and project sponsor, the board
requested the risks be sorted differently from the results presented by the project team. This is a
major issue and will cause a 2-week delay in the project.
How could the risk manager have avoided the board's response?

Accepted Answer

A

Explanation: According to the PMBOK Guide, risk prioritization is the process of assigning a level of importance to each identified risk based on its probability and impact, as well as other factors such as urgency, stakeholder tolerance, and project objectives. Risk prioritization helps the project team to focus on the most significant risks and allocate resources accordingly. One of the tools and techniques for risk prioritization is stakeholder engagement, which involves involving the key stakeholders in the risk analysis and decision making process. Stakeholder engagement helps to ensure that the risk prioritization reflects the expectations and p

Question 8

During a risk identification process in a construction project, the lack of space to install air conditioners is raised as a risk with high impact. Which is an example of an early risk trigger?

Accepted Answer

A

Explanation: A risk trigger is an indication or warning sign that a risk is about to occur or has occurred. A risk trigger can be an event, a condition, or a situation that signals the onset of a risk. A risk trigger can help the project team to identify and respond to risks in a timely manner. In this case, the lack of space to install air conditioners is a risk with high impact on the project. A potential need to share the space with other machinery is an example of an early risk trigger, because it indicates that the space issue may become a problem in the future. If the project team detects this trigger, they can take proactive actions to avoid or mitigate the risk, such as finding an alternative location, modifying the design, or negotiating with the stakeholders. Reference: PMI, The Standard for Risk Management in Portfolios, Programs, and Projects, 2019, p. 102-103.

Question 9

in a complex and critical project, a sponsor asks the risk manager to determine where the project's
concentration of risks is greatest by performing a quantitative risk analysis. There are no
organizational process assets (OPAs)s about the risk categories.
Which tool could the risk manager use to discover the project risk categories?

Accepted Answer

A

Explanation: When a project lacks predefined organizational process assets (OPAs) related to risk categories, the risk manager can utilize the Work Breakdown Structure (WBS) to identify potential project risk categories. The WBS decomposes the project scope into manageable components, providing a hierarchical representation of all deliverables and work packages. By analyzing each element of the WBS, the risk manager can systematically identify areas where risks may arise, effectively categorizing them based on project activities and deliverables. This approach ensures a comprehensive assessment of potential risks across all aspects of the project, facilitating targeted risk management efforts. PMI Risk Management Study Guide Reference: The PMI-RMP Exam Preparation Study Guide notes that "the WBS serves as a foundational tool for risk identification, enabling project teams to systematically examine each component for potential risks and categorize them appropriately."

Question 10

During a brainstorming session, a stakeholder identifies a risk that, if realized, could greatly impact
their team. The stakeholder insists that this particular risk should be
mitigated to the greatest extent possible, however, the majority of other stakeholders feel that
different risks have higher probabilities of occurring.
Which action should the risk manager take to address this risk?

Accepted Answer

D

Explanation: Adding the identified risk to the risk register is the best action that the risk manager can take to address this risk. The risk register is a document that records the identified risks, their characteristics, their status, and their responses. By adding the risk to the risk register, the risk manager can ensure that the risk is not overlooked or ignored, and that it will be subjected to further probability and impact analysis to determine its priority and response strategy. Accepting the identified risk because other stakeholders feel that there are higher priority risks to address is not a good practice, as it may lead to overlooking a potentially significant risk that could affect the stakeholder’s team. Mitigating the identified risk in order to reduce the probability of impacting the stakeholder’s team is not advisable, as it may be a premature or unnecessary action without proper analysis of the risk probability and impact. Escalating the identified risk to the project sponsor and allowing them to determine the best course of action is not appropriate, as it may be an overreaction or a sign of lack of competence from the risk manager, who should be able to handle the risk identification and analysis process. Reference: PMI Risk Management Professional (PMI-RMP)® Exam Content Outline1, PMI Practice Standard for Project Risk Management2, Risk Management Professional (PMI-RMP)® Cert Guide3

Question 11

A project with impending risks has 12 deliverables as subprojects, which will be executed in three
different locations involving multiple stakeholders. What should the risk manager do to organize the
prevailing risks?

Accepted Answer

A

Explanation: In complex projects with multiple deliverables, locations, and stakeholders, best practice is to combine individual risk identification (e.g., interviews, surveys) with group-based methods (e.g., focus groups, workshops) to ensure comprehensive risk coverage and diverse input. According to the PMBOK® Guide: “Both individual and group risk identification techniques are valuable. Combining interviews (individual) with facilitated workshops or focus groups (group) can help identify risks at all levels and build a comprehensive risk register for the overall project.” — PMBOK® Guide, 6th Edition, Section 11.2.2.2 (Data Gathering: Interviews, Facilitation) ISO 31000 also recommends a mix of approaches to ensure risks are not overlooked due to limited perspectives. Reference: PMBOK® Guide, 6th Edition, Section 11.2.2.2 ISO 31000:2018, Section 6.4

Question 12

One project in a program needs to be completed in 6 months because there is a large bonus for early
completion. Consequently, the program manager transfers all resources to this project and arranges
for employees to receive overtime pay.
Which risk response strategy is the program manager using in this scenario?

Accepted Answer

D

Explanation: In this scenario, the program manager is using the "Exploit" risk response strategy, which is aimed at ensuring that an opportunity is realized. By transferring all resources to the project and arranging for overtime pay, the program manager is taking proactive steps to ensure the project is completed early, thereby securing the large bonus. According to PMI, the "Exploit" strategy is used when the objective is to ensure that the opportunity is realized, typically involving actions that maximize the chances of achieving the desired outcome .

Question 13

During a project's initial planning session, the project team identifies a possible risk. The team is
under the impression that a critical vendor might delay delivery. This could impact both the project
schedule and budget. The team shares insights on the risk's likelihood and impact with the risk
manager.
What should the risk manager do?

Accepted Answer

D

Explanation: The probability-impact matrix is a standard tool for qualitative risk analysis, as recommended by PMI: "A probability and impact matrix is used to prioritize identified risks for further analysis or action by combining their probability of occurrence and impact on project objectives." — PMBOK® Guide, 6th Edition, Section 11.3 This ensures the most critical risks are prioritized for response planning. Reference: PMBOK® Guide, 6th Edition, Section 11.3

Question 14

A risk manager is assigned to a new system deployment project with a strict contractually agreed-on
schedule. One of the key risks identified is the availability of experts because many are shared on
other strategic projects in the organization.
What should the risk manager do to address this situation?

Accepted Answer

A

Explanation: According to the PMI Risk Management Professional (PMI-RMP)® Examination Content Outline1, one of the tasks in the domain of Risk Response is to call for a project team meeting to review risk strategies and make required adjustments, as needed, based on risk monitoring and reporting1. In this scenario, the risk manager should do this to address the situation of the availability of experts, which is a key risk for the project. The project team meeting will help the risk manager and the project team to evaluate the effectiveness of the current risk response plan, identify any new risks or changes in existing risks, and develop alternative risk strategies and actions to deal with the staffing issue. The project team meeting will also facilitate the communication and collaboration among the project team members and other stakeholders, and ensure that the project objectives and expectations are aligned. The risk manager should not implement a disciplined tracking method and report to stakeholders accordingly, because that is not a proactive risk response strategy, but rather a passive risk monitoring and reporting technique2. The risk manager should not escalate the staffing topic to the sponsor and request more budget for contingencies, because that is not a feasible or appropriate risk response strategy, as it does not address the root cause of the risk or provide a solution to the problem3. The risk manager should not revisit the project charter for scope adjustments and sign them off with the customer, because that is not a risk response strategy, but rather a scope management process that may have negative impacts on the project quality, cost, and schedule, and may violate the contractual agreement with the customer4. Reference: 1: PMI Risk Management Professional (PMI-RMP)® Examination Content Outline, page 102: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition, page 4563: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition, page 4364: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition, page 133.

Question 15

In a large enablement project with strict time lines, risks need to be closely monitored. The risk
manager publishes reports comparing planned enablement sessions with actual enablement
sessions, which help identify potential risks to be addressed.
Which technique is the risk manager using?

Accepted Answer

A

Explanation: Variance analysis is a technique used to compare actual project performance against planned performance. In this scenario, the risk manager is comparing planned enablement sessions with actual sessions to identify discrepancies that could indicate potential risks. This approach allows the project team to monitor performance closely and take corrective actions as needed to keep the project on track, which is crucial for projects with strict timelines .

Free PMI PMI-RMP Actual Exam Questions