View Full PMI PMI-RMP Exam Dumps and Practice Test Dumps

Question: 161. A project team identifies a risk that could affect multiple project objectives, including cost, schedule, and quality. What should the risk management professional do to ensure the risk is appropriately assessed?

1. Evaluate the risk’s potential effects across the relevant project objectives
   2. Assess only the objective with the highest financial impact
   3. Assign the risk to the quality manager and stop further analysis
   4. Treat the risk as an issue because it affects multiple objectives

Correct Answer: 1

Explanation:

A risk may affect more than one project objective, and its assessment should consider the potential effects across those objectives. A threat that influences cost, schedule, and quality may require a multidimensional assessment because the response to one objective could affect another. Focusing only on financial impact could overlook significant schedule or quality consequences. The risk should remain a risk unless its uncertainty has actually materialized into an issue. Appropriate ownership can be assigned, but assigning a risk owner does not eliminate the need for continued analysis and monitoring.

Question: 162. During a risk review, the team discovers that a previously planned mitigation action is no longer feasible because the required technology is unavailable. What should the team do?

1. Continue documenting the original response without changes
   2. Close the risk because the planned response cannot be implemented
   3. Reassess the risk and evaluate an alternative response
   4. Wait until the risk occurs before developing another response

Correct Answer: 3

Explanation:

Risk responses should remain appropriate and feasible as project conditions change. If a planned mitigation is no longer possible, the team should reassess the risk and evaluate alternative response strategies. The new response could involve avoidance, transfer, another mitigation approach, acceptance with contingency planning, or another suitable strategy depending on the circumstances. Keeping an obsolete response in the plan creates a false sense of preparedness. Closing the risk is inappropriate unless the underlying risk itself has disappeared, and waiting for the risk to occur may reduce available response options.

Question: 163. A project team is determining how quickly a risk may require action if its warning signs appear. Which risk characteristic should they evaluate?

1. Risk category
   2. Risk urgency
   3. Risk owner
   4. Risk data source

Correct Answer: 2

Explanation:

Risk urgency considers how soon a risk may require a response or how quickly conditions associated with the risk may develop. A risk with an imminent trigger or a short response window may deserve greater attention even if its probability or impact is not the highest among all identified risks. Risk category describes the source or grouping of a risk, while the risk owner is the person or entity responsible for monitoring and managing it. The data source describes where risk information originates rather than how quickly action may be needed.

Question: 164. A project manager is deciding between two alternatives. Alternative A has a potential gain of $80,000 with a 50% probability, while Alternative B has a potential gain of $50,000 with a 90% probability. What is the EMV of Alternative A?

1. $30,000
   2. $40,000
   3. $50,000
   4. $80,000

Correct Answer: 2

Explanation:

Expected monetary value is calculated by multiplying the monetary outcome by its probability. For Alternative A, the calculation is 0.50 × $80,000, resulting in an EMV of $40,000. EMV provides a way to quantify expected financial outcomes under uncertainty. It should not automatically be treated as the only decision criterion because factors such as strategic importance, risk appetite, contractual requirements, schedule implications, and nonfinancial consequences may also influence the decision. Alternative B would have a different EMV based on its own probability and potential gain.

Question: 165. A risk report contains probability and impact ratings collected from several subject matter experts. The risk manager is concerned that the ratings may be inconsistent because the experts used different interpretations of the rating scales. What should be done?

1. Standardize the rating criteria and clarify the definitions before finalizing the assessment
   2. Average all ratings without discussing the differences
   3. Remove the lowest and highest ratings automatically
   4. Replace qualitative analysis with Monte Carlo simulation immediately

Correct Answer: 1

Explanation:

Consistent rating criteria are important for producing meaningful qualitative risk assessments. If experts interpret probability or impact scales differently, the team should clarify the definitions, assumptions, and rating criteria before finalizing the assessment. Simply averaging ratings may conceal important differences in interpretation. Removing extreme ratings without understanding why they differ can also distort the assessment. Quantitative analysis may be useful later, but it does not automatically solve inconsistent qualitative definitions. Improving the quality and consistency of the underlying risk data should come first.

Question: 166. A project has a large number of identified risks, but only a small number appear capable of materially affecting project objectives. Which approach should the risk management professional use to focus limited analysis resources?

1. Perform detailed quantitative analysis on every risk
   2. Prioritize risks using qualitative analysis and then select those requiring deeper analysis
   3. Close all risks with low probability
   4. Assign identical response strategies to all risks

Correct Answer: 2

Explanation:

When resources are limited, qualitative risk analysis can help prioritize risks based on probability, impact, urgency, proximity, and other relevant factors. The team can then determine which higher-priority risks warrant additional quantitative analysis or more detailed response planning. Performing detailed analysis on every risk may not be efficient or proportionate to the value gained. Low-probability risks should not automatically be closed because some may have severe impacts. Risk responses should also be tailored to the nature and significance of each risk.

Question: 167. A project team identifies an opportunity to reduce procurement costs by partnering with another organization that has greater purchasing power. Which opportunity response strategy is most directly represented?

1. Exploit
   2. Accept
   3. Share
   4. Avoid

Correct Answer: 3

Explanation:

Sharing is an opportunity response strategy in which the project or organization allocates ownership or responsibility for capturing an opportunity to a third party that is better positioned to realize its benefits. In this scenario, partnering with an organization that has greater purchasing power can improve the project’s ability to capture procurement savings. Exploit would involve taking direct action to ensure the opportunity occurs. Acceptance would involve taking advantage of the opportunity if it occurs without proactive action, while avoidance is generally associated with threats rather than opportunities.

Question: 168. A project team discovers that implementing a response to one threat will require changing the project’s technical architecture. What should the team evaluate before approving the response?

1. Only the cost of the response
   2. Whether the response creates new risks or affects other project objectives
   3. Whether the original risk can be removed from all records
   4. Whether every stakeholder must become a risk owner

Correct Answer: 2

Explanation:

Risk responses can introduce secondary risks or affect other project objectives. A technical architecture change could create integration, security, schedule, cost, or performance risks even if it reduces the original threat. Therefore, the team should evaluate the broader consequences of the proposed response before approving and implementing it. Looking only at response cost may overlook important exposures. The original risk should remain properly documented until its status is resolved or otherwise updated, and stakeholder involvement should be determined according to responsibilities rather than automatically assigning ownership to everyone.

Question: 169. A risk response has been approved, but the risk owner reports that the required response resources have not yet been made available. What is the most appropriate immediate action?

1. Assume the response will be implemented later
   2. Remove the response from the risk register
   3. Escalate the resource constraint through the appropriate governance structure
   4. Close the risk because the response was approved

Correct Answer: 3

Explanation:

An approved response cannot effectively reduce risk exposure if the resources required to implement it are unavailable. The risk owner should communicate the constraint and escalate it through the appropriate project or organizational governance structure so that the issue can be resolved. Simply assuming resources will become available may leave the project exposed. Removing the response or closing the risk would misrepresent the project’s actual preparedness. Monitoring response implementation includes checking whether planned actions, resources, responsibilities, and timing are aligned with the approved risk strategy.

Question: 170. A project team wants to determine whether its risk management activities are being performed according to established policies and plans. Which activity is most appropriate?

1. Risk audit
   2. Monte Carlo simulation
   3. Decision tree analysis
   4. Risk categorization

Correct Answer: 1

Explanation:

A risk audit examines the effectiveness and implementation of risk management processes and responses. It can help determine whether risk management activities are being performed according to established plans, policies, procedures, and organizational practices. It may also identify lessons and opportunities for process improvement. Monte Carlo simulation is a quantitative modeling technique, decision tree analysis evaluates alternatives under uncertainty, and risk categorization groups risks by characteristics or sources. These techniques serve different purposes and do not replace the process-focused evaluation provided by a risk audit.

Question: 171. A project team identifies a threat that can be eliminated by changing the project’s scope so that the uncertain activity is no longer required. Which response strategy is being considered?

1. Transfer
   2. Mitigate
   3. Accept
   4. Avoid

Correct Answer: 4

Explanation:

Avoidance involves changing the project plan, scope, approach, or conditions so that the threat is eliminated or the project is protected from its potential effect. In this case, removing the uncertain activity from the project scope could eliminate the source of the threat. Mitigation would reduce probability or impact without necessarily eliminating the threat. Transfer would allocate ownership of the financial or other consequences to a third party, while acceptance would involve acknowledging the risk without proactive action to eliminate it.

Question: 172. A risk response reduces the probability of a threat from 60% to 20%, but the potential impact remains unchanged at $100,000. What is the reduction in expected monetary exposure?

1. $20,000
   2. $30,000
   3. $40,000
   4. $60,000

Correct Answer: 3

Explanation:

Before the response, the expected monetary exposure is 0.60 × $100,000 = $60,000. After the response, the exposure is 0.20 × $100,000 = $20,000. The reduction is therefore $60,000 − $20,000 = $40,000. This calculation illustrates how a response that reduces probability can reduce expected exposure even when the potential impact remains unchanged. In practice, the team should also consider the cost of implementing the response and any secondary or residual risks created by the response.

Question: 173. A project manager notices that a risk has a low probability but an extremely severe impact on regulatory compliance. How should the risk be treated during prioritization?

1. Automatically ignored because probability is low
   2. Considered using both probability and impact along with relevant urgency and organizational criteria
   3. Automatically transferred to the legal department
   4. Closed because the probability is below 50%

Correct Answer: 2

Explanation:

Risk prioritization should consider both probability and impact, along with other relevant factors such as urgency, proximity, detectability, and organizational thresholds where applicable. A low-probability event with severe regulatory consequences may still deserve significant attention. The team should not automatically dismiss or close it based solely on probability. Similarly, transferring the risk is not automatically appropriate simply because it involves regulatory concerns. The appropriate treatment depends on the project’s risk criteria, organizational context, and available response strategies.

Question: 174. During a risk review, the team identifies a new uncertainty that was not included in the original risk register and has no established response plan. What should the team do first?

1. Document and assess the emerging risk
   2. Assign a contingency reserve without analysis
   3. Ignore it until its probability can be proven
   4. Close it because it was not part of the original plan

Correct Answer: 1

Explanation:

An emerging risk or newly identified uncertainty should be documented and assessed as part of ongoing risk management. The team should determine its potential causes, probability, impact, urgency, ownership, and possible response strategies. Waiting for certainty before documenting it can reduce the team’s ability to prepare. A contingency reserve should not be assigned automatically without understanding the exposure and applicable organizational processes. The absence of the risk from the original plan does not make it irrelevant; risk management should remain adaptive throughout the project life cycle.

Question: 175. A project team is evaluating whether to purchase insurance for a threat that could create significant financial losses. Which response strategy does this represent?

1. Avoid
   2. Enhance
   3. Transfer
   4. Exploit

Correct Answer: 3

Explanation:

Purchasing insurance is a common example of transferring a threat because the financial consequences of a specified event are allocated to an external party according to the insurance agreement. The underlying risk may still exist, but the financial exposure is shifted or shared according to the terms of the contract. Avoidance eliminates the threat or its cause, while enhancement and exploit are opportunity response strategies. The project team should still evaluate insurance terms, exclusions, costs, residual exposure, and contractual responsibilities rather than assuming that all consequences have been eliminated.

Question: 176. A project manager wants to know which risk variables have the greatest influence on the range of possible project completion dates. Which analysis would provide this information?

1. Sensitivity analysis
   2. Risk audit
   3. Delphi technique
   4. Cause-and-effect analysis

Correct Answer: 1

Explanation:

Sensitivity analysis examines how changes in individual uncertain variables affect a project objective. For schedule risk, it can help identify which variables or risks contribute most significantly to variability in possible completion dates. This information allows the team to focus monitoring and response efforts on influential sources of uncertainty. A risk audit evaluates risk processes and responses, Delphi gathers structured expert input, and cause-and-effect analysis investigates underlying causes. Those techniques can support risk management but do not directly identify the variables with the greatest influence on an outcome.

Question: 177. A project has an approved risk threshold for schedule variance. During monitoring, the actual exposure exceeds that threshold. What should the risk management professional do?

1. Continue monitoring without changing the response
   2. Escalate or implement the predefined additional response according to the risk strategy
   3. Delete the threshold so the project remains compliant
   4. Close all schedule-related risks

Correct Answer: 2

Explanation:

A risk threshold defines a level of exposure or variation that stakeholders are willing to tolerate. When monitoring shows that exposure exceeds the established threshold, the team should follow the agreed governance and response approach. This may include escalating the situation, activating a contingency response, obtaining additional authority, or implementing another predefined action. Changing or deleting the threshold simply because it has been exceeded would undermine its purpose. Closing unrelated schedule risks would also fail to address the specific exposure that crossed the established tolerance level.

Question: 178. A risk owner reports that the response has been implemented successfully, but the risk’s residual exposure remains above the organization’s acceptable threshold. What should happen next?

1. Close the risk because the response was completed
   2. Ignore the residual exposure because the original response was successful
   3. Reassess the situation and determine whether additional action or escalation is required
   4. Remove the risk threshold from the risk management plan

Correct Answer: 3

Explanation:

Successful implementation of a response does not necessarily mean that the remaining risk is acceptable. If residual exposure remains above the established threshold, the team should reassess the risk and determine whether additional response actions, contingency measures, escalation, or another strategy is appropriate. Closing the risk merely because the planned response was completed could leave unacceptable exposure unmanaged. Thresholds are intended to guide decision-making, so exceeding one should trigger the appropriate governance and response process rather than being ignored or removed.

Question: 179. A project team is developing a risk report for senior stakeholders. Which information is most useful for enabling stakeholders to understand the current risk position?

1. Every historical discussion held by the risk team
   2. Only the number of risks currently in the register
   3. Current significant risks, exposure trends, response status, thresholds, and required decisions
   4. A list of team members who attended risk meetings

Correct Answer: 3

Explanation:

Effective risk reporting should provide stakeholders with relevant and actionable information about the current risk position. Significant risks, changes in exposure, response progress, threshold breaches, emerging concerns, and decisions requiring stakeholder attention can help leaders understand where action may be needed. Merely reporting the number of risks does not communicate their significance or current exposure. Historical discussions and meeting attendance may be useful records but are generally not the primary information senior stakeholders need to make risk-related decisions.

Question: 180. At the end of a project phase, the team reviews which risk responses were effective, which failed, and what should be changed in future phases. What is the PRIMARY purpose of this activity?

1. Eliminate the need for future risk identification
   2. Capture lessons that can improve future risk management activities
   3. Guarantee that similar risks will never occur again
   4. Replace the organization’s risk management policies automatically

Correct Answer: 2

Explanation:

Reviewing risk responses at the end of a project phase provides an opportunity to capture lessons learned and improve future risk management practices. The team can document which responses were effective, which assumptions proved inaccurate, how risk information was communicated, and where processes could be improved. These lessons can support better planning and decision-making in subsequent phases or projects. Lessons learned cannot guarantee that similar risks will never occur, and they do not automatically replace organizational policies. Instead, they provide evidence that can inform future improvements.