PMI-RMP

What is the primary purpose of a risk management framework in project management?

• ATo eliminate all project risks before the project begins
• BTo provide structure and guidance for risk management activities throughout the project l…
• CTo assign blame when risks materialize into issues
• DTo document only the risks that have already occurred

A project manager is developing a risk management plan for a new enterprise software implementation. Which of the following should be established FIRST when creating the risk management framework?

• ADetailed risk response strategies for all identified risks
• BRisk thresholds and escalation criteria
• CThe methodology, roles and responsibilities, and timing for risk management activities
• DA comprehensive list of all potential risks

An organization is implementing a standardized risk management framework across all projects. Which of the following BEST describes how this framework should be tailored for individual projects?

• AThe framework should be applied identically to all projects regardless of size or complex…
• BThe framework should be tailored based on project size, complexity, risk exposure, and or…
• CSmall projects should skip risk management entirely
• DOnly high-risk projects need a risk management framework

Which document establishes the governance approach for risk management by defining risk categories, probability and impact scales, and risk reporting formats?

• ARisk register
• BRisk management plan
• CIssue log
• DChange control log

What is the difference between risk appetite and risk tolerance?

• ARisk appetite is the specific amount of risk acceptable on a single project, while risk t…
• BRisk appetite is the degree of uncertainty an organization is willing to accept in pursui…
• CRisk appetite and risk tolerance are synonymous terms with no meaningful difference
• DRisk tolerance is set by the project manager, while risk appetite is determined by the cu…

An organization has stated that it has a "low risk appetite" for safety-related risks but a "high risk appetite" for innovation risks. How should a project manager interpret this guidance?

• AAll risks should be treated with the same level of caution regardless of category
• BSafety risks require aggressive mitigation strategies while innovation risks can be accep…
• CThe project should avoid all innovation to minimize risk
• DRisk appetite statements are irrelevant to project-level risk management

A project has established that cost overruns up to 5% are within risk tolerance, but overruns exceeding 10% require immediate escalation to the steering committee. This represents an example of:

• ARisk appetite statement
• BRisk threshold definition
• CRisk response strategy
• DRisk transfer mechanism

During project execution, a risk is identified that would cause a schedule delay of 3 weeks. The project steering committee has established that any risk with a potential impact greater than 2 weeks must be escalated immediately. What should the project manager do?

• AHandle the risk independently without escalation since it has not occurred yet
• BEscalate the risk to the steering committee as it exceeds the defined risk threshold
• CWait until the risk actually occurs before escalating
• DReduce the estimated impact to 2 weeks to avoid escalation

Who is typically responsible for establishing risk governance structures at the organizational level?

• AIndividual project managers
• BExecutive management and the board of directors
• CExternal consultants
• DProject team members

A project manager is developing a risk management plan and needs to define roles and responsibilities. Which role is typically responsible for providing the resources and funding needed for risk responses?

• ARisk owner
• BProject sponsor
• CRisk manager
• DProject team member

In a matrix organization, a project manager is struggling to get functional managers to participate in risk identification workshops. What is the BEST approach to improve stakeholder engagement for risk management?

• AProceed without their input and identify risks independently
• BEscalate immediately to the CEO
• CClarify roles and responsibilities in the risk management plan and involve the sponsor in…
• DCancel the risk identification workshops

Which of the following is an essential element of an effective risk governance structure?

• ACentralized decision-making with no input from project teams
• BClear escalation paths, defined authority levels, and transparent reporting mechanisms
• CKeeping risk information confidential from stakeholders to avoid panic
• DDelegating all risk decisions to external vendors

What characterizes a strong risk culture within an organization?

• APunishing employees who identify risks that might delay projects
• BEncouraging open discussion of uncertainties, rewarding proactive risk identification, an…
• CHiding risks from senior management to avoid project cancellation
• DAssigning all risk management activities to a single risk officer

An organization has a policy that requires all projects to conduct risk identification workshops at project initiation and at the beginning of each phase. This is an example of:

• ARisk appetite
• BRisk governance policy
• CRisk tolerance
• DRisk response strategy

A project team member identifies a significant technical risk but is hesitant to report it because the project manager has previously criticized team members for "negative thinking." What does this situation indicate about the project's risk culture?

• AThe project has a mature risk culture where only significant risks are reported
• BThe project has a weak risk culture that suppresses risk identification through punitive…
• CThis is normal and appropriate risk governance
• DThe team member lacks proper risk management training

What is the key difference between a threat and an opportunity in risk management?

• AThreats are identified by stakeholders, while opportunities are identified by the project…
• BThreats are uncertain events that could have a negative impact on objectives, while oppor…
• CThreats are only related to cost, while opportunities are only related to schedule
• DThreats must be escalated, while opportunities can be ignored

A project manager is leading a software development project. During a team brainstorming session, a developer suggests that using a new open-source library could reduce development time by 30% but might introduce compatibility issues. How should the project manager categorize this?

• AAs a pure threat that should be avoided
• BAs a pure opportunity that should be exploited
• CAs both an opportunity (time savings) and a threat (compatibility issues) that should be…
• DAs neither — this is just a technical decision, not a risk