PMI Risk Management Professional Free Sample Questions

Risk thresholds and the definitions of probability and impact must be tailored to reflect the varying risk appetites of stakeholders. In a multicultural environment, what is considered 'High Impact' by a risk-averse culture might be seen as 'Medium' by a risk-seeking one. Aligning these definitions ensures a unified approach to prioritizing risks.

In agile environments, risk management is continuous. Integrating risk reviews into existing ceremonies like daily stand-ups (for immediate blockers/risks) and retrospectives (for process risks) ensures that risk management keeps pace with the rapid development cycle without adding unnecessary administrative overhead.

The Risk Breakdown Structure (RBS) is a hierarchical representation of potential sources of risk. During planning, it is established to ensure that the risk identification process is systematic and comprehensive, preventing the team from overlooking entire categories of risk (e.g., technical, external, management).

Zero risk is theoretically impossible in complex projects and usually implies missing out on all opportunities (positive risks). The professional approach is to facilitate a discussion on risk appetite vs. risk threshold, helping the sponsor define specific, measurable limits (thresholds) for acceptable variance rather than an impossible absolute.

Enterprise Environmental Factors (EEFs) include external conditions like government regulations, industry standards, and legal requirements. Reviewing these is essential to ensure the risk strategy accounts for non-negotiable external constraints.

The Risk Management Plan defines the Methodology (approaches, tools, and data sources) and Funding (budget for risk management activities). It plans how to manage risk, but does not contain the actual risks themselves (Risk Register) or the specific responses (Risk Response Plan).

Funding is a key component of the Risk Management Plan, detailing the budget allocated for risk management activities.

This is False. The Risk Management Plan is a subsidiary plan of the Project Management Plan that describes how risk management activities will be structured and performed. The specific risks and responses are documented in the Risk Register, which is a project document, not part of the Risk Management Plan itself.

Non-linear scales (like logarithmic or exponential) are used to emphasize high-impact events. They prevent high-impact risks from being 'averaged out' by low probability in simple linear multiplication, ensuring that catastrophic risks remain visible and prioritized.

A Prompt List is a predetermined list of risk categories (e.g., PESTLE, TECOP, VUCA) used as a framework to facilitate risk identification. Strategically, it helps reduce cognitive bias and ensures that the team doesn't focus solely on technical risks while ignoring external or commercial factors.

The Risk Management Plan is the specific document where roles, responsibilities, and authority levels for risk management activities are defined.