PMI PMI-RMP Practice Exams
Last updated on Oct 21,2026- Exam Code: PMI-RMP
- Exam Name: PMI Risk Management Professional
- Certification Provider: PMI
- Latest update: Oct 21,2026
Question #1
The project manager has completed four projects all with similar scope. The project manager has recently been assigned to start on a new project and believes some risks may occur again on this project.
What should the project manager do?
- A . Implement the risk response strategies into the risk plan.
- B . Inform the sponsor that these risks should be added according to experience.
- C . Add the risks to the risk register and determine a contingency.
- D . Discuss and evaluate the identified risks with the project team.
Correct Answer: D
D
Explanation:
The project manager should discuss the identified risks with the project team to ensure that everyone is aware of the potential risks and can provide input on the likelihood and impact of each risk. This collaborative approach will help in developing a comprehensive risk management plan. The project manager should discuss and evaluate the identified risks with the project team, as this is part of the risk identification process. The project manager can use their experience from previous projects to identify potential risks that may occur again on the new project, but they should also involve the project team to obtain their input and perspectives. The project team can help the project manager to validate, refine, and prioritize the identified risks, as well as to suggest possible risk responses. The project manager should document the identified risks and their characteristics in the risk register, which is a tool for risk management. The other options are not appropriate actions for the project manager to take. Implementing the risk response strategies into the risk plan is premature, as the project manager should first analyze and evaluate the risks before deciding on the best response strategies. Informing the sponsor that these risks should be added according to experience is not sufficient, as the project manager should also consult the project team and other stakeholders to ensure that all relevant risks are identified and assessed. Adding the risks to the risk register and determining a contingency is part of the risk analysis and response planning processes, which come after the risk identification process. The project manager should first discuss and evaluate the identified risks with the project team before moving to the next steps of risk management.
Reference: 2, 3, [5]
D
Explanation:
The project manager should discuss the identified risks with the project team to ensure that everyone is aware of the potential risks and can provide input on the likelihood and impact of each risk. This collaborative approach will help in developing a comprehensive risk management plan. The project manager should discuss and evaluate the identified risks with the project team, as this is part of the risk identification process. The project manager can use their experience from previous projects to identify potential risks that may occur again on the new project, but they should also involve the project team to obtain their input and perspectives. The project team can help the project manager to validate, refine, and prioritize the identified risks, as well as to suggest possible risk responses. The project manager should document the identified risks and their characteristics in the risk register, which is a tool for risk management. The other options are not appropriate actions for the project manager to take. Implementing the risk response strategies into the risk plan is premature, as the project manager should first analyze and evaluate the risks before deciding on the best response strategies. Informing the sponsor that these risks should be added according to experience is not sufficient, as the project manager should also consult the project team and other stakeholders to ensure that all relevant risks are identified and assessed. Adding the risks to the risk register and determining a contingency is part of the risk analysis and response planning processes, which come after the risk identification process. The project manager should first discuss and evaluate the identified risks with the project team before moving to the next steps of risk management.
Reference: 2, 3, [5]
Question #2
During the monthly executive review meeting, the project sponsor would like to understand how the project team has planned to manage risks that were identified in the last meeting .
What should the project manager do?
- A . Utilize a Monte Carlo assessment to provide risk related impacts.
- B . React to the secondary and residual risks only if they occur.
- C . Include secondary and residual risks as part of the response.
- D . Transfer secondary and residual risks to the project sponsor.
Correct Answer: C
C
Explanation:
The The project manager should include secondary and residual risks as part of the risk response plan. Secondary risks are those risks that arise as a direct result of implementing a risk response to a specific risk. Residual risks are those risks that are expected to remain after the planned responses of risks have been taken, as well as those that have been deliberately accepted. Both secondary and residual risks should be identified, analyzed, and monitored throughout the project life cycle. The project manager should communicate the risk response plan to the project sponsor and other stakeholders, and explain how the project team has planned to manage the secondary and residual risks12
Reference: 1: PMI Risk Management Professional (PMI-RMP) ® Handbook, page 10 2: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Seventh Edition, page 1 1. 2.2.1 project manager should include secondary and residual risks in the risk response plan, as they may still impact the project. Proactively addressing these risks will help the project team to be prepared and manage them effectively if they occur.
C
Explanation:
The The project manager should include secondary and residual risks as part of the risk response plan. Secondary risks are those risks that arise as a direct result of implementing a risk response to a specific risk. Residual risks are those risks that are expected to remain after the planned responses of risks have been taken, as well as those that have been deliberately accepted. Both secondary and residual risks should be identified, analyzed, and monitored throughout the project life cycle. The project manager should communicate the risk response plan to the project sponsor and other stakeholders, and explain how the project team has planned to manage the secondary and residual risks12
Reference: 1: PMI Risk Management Professional (PMI-RMP) ® Handbook, page 10 2: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Seventh Edition, page 1 1. 2.2.1 project manager should include secondary and residual risks in the risk response plan, as they may still impact the project. Proactively addressing these risks will help the project team to be prepared and manage them effectively if they occur.
Question #3
During a risk reassessment workshop with the project team and some external stakeholders, two key external stakeholders are overemphasizing the impact of a few project risks. This has led to a conflict .
How should the risk manager handle this situation?
- A . Request for a skilled facilitator to help resolve conflicts that have arise.
- B . Refer to the team’s ground rules on how to resolve conflicts.
- C . Run a sensitivity analysis to check which risks have the most impact.
- D . Use the assumption analysis techniques to validate the assumptions.
Correct Answer: B
B
Explanation:
According to the PMBOK Guide, one of the tools and techniques for the plan risk management process is ground rules. Ground rules are the rules of conduct or behavior that are established by the project team and other stakeholders to ensure a productive and respectful environment for risk management activities. Ground rules can cover various aspects of risk management, such as roles and responsibilities, communication protocols, decision-making processes, meeting agendas, and conflict resolution methods 1. By referring to the team’s ground rules on how to resolve conflicts, the risk manager can handle the situation where two key external stakeholders are overemphasizing the impact of a few project risks. This can help the risk manager to maintain a constructive and collaborative atmosphere in the risk reassessment workshop, as well as to ensure that the risk analysis and prioritization are based on objective and consistent criteria.
Some of the other options are not relevant or appropriate for the question scenario: Requesting for a skilled facilitator to help resolve conflicts that have arisen is not a feasible or effective option, as it would interrupt the flow of the risk reassessment workshop and delay the risk management process. The risk manager should be able to facilitate the workshop and handle conflicts by themselves, using the tools and techniques that they have planned and agreed upon with the project team and stakeholders.
Running a sensitivity analysis to check which risks have the most impact is a technique for the perform quantitative risk analysis process, which is not applicable in the context of a risk reassessment workshop. A sensitivity analysis is a quantitative method that examines the effect of varying one risk parameter at a time on the project objectives, such as cost or schedule. It is not a tool for resolving conflicts or validating the impact of risks, as it does not consider the interrelationships and dependencies among risks or the probability of risk occurrence 1.
Using the assumption analysis technique to validate the assumptions is a technique for the identify risks process, which is not suitable for the situation where conflicts have already arisen in the risk reassessment workshop. An assumption analysis is a technique that explores the validity of the assumptions that are made during the project planning and risk management processes. It is not a tool for resolving conflicts or verifying the impact of risks, as it does not address the root causes or the consequences of the disagreements among the stakeholders 1.
Reference: PMBOK Guide, 6th edition, pages 407-408, 431-432, 437-438, 441-4421; PMI-RMP Exam Content Outline, 2015, pages 7-8.
B
Explanation:
According to the PMBOK Guide, one of the tools and techniques for the plan risk management process is ground rules. Ground rules are the rules of conduct or behavior that are established by the project team and other stakeholders to ensure a productive and respectful environment for risk management activities. Ground rules can cover various aspects of risk management, such as roles and responsibilities, communication protocols, decision-making processes, meeting agendas, and conflict resolution methods 1. By referring to the team’s ground rules on how to resolve conflicts, the risk manager can handle the situation where two key external stakeholders are overemphasizing the impact of a few project risks. This can help the risk manager to maintain a constructive and collaborative atmosphere in the risk reassessment workshop, as well as to ensure that the risk analysis and prioritization are based on objective and consistent criteria.
Some of the other options are not relevant or appropriate for the question scenario: Requesting for a skilled facilitator to help resolve conflicts that have arisen is not a feasible or effective option, as it would interrupt the flow of the risk reassessment workshop and delay the risk management process. The risk manager should be able to facilitate the workshop and handle conflicts by themselves, using the tools and techniques that they have planned and agreed upon with the project team and stakeholders.
Running a sensitivity analysis to check which risks have the most impact is a technique for the perform quantitative risk analysis process, which is not applicable in the context of a risk reassessment workshop. A sensitivity analysis is a quantitative method that examines the effect of varying one risk parameter at a time on the project objectives, such as cost or schedule. It is not a tool for resolving conflicts or validating the impact of risks, as it does not consider the interrelationships and dependencies among risks or the probability of risk occurrence 1.
Using the assumption analysis technique to validate the assumptions is a technique for the identify risks process, which is not suitable for the situation where conflicts have already arisen in the risk reassessment workshop. An assumption analysis is a technique that explores the validity of the assumptions that are made during the project planning and risk management processes. It is not a tool for resolving conflicts or verifying the impact of risks, as it does not address the root causes or the consequences of the disagreements among the stakeholders 1.
Reference: PMBOK Guide, 6th edition, pages 407-408, 431-432, 437-438, 441-4421; PMI-RMP Exam Content Outline, 2015, pages 7-8.
Question #4
A project manager has determined that they cannot outsource work nor eliminate the scope. They also discover that they cannot buy insurance or mitigate the risk .
What should the project manager do?
- A . Avoid the risk
- B . Transfer the risk
- C . Ignore the risk
- D . Accept the risk
Correct Answer: D
D
Explanation:
Since the project manager cannot avoid, transfer, or mitigate the risk, the only remaining option is to accept the risk and develop a contingency plan to handle it if it occurs.
According to the PMI-RMP Exam Content Outline1, one of the tools and techniques for risk response planning is risk response strategies. These are the actions that the project manager and the project team take to address the identified risks, either positive or negative. For negative risks or threats, the PMI-RMP Exam Content Outline1 lists four possible strategies: avoid, transfer, mitigate, and accept. Avoid risk means changing the project plan to eliminate the threat or its impact2. For example, changing the scope, schedule, or budget to avoid a risk.
Transfer risk means shifting the impact of a threat to a third party, such as a contractor, vendor, or insurer2. For example, buying insurance, outsourcing, or using performance bonds to transfer a risk. Mitigate risk means reducing the probability and/or impact of a threat2. For example, conducting more tests, adopting best practices, or providing training to mitigate a risk.
Accept risk means acknowledging the existence of a threat and being willing to deal with its consequences2. For example, doing nothing, establishing a contingency reserve, or developing a contingency plan to accept a risk.
In this question, the project manager has determined that they cannot outsource work (transfer) nor eliminate the scope (avoid). They also discover that they cannot buy insurance (transfer) or mitigate the risk. Therefore, the only remaining option is to accept the risk. Accepting the risk does not mean ignoring the risk, but rather recognizing it and preparing for its potential occurrence and impact. Therefore, the best answer is D.
Reference: 1: PMI-RMP Exam Content Outline, page 9. 2: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Sixth Edition, page 443.
D
Explanation:
Since the project manager cannot avoid, transfer, or mitigate the risk, the only remaining option is to accept the risk and develop a contingency plan to handle it if it occurs.
According to the PMI-RMP Exam Content Outline1, one of the tools and techniques for risk response planning is risk response strategies. These are the actions that the project manager and the project team take to address the identified risks, either positive or negative. For negative risks or threats, the PMI-RMP Exam Content Outline1 lists four possible strategies: avoid, transfer, mitigate, and accept. Avoid risk means changing the project plan to eliminate the threat or its impact2. For example, changing the scope, schedule, or budget to avoid a risk.
Transfer risk means shifting the impact of a threat to a third party, such as a contractor, vendor, or insurer2. For example, buying insurance, outsourcing, or using performance bonds to transfer a risk. Mitigate risk means reducing the probability and/or impact of a threat2. For example, conducting more tests, adopting best practices, or providing training to mitigate a risk.
Accept risk means acknowledging the existence of a threat and being willing to deal with its consequences2. For example, doing nothing, establishing a contingency reserve, or developing a contingency plan to accept a risk.
In this question, the project manager has determined that they cannot outsource work (transfer) nor eliminate the scope (avoid). They also discover that they cannot buy insurance (transfer) or mitigate the risk. Therefore, the only remaining option is to accept the risk. Accepting the risk does not mean ignoring the risk, but rather recognizing it and preparing for its potential occurrence and impact. Therefore, the best answer is D.
Reference: 1: PMI-RMP Exam Content Outline, page 9. 2: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Sixth Edition, page 443.
Question #5
A risk manager for a financial organization is assigned to support a project team in developing a custom software solution to manage loans .
Which document should the risk manager request first from the project sponsor to identify major risks?
- A . Risk management plan
- B . Clients’ credit scores
- C . Organization’s mission and vision
- D . Historical data from the credit portfolio
Correct Answer: A
A
Explanation:
According to the PMBOK Guide, 6th edition, Chapter 11: Project Risk Management1, the risk manager should request the risk management plan first from the project sponsor to identify major risks. This is because:
The risk management plan is a document that describes how risk management activities will be planned, structured, and performed throughout the project life cycle. The risk management plan provides guidance and direction for the risk manager and the project team on how to identify, analyze, prioritize, respond, and monitor risks, as well as how to allocate resources, define roles and responsibilities, establish risk categories, and document risk-related information.
The risk management plan is a key input for the risk identification process, which is the process of determining which risks may affect the project and documenting their characteristics. The risk identification process involves using various tools and techniques, such as brainstorming, interviews, checklists, assumptions and constraints analysis, SWOT analysis, expert judgment, and data gathering, to generate a comprehensive list of potential risks that may impact the project objectives, such as scope, schedule, cost, quality, or stakeholder satisfaction.
The risk management plan helps the risk manager to identify major risks by providing the following information:
The risk management strategy, which defines the approach and methodology for managing risks, including the level of detail, rigor, and frequency of the risk management activities, and the alignment with the project management plan and the organization’s policies and procedures. The risk thresholds, which specify the acceptable level of risk exposure for the project and its objectives, based on the risk appetite, tolerance, and attitude of the project sponsor and other key stakeholders.
The risk categories, which are a group of potential causes of risk that can be used to structure and organize the identified risks into a hierarchical structure, such as a risk breakdown structure (RBS). The risk categories can be derived from various sources, such as the project scope statement, the work breakdown structure (WBS), the organizational process assets, or the industry standards and practices.
The roles and responsibilities, which define the authority and accountability of the project team members and other stakeholders involved in the risk management process, such as the risk manager, the risk owner, the risk committee, the risk auditor, and the risk reviewer.
The resources, which specify the budget, time, and human resources allocated for the risk management process, as well as the tools, techniques, and software applications that will be used to support the risk management activities.
The communication and reporting, which describe the type, format, content, frequency, and distribution of the risk-related information and reports that will be shared among the project team and other stakeholders, such as the risk register, the risk report, the risk dashboard, and the risk audit report.
The other options are not the best documents to request first from the project sponsor to identify major risks because:
The clients’ credit scores are a specific type of data that can be used to assess the credit risk of the loans, but they do not provide a comprehensive view of all the potential risks that may affect the project, such as technical, operational, legal, regulatory, or market risks.
The organization’s mission and vision are high-level statements that describe the purpose, values, and goals of the organization, but they do not provide specific guidance or direction on how to manage risks for the project, such as the risk management strategy, methodology, or tools.
The historical data from the credit portfolio are a source of information that can be used to analyze the past performance and trends of the loans, but they do not reflect the current or future uncertainties and opportunities that may impact the project, such as changes in customer behavior, technology, competition, or regulation.
Reference: PMBOK Guide, 6th edition, Chapter 11: Project Risk Management1
Risk Management Professional (PMI-RMP) ® Exam Cert Guide2
A
Explanation:
According to the PMBOK Guide, 6th edition, Chapter 11: Project Risk Management1, the risk manager should request the risk management plan first from the project sponsor to identify major risks. This is because:
The risk management plan is a document that describes how risk management activities will be planned, structured, and performed throughout the project life cycle. The risk management plan provides guidance and direction for the risk manager and the project team on how to identify, analyze, prioritize, respond, and monitor risks, as well as how to allocate resources, define roles and responsibilities, establish risk categories, and document risk-related information.
The risk management plan is a key input for the risk identification process, which is the process of determining which risks may affect the project and documenting their characteristics. The risk identification process involves using various tools and techniques, such as brainstorming, interviews, checklists, assumptions and constraints analysis, SWOT analysis, expert judgment, and data gathering, to generate a comprehensive list of potential risks that may impact the project objectives, such as scope, schedule, cost, quality, or stakeholder satisfaction.
The risk management plan helps the risk manager to identify major risks by providing the following information:
The risk management strategy, which defines the approach and methodology for managing risks, including the level of detail, rigor, and frequency of the risk management activities, and the alignment with the project management plan and the organization’s policies and procedures. The risk thresholds, which specify the acceptable level of risk exposure for the project and its objectives, based on the risk appetite, tolerance, and attitude of the project sponsor and other key stakeholders.
The risk categories, which are a group of potential causes of risk that can be used to structure and organize the identified risks into a hierarchical structure, such as a risk breakdown structure (RBS). The risk categories can be derived from various sources, such as the project scope statement, the work breakdown structure (WBS), the organizational process assets, or the industry standards and practices.
The roles and responsibilities, which define the authority and accountability of the project team members and other stakeholders involved in the risk management process, such as the risk manager, the risk owner, the risk committee, the risk auditor, and the risk reviewer.
The resources, which specify the budget, time, and human resources allocated for the risk management process, as well as the tools, techniques, and software applications that will be used to support the risk management activities.
The communication and reporting, which describe the type, format, content, frequency, and distribution of the risk-related information and reports that will be shared among the project team and other stakeholders, such as the risk register, the risk report, the risk dashboard, and the risk audit report.
The other options are not the best documents to request first from the project sponsor to identify major risks because:
The clients’ credit scores are a specific type of data that can be used to assess the credit risk of the loans, but they do not provide a comprehensive view of all the potential risks that may affect the project, such as technical, operational, legal, regulatory, or market risks.
The organization’s mission and vision are high-level statements that describe the purpose, values, and goals of the organization, but they do not provide specific guidance or direction on how to manage risks for the project, such as the risk management strategy, methodology, or tools.
The historical data from the credit portfolio are a source of information that can be used to analyze the past performance and trends of the loans, but they do not reflect the current or future uncertainties and opportunities that may impact the project, such as changes in customer behavior, technology, competition, or regulation.
Reference: PMBOK Guide, 6th edition, Chapter 11: Project Risk Management1
Risk Management Professional (PMI-RMP) ® Exam Cert Guide2
Question #6
A project manager for a large product development project assigned a risk manager to perform the risk management. The project sponsor questions why this project requires a risk manager as it is similar to a previous project with a developed risk strategy.
How should the risk manager explain the need for a risk strategy specific to this project?
- A . A risk strategy is a best practice and ensures quality in the project planning.
- B . A project specific risk strategy includes enough information to respond to audits and compliance requirements.
- C . A risk strategy ensures alignment of the organizational structure to the specific project.
- D . A risk strategy aligns individual project risk thresholds with organizational risk appetite.
Correct Answer: D
Question #7
Some issues and unexpected results were found after completing the first phase of a project. The project team is planning the next phase and team members want to avoid the previous issues .
What should the risk manager do to avoid the previous issues?
- A . Use the information for a risk workshop.
- B . Improve monitoring and controlling of activities.
- C . Document the issues in the lessons learned.
- D . Create an issue log to share with the team.
Correct Answer: A
A
Explanation:
According to the PMI Risk Management Professional (PMI-RMP) ® Examination Content Outline1, one of the tasks in the domain of Risk Identification is to use the information from project documents, lessons learned, and other sources to facilitate the risk identification process 1. A risk workshop is a tool and technique for risk identification that involves bringing together the project team, stakeholders, subject matter experts, and risk management experts to identify and analyze the project risks in a structured and collaborative manner2. In this scenario, the risk manager should use the information from the issues and unexpected results found in the first phase of the project for a risk workshop, to avoid the previous issues in the next phase. The risk workshop will help the risk manager and the project team to identify the root causes of the issues, assess their probability and impact, and develop appropriate risk responses. The risk workshop will also enable the risk manager to update the risk register and the risk report with the new information and communicate the risk status to the relevant stakeholders. The risk manager should not improve monitoring and controlling of activities, because that is not a specific action to avoid the previous issues, but rather a general practice that should be done throughout the project life cycle3. The risk manager should not document the issues in the lessons learned, because that is not enough to avoid the previous issues, but rather a way to capture and share the knowledge gained from the project for future reference4. The risk manager should not create an issue log to share with the team, because that is not a proactive risk management technique, but rather a reactive way to track and resolve the issues that have already occurred5.
Reference: 1: PMI Risk Management Professional (PMI-RMP) ®
Examination Content Outline, page 82: A Guide to the Project Management Body of Knowledge
(PMBOK® Guide) C Sixth Edition, page 4003: A Guide to the Project Management Body of Knowledge
(PMBOK® Guide) C Sixth Edition, page 4564: A Guide to the Project Management Body of Knowledge
(PMBOK® Guide) C Sixth Edition, page 1005: What Is an Issue Log? Templates & Tips6.
A
Explanation:
According to the PMI Risk Management Professional (PMI-RMP) ® Examination Content Outline1, one of the tasks in the domain of Risk Identification is to use the information from project documents, lessons learned, and other sources to facilitate the risk identification process 1. A risk workshop is a tool and technique for risk identification that involves bringing together the project team, stakeholders, subject matter experts, and risk management experts to identify and analyze the project risks in a structured and collaborative manner2. In this scenario, the risk manager should use the information from the issues and unexpected results found in the first phase of the project for a risk workshop, to avoid the previous issues in the next phase. The risk workshop will help the risk manager and the project team to identify the root causes of the issues, assess their probability and impact, and develop appropriate risk responses. The risk workshop will also enable the risk manager to update the risk register and the risk report with the new information and communicate the risk status to the relevant stakeholders. The risk manager should not improve monitoring and controlling of activities, because that is not a specific action to avoid the previous issues, but rather a general practice that should be done throughout the project life cycle3. The risk manager should not document the issues in the lessons learned, because that is not enough to avoid the previous issues, but rather a way to capture and share the knowledge gained from the project for future reference4. The risk manager should not create an issue log to share with the team, because that is not a proactive risk management technique, but rather a reactive way to track and resolve the issues that have already occurred5.
Reference: 1: PMI Risk Management Professional (PMI-RMP) ®
Examination Content Outline, page 82: A Guide to the Project Management Body of Knowledge
(PMBOK® Guide) C Sixth Edition, page 4003: A Guide to the Project Management Body of Knowledge
(PMBOK® Guide) C Sixth Edition, page 4564: A Guide to the Project Management Body of Knowledge
(PMBOK® Guide) C Sixth Edition, page 1005: What Is an Issue Log? Templates & Tips6.
13 1. A project manager for a predictive project just received a scope change request where additional development is required .
What should the risk manager do to support the project manager with this scope change request?
Question #8
A large, land-based infrastructure project has begun. The project makes assumptions about the site conditions and has economic, technical, and environmental constraints
What should the project manager do next to determine risk impact of assumptions and constraints?
- A . Add all assumptions and constraints to the risk register.
- B . Add the risk impact of the assumptions in the risk register.
- C . Add the assumptions and constraints to the assumption log.
- D . Add the assumptions and constraints in the project charter.
Correct Answer: C
C
Explanation:
The project manager should add the assumptions and constraints to the assumption log to track and analyze their impact on the project. The assumption log is a project document that records all project assumptions and constraints throughout the project life cycle. (Reference: PMBOK Guide, 6th Edition, p. 89)
The project manager should add the assumptions and constraints to the assumption log, which is a project document that records the assumptions and constraints that affect the project scope, schedule, cost, and quality. The assumption log can help the project manager to identify and analyze the risks that may arise from the validity of the assumptions and the impact of the constraints. The assumption log can also be used as an input for the Identify Risks process, where the project manager can determine the risk impact of the assumptions and constraints and add them to the risk register accordingly.
Reference: PMI, A Guide to the Project Management Body of Knowledge
(PMBOK® Guide), Sixth Edition, 2017, p. 38, 397.
C
Explanation:
The project manager should add the assumptions and constraints to the assumption log to track and analyze their impact on the project. The assumption log is a project document that records all project assumptions and constraints throughout the project life cycle. (Reference: PMBOK Guide, 6th Edition, p. 89)
The project manager should add the assumptions and constraints to the assumption log, which is a project document that records the assumptions and constraints that affect the project scope, schedule, cost, and quality. The assumption log can help the project manager to identify and analyze the risks that may arise from the validity of the assumptions and the impact of the constraints. The assumption log can also be used as an input for the Identify Risks process, where the project manager can determine the risk impact of the assumptions and constraints and add them to the risk register accordingly.
Reference: PMI, A Guide to the Project Management Body of Knowledge
(PMBOK® Guide), Sixth Edition, 2017, p. 38, 397.
Question #9
After the initial assessment of a new project, a project manager found that in order to complete the expected results, detailed and exhaustive planning will be required to ensure the product’s characteristics and quality .
What should the risk manager propose to the project manager what to do?
- A . Use a predictive approach for the delivery.
- B . Use a hybrid approach for the delivery.
- C . Use an adaptive approach for the delivery.
- D . Use an agile approach for the delivery.
Correct Answer: A
Question #10
A risk manager of a major project facilitates a meeting to develop the risk management plan .
What two factors does the risk manager need to consider to ensure an effective risk management plan is developed? (Choose two.)
- A . Applying modern risk management techniques.
- B . Aligning to project constraints and priorities.
- C . Ensuring risk response strategies mitigate all risks.
- D . Minimizing implementation costs.
- E . Obtaining stakeholder acceptance
Correct Answer: BE
BE
Explanation:
To ensure an effective risk management plan, the risk manager needs to consider aligning the plan to project constraints and priorities and obtaining stakeholder acceptance, as these factors will help ensure that the plan is relevant and supported by the project team and stakeholders.
According to the PMI-RMP Handbook, the risk management plan is a document that describes how risk management activities will be structured and performed on the project. It is one of the main outputs of the Plan Risk Management process. The risk management plan should consider the following factors to ensure its effectiveness:
Aligning to project constraints and priorities: The risk management plan should be aligned with the project objectives, scope, schedule, cost, quality, resources, and stakeholder expectations. It should also reflect the project’s risk appetite, tolerance, and threshold levels, which indicate the degree of uncertainty that the project can accept. The risk management plan should prioritize the risk management activities based on the project’s critical success factors and key performance indicators. Obtaining stakeholder acceptance: The risk management plan should be developed with the involvement and input of key stakeholders, such as the project sponsor, customer, team members, subject matter experts, and other relevant parties. The risk management plan should be communicated and approved by the stakeholders to ensure their commitment and support for the risk management process. The risk management plan should also define the roles and responsibilities of the stakeholders in risk management, as well as the reporting and escalation mechanisms.
The other options are not valid factors for ensuring an effective risk management plan: Applying modern risk management techniques: The risk management plan should apply the appropriate risk management techniques that suit the project’s context, complexity, and characteristics. The techniques should be based on the best practices and standards of the profession, such as the PMBOK® Guide and the Practice Standard for Project Risk Management. The techniques do not have to be modern or innovative, as long as they are effective and efficient. Ensuring risk response strategies mitigate all risks: The risk management plan should define the risk response strategies that will be used to address the identified risks. However, the risk response strategies do not have to mitigate all risks, as some risks may be accepted, transferred, or avoided. The risk response strategies should be based on the risk analysis and evaluation, which consider the probability and impact of the risks, as well as the cost and benefits of the responses.
Minimizing implementation costs: The risk management plan should consider the budget and resources available for the risk management activities. However, the risk management plan should not aim to minimize the implementation costs at the expense of the quality and effectiveness of the risk management process. The risk management plan should balance the costs and benefits of the risk management activities, and ensure that they provide value to the project.
Reference: PMI-RMP Handbook1, PMBOK® Guide2, Practice Standard for Project Risk Management2
BE
Explanation:
To ensure an effective risk management plan, the risk manager needs to consider aligning the plan to project constraints and priorities and obtaining stakeholder acceptance, as these factors will help ensure that the plan is relevant and supported by the project team and stakeholders.
According to the PMI-RMP Handbook, the risk management plan is a document that describes how risk management activities will be structured and performed on the project. It is one of the main outputs of the Plan Risk Management process. The risk management plan should consider the following factors to ensure its effectiveness:
Aligning to project constraints and priorities: The risk management plan should be aligned with the project objectives, scope, schedule, cost, quality, resources, and stakeholder expectations. It should also reflect the project’s risk appetite, tolerance, and threshold levels, which indicate the degree of uncertainty that the project can accept. The risk management plan should prioritize the risk management activities based on the project’s critical success factors and key performance indicators. Obtaining stakeholder acceptance: The risk management plan should be developed with the involvement and input of key stakeholders, such as the project sponsor, customer, team members, subject matter experts, and other relevant parties. The risk management plan should be communicated and approved by the stakeholders to ensure their commitment and support for the risk management process. The risk management plan should also define the roles and responsibilities of the stakeholders in risk management, as well as the reporting and escalation mechanisms.
The other options are not valid factors for ensuring an effective risk management plan: Applying modern risk management techniques: The risk management plan should apply the appropriate risk management techniques that suit the project’s context, complexity, and characteristics. The techniques should be based on the best practices and standards of the profession, such as the PMBOK® Guide and the Practice Standard for Project Risk Management. The techniques do not have to be modern or innovative, as long as they are effective and efficient. Ensuring risk response strategies mitigate all risks: The risk management plan should define the risk response strategies that will be used to address the identified risks. However, the risk response strategies do not have to mitigate all risks, as some risks may be accepted, transferred, or avoided. The risk response strategies should be based on the risk analysis and evaluation, which consider the probability and impact of the risks, as well as the cost and benefits of the responses.
Minimizing implementation costs: The risk management plan should consider the budget and resources available for the risk management activities. However, the risk management plan should not aim to minimize the implementation costs at the expense of the quality and effectiveness of the risk management process. The risk management plan should balance the costs and benefits of the risk management activities, and ensure that they provide value to the project.
Reference: PMI-RMP Handbook1, PMBOK® Guide2, Practice Standard for Project Risk Management2