PMI PMI-RMP Practice Exams
Last updated on Oct 22,2026- Exam Code: PMI-RMP
- Exam Name: PMI Risk Management Professional
- Certification Provider: PMI
- Latest update: Oct 22,2026
Question #141
While performing risk identification exercises, the risk manager often encounters biases from the project team .
How can the risk manager accurately identify what will trigger a risk?
- A . Remind the project team to keep an open mind
- B . Review the results with the project manager afterward
- C . Review published operational experience reports
- D . Use the mean answers provided by the project team
Correct Answer: C
Question #142
A risk manager has been assigned to replace a risk manager on sick leave. The new risk manager notices that the risk register is missing data that are key to the risk management process .
Which data will the risk manager require first?
- A . Risk description risk response, and quantitative data
- B . Project plan, risk complexity, and secondary risk
- C . Project plan, risk priority, and tool availability
- D . Risk description, risk probability, and risk impact
Correct Answer: C
C
C
20 1. During the construction of a housing development, a project team realizes they exceeded their materials budget during the first of three execution stages. The risk manager observed that the team did not notice that the cost of the materials increased due to continuous inflation in the steel market .
What could have been done during project planning to avoid overspending?
Question #143
During a project meeting, the project sponsor asks to close a project risk. The team does not recommend closing the risk because it is expected to be present in the next phase of the project work.
How should the risk manager address this concern?
- A . Compare the actual data with the subject matter expert (SME) criteria.
- B . Compare the actual data with the historical data.
- C . Compare the actual data with the risk baseline.
- D . Compare the actual data with the project sponsor’s expectation.
Correct Answer: C
Question #144
A project is evaluating a new software to streamline the current purchase order process. The current process is labor-intensive and involves printing, ink signatures, scanning, and emailing. Several team members gathered cycle time data to gauge the current process and evaluate the new process .
What should the risk manager do next with the data set?
- A . Perform a probability and impact assessment
- B . Perform Monte Carlo simulations
- C . Perform a sensitivity analysis
- D . Perform a risk data quality assessment
Correct Answer: D
D
Explanation:
After gathering cycle time data, the risk manager should perform a risk data quality assessment to ensure the data is accurate, reliable, and relevant for evaluating the current process and the new software.
A risk data quality assessment is a technique to evaluate the degree to which the data about risks is useful and accurate for risk management. It involves examining the reliability, credibility, accuracy, and validity of the data collected. A risk data quality assessment can help the risk manager to determine the confidence level of the risk analysis and the quality of the risk responses. Performing a risk data quality assessment is the next logical step after gathering the cycle time data, as it will help to ensure that the data is suitable for further analysis and decision making.
Reference: PMI Risk
Management Professional (PMI-RMP) Examination Content Outline and Specifications1, page 9; A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Sixth Edition, page 397.
D
Explanation:
After gathering cycle time data, the risk manager should perform a risk data quality assessment to ensure the data is accurate, reliable, and relevant for evaluating the current process and the new software.
A risk data quality assessment is a technique to evaluate the degree to which the data about risks is useful and accurate for risk management. It involves examining the reliability, credibility, accuracy, and validity of the data collected. A risk data quality assessment can help the risk manager to determine the confidence level of the risk analysis and the quality of the risk responses. Performing a risk data quality assessment is the next logical step after gathering the cycle time data, as it will help to ensure that the data is suitable for further analysis and decision making.
Reference: PMI Risk
Management Professional (PMI-RMP) Examination Content Outline and Specifications1, page 9; A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Sixth Edition, page 397.
6 1. What is an example of legal and regulatory requirements and/or constraints when assessing a project environment for threats and opportunities?
Question #145
The project manager wants to use an objective method to evaluate the key project risks and develop response plans.
What action should the risk manager propose?
- A . Ask the team to perform an earned value analysis.
- B . Review the lessons learned from other projects.
- C . Ask the team to prepare a Monte Carlo analysis.
- D . Ask the risk expert to perform a PESTLE evaluation.
Correct Answer: C
C
Explanation:
The action that the risk manager should propose is to ask the team to prepare a Monte Carlo analysis. This is a statistical technique that can be used to model the probability of different outcomes in a project. By performing a Monte Carlo analysis, the project manager can objectively evaluate key project risks and develop response plans based on this analysis.
A Monte Carlo analysis is a simulation technique that uses probability distributions and random
sampling to model the possible outcomes of a project risk event. It can help the project manager to evaluate the key project risks and develop response plans based on the expected value, standard deviation, and confidence intervals of the results. A Monte Carlo analysis can also provide information on the probability of achieving the project objectives, such as cost, schedule, and quality. A Monte Carlo analysis is an objective method because it does not rely on subjective judgments or opinions, but on mathematical calculations and statistical data.
Reference: PMBOK Guide, 6th edition, Section 1 1. 5.2.3, Monte Carlo Analysis1
C
Explanation:
The action that the risk manager should propose is to ask the team to prepare a Monte Carlo analysis. This is a statistical technique that can be used to model the probability of different outcomes in a project. By performing a Monte Carlo analysis, the project manager can objectively evaluate key project risks and develop response plans based on this analysis.
A Monte Carlo analysis is a simulation technique that uses probability distributions and random
sampling to model the possible outcomes of a project risk event. It can help the project manager to evaluate the key project risks and develop response plans based on the expected value, standard deviation, and confidence intervals of the results. A Monte Carlo analysis can also provide information on the probability of achieving the project objectives, such as cost, schedule, and quality. A Monte Carlo analysis is an objective method because it does not rely on subjective judgments or opinions, but on mathematical calculations and statistical data.
Reference: PMBOK Guide, 6th edition, Section 1 1. 5.2.3, Monte Carlo Analysis1
Question #146
A project manager wants to work on understanding the project risks. The project manager works with the integrated project team to develop the risk handling strategies for the identified risks .
How should the project manager work with these risk handling strategies?
- A . Review and revise the strategies periodically.
- B . Implement the strategies after completing the risk analysis.
- C . Implement the strategies immediately.
- D . Ensure the strategies are approved by the stakeholders.
Correct Answer: A
A
Explanation:
Risk handling strategies should be reviewed and revised periodically to ensure they remain effective and relevant as the project progresses. This allows the project manager to adapt to changing circumstances and minimize the impact of risks on the project.
According to the PMBOK® Guide, risk handling strategies are the specific actions that are taken to implement the risk response plan. The risk response plan is the output of the Plan Risk Responses process, which describes how the project team intends to address the identified risks. The risk handling strategies should be aligned with the risk response strategies, which are the general approaches to deal with the risks, such as avoid, transfer, mitigate, accept, exploit, share, enhance, or accept.
The project manager should work with the risk handling strategies by reviewing and revising them periodically. This is because the project risks are not static, but dynamic and uncertain. They may change over time due to various factors, such as changes in the project scope, schedule, cost, quality, resources, stakeholder expectations, assumptions, constraints, etc. Therefore, the project manager should monitor and control the risk handling strategies to ensure that they are still effective and appropriate for the current risk situation. The project manager should also update the risk register and the risk report with the results of the risk handling strategies, such as the residual risks, secondary risks, and risk triggers.
The other options are not valid for how the project manager should work with the risk handling strategies:
Implement the strategies after completing the risk analysis: This is not a valid option because the risk analysis is not the final step in the risk management process. The risk analysis is part of the Perform Qualitative Risk Analysis and Perform Quantitative Risk Analysis processes, which come after the Identify Risks process and before the Plan Risk Responses process. The risk analysis helps the project manager to prioritize and evaluate the risks, but it does not provide the specific actions to address them. The risk handling strategies are developed in the Plan Risk Responses process, which comes after the risk analysis.
Implement the strategies immediately: This is not a valid option because the risk handling strategies should not be implemented without proper planning and approval. The risk handling strategies should be documented in the risk response plan, which should be communicated and approved by the project sponsor, customer, and other relevant stakeholders. The risk handling strategies should also be integrated with the other project management plans, such as the scope, schedule, cost, quality, resource, communication, procurement, and stakeholder management plans. The risk handling strategies should be implemented only when the risk triggers or conditions occur, or when the project manager decides to do so based on the risk analysis and evaluation.
Ensure the strategies are approved by the stakeholders: This is not a valid option because the approval of the risk handling strategies is not the only thing that the project manager should do with them. The approval of the risk handling strategies is part of the Plan Risk Responses process, which comes before the Implement Risk Responses and Monitor Risks processes. The project manager should also implement, monitor, and control the risk handling strategies to ensure that they are effective and appropriate for the current risk situation.
Reference: PMBOK® Guide1, Risk Management Professional (PMI-RMP) ® Cert Guide1
A
Explanation:
Risk handling strategies should be reviewed and revised periodically to ensure they remain effective and relevant as the project progresses. This allows the project manager to adapt to changing circumstances and minimize the impact of risks on the project.
According to the PMBOK® Guide, risk handling strategies are the specific actions that are taken to implement the risk response plan. The risk response plan is the output of the Plan Risk Responses process, which describes how the project team intends to address the identified risks. The risk handling strategies should be aligned with the risk response strategies, which are the general approaches to deal with the risks, such as avoid, transfer, mitigate, accept, exploit, share, enhance, or accept.
The project manager should work with the risk handling strategies by reviewing and revising them periodically. This is because the project risks are not static, but dynamic and uncertain. They may change over time due to various factors, such as changes in the project scope, schedule, cost, quality, resources, stakeholder expectations, assumptions, constraints, etc. Therefore, the project manager should monitor and control the risk handling strategies to ensure that they are still effective and appropriate for the current risk situation. The project manager should also update the risk register and the risk report with the results of the risk handling strategies, such as the residual risks, secondary risks, and risk triggers.
The other options are not valid for how the project manager should work with the risk handling strategies:
Implement the strategies after completing the risk analysis: This is not a valid option because the risk analysis is not the final step in the risk management process. The risk analysis is part of the Perform Qualitative Risk Analysis and Perform Quantitative Risk Analysis processes, which come after the Identify Risks process and before the Plan Risk Responses process. The risk analysis helps the project manager to prioritize and evaluate the risks, but it does not provide the specific actions to address them. The risk handling strategies are developed in the Plan Risk Responses process, which comes after the risk analysis.
Implement the strategies immediately: This is not a valid option because the risk handling strategies should not be implemented without proper planning and approval. The risk handling strategies should be documented in the risk response plan, which should be communicated and approved by the project sponsor, customer, and other relevant stakeholders. The risk handling strategies should also be integrated with the other project management plans, such as the scope, schedule, cost, quality, resource, communication, procurement, and stakeholder management plans. The risk handling strategies should be implemented only when the risk triggers or conditions occur, or when the project manager decides to do so based on the risk analysis and evaluation.
Ensure the strategies are approved by the stakeholders: This is not a valid option because the approval of the risk handling strategies is not the only thing that the project manager should do with them. The approval of the risk handling strategies is part of the Plan Risk Responses process, which comes before the Implement Risk Responses and Monitor Risks processes. The project manager should also implement, monitor, and control the risk handling strategies to ensure that they are effective and appropriate for the current risk situation.
Reference: PMBOK® Guide1, Risk Management Professional (PMI-RMP) ® Cert Guide1
Question #147
When conducting a risk identification exercise, what two actions should the risk manager take? (Choose two.)
- A . Request a contingency reserve from management
- B . Arrange a team meeting, review the project’s scope, and discuss dependency mapping
- C . Ensure participants review relevant documents before attending the meeting
- D . Ensure that all the relevant stakeholders participate
- E . Update the risk register during the team meeting.
Correct Answer: BD
BD
Explanation:
According to the PMBOK Guide, one of the tools and techniques for the identify risks process is data gathering. Data gathering is the process of collecting information from various sources to identify potential risks that may affect the project objectives. Some of the data gathering techniques are brainstorming, interviews, checklists, assumption and constraint analysis, and document analysis 1. To conduct a risk identification exercise using data gathering techniques, the risk manager should take the following actions:
Arrange a team meeting, review the project’s scope, and discuss dependency mapping. This action can help the risk manager to facilitate a brainstorming session with the project team and other subject matter experts, where they can generate a list of potential risks based on the project scope and the dependencies among the project activities. Dependency mapping is a technique that helps to identify the relationships and interdependencies among the project components, such as tasks, resources, deliverables, and stakeholders2. By reviewing the project scope and discussing the dependency mapping, the risk manager can ensure that the risk identification exercise covers all the relevant aspects of the project and does not miss any important risk sources.
Ensure that all the relevant stakeholders participate. This action can help the risk manager to obtain different perspectives and insights from the stakeholders who have different roles, interests, and expectations in the project. Stakeholders are individuals or groups who can affect or be affected by the project outcomes. They may have valuable information, experience, or expertise that can help to identify potential risks that may not be obvious to the project team. By ensuring that all the relevant stakeholders participate in the risk identification exercise, the risk manager can increase the comprehensiveness and accuracy of the risk identification process and foster stakeholder engagement and buy-in 1.
Reference: PMBOK Guide, 6th edition, pages 397-399, 414-4151; Mastering the PMI Risk Management Professional (PMI-RMP) Exam, page 70
BD
Explanation:
According to the PMBOK Guide, one of the tools and techniques for the identify risks process is data gathering. Data gathering is the process of collecting information from various sources to identify potential risks that may affect the project objectives. Some of the data gathering techniques are brainstorming, interviews, checklists, assumption and constraint analysis, and document analysis 1. To conduct a risk identification exercise using data gathering techniques, the risk manager should take the following actions:
Arrange a team meeting, review the project’s scope, and discuss dependency mapping. This action can help the risk manager to facilitate a brainstorming session with the project team and other subject matter experts, where they can generate a list of potential risks based on the project scope and the dependencies among the project activities. Dependency mapping is a technique that helps to identify the relationships and interdependencies among the project components, such as tasks, resources, deliverables, and stakeholders2. By reviewing the project scope and discussing the dependency mapping, the risk manager can ensure that the risk identification exercise covers all the relevant aspects of the project and does not miss any important risk sources.
Ensure that all the relevant stakeholders participate. This action can help the risk manager to obtain different perspectives and insights from the stakeholders who have different roles, interests, and expectations in the project. Stakeholders are individuals or groups who can affect or be affected by the project outcomes. They may have valuable information, experience, or expertise that can help to identify potential risks that may not be obvious to the project team. By ensuring that all the relevant stakeholders participate in the risk identification exercise, the risk manager can increase the comprehensiveness and accuracy of the risk identification process and foster stakeholder engagement and buy-in 1.
Reference: PMBOK Guide, 6th edition, pages 397-399, 414-4151; Mastering the PMI Risk Management Professional (PMI-RMP) Exam, page 70
Question #148
A project manager works on a long-term and high visibility project at an organization that has a low risk appetite towards this project due to its impact on the company’s business. The project sponsors follow up weekly with the project manager, who was just informed by one of the risk owners that the exposure from two high-impact risks are hitting the risk thresholds .
What should the project manager do next?
- A . Update the project management plan to add contingency.
- B . Perform an assumptions and constraints analysis.
- C . Complete an assessment and confirm the response with the sponsors.
- D . Implement mitigation measures for those risks.
Correct Answer: C
C
Explanation:
According to the PMBOK Guide, 6th edition, Section 1 1. 4.3.1, Risk Thresholds, risk thresholds are the level of risk exposure above which risks are addressed and below which risks may be accepted. Risk thresholds are determined by the organization’s risk appetite, which is the degree of uncertainty that an organization is willing to accept in pursuit of its goals. Therefore, when the project manager is informed by the risk owner that the exposure from two high-impact risks are hitting the risk thresholds, the project manager should complete an assessment and confirm the response with the sponsors, who are the key stakeholders for the project and have a low risk appetite. The project manager should not update the project management plan, perform an assumptions and constraints analysis, or implement mitigation measures without first consulting with the sponsors and obtaining their approval.
Reference: PMBOK Guide, 6th edition, Section 1 1. 4.3.1, Risk Thresholds
C
Explanation:
According to the PMBOK Guide, 6th edition, Section 1 1. 4.3.1, Risk Thresholds, risk thresholds are the level of risk exposure above which risks are addressed and below which risks may be accepted. Risk thresholds are determined by the organization’s risk appetite, which is the degree of uncertainty that an organization is willing to accept in pursuit of its goals. Therefore, when the project manager is informed by the risk owner that the exposure from two high-impact risks are hitting the risk thresholds, the project manager should complete an assessment and confirm the response with the sponsors, who are the key stakeholders for the project and have a low risk appetite. The project manager should not update the project management plan, perform an assumptions and constraints analysis, or implement mitigation measures without first consulting with the sponsors and obtaining their approval.
Reference: PMBOK Guide, 6th edition, Section 1 1. 4.3.1, Risk Thresholds
Question #149
The project risk manager is in the process of identifying risks. The project sponsor has communicated that there is an influential stakeholder who has a senior management position. The other stakeholders do not feel comfortable speaking in front of this stakeholder .
What should the project risk manager do next to identify risks?
- A . Review the risk breakdown structure to ensure project scope is covered.
- B . Use the brainstorming technique to remove personal bias.
- C . Use expert judgment to remove ego or emotional conflict.
- D . Consider the Delphi technique to gather all stakeholder opinions.
Correct Answer: D
D
Explanation:
The Delphi technique allows the project risk manager to gather opinions from all stakeholders anonymously. This method would enable stakeholders to express their concerns without feeling uncomfortable in front of the influential stakeholder.
The Delphi technique is a tool used to make quick decisions with consensus. This technique consists of sending several sets of anonymous questions to each expert. This is followed by a group discussion after every round. The Delphi technique can help the project risk manager to identify risks by soliciting the opinions of all stakeholders without revealing their identities. This way, the stakeholders can express their views freely and honestly, without being influenced or intimidated by the influential stakeholder. The Delphi technique can also reduce personal bias, ego, or emotional conflict among the participants. The project risk manager can use the results of the Delphi technique to create a list of potential risks and their causes, effects, and probabilities.
Reference: 3, 2, 5
D
Explanation:
The Delphi technique allows the project risk manager to gather opinions from all stakeholders anonymously. This method would enable stakeholders to express their concerns without feeling uncomfortable in front of the influential stakeholder.
The Delphi technique is a tool used to make quick decisions with consensus. This technique consists of sending several sets of anonymous questions to each expert. This is followed by a group discussion after every round. The Delphi technique can help the project risk manager to identify risks by soliciting the opinions of all stakeholders without revealing their identities. This way, the stakeholders can express their views freely and honestly, without being influenced or intimidated by the influential stakeholder. The Delphi technique can also reduce personal bias, ego, or emotional conflict among the participants. The project risk manager can use the results of the Delphi technique to create a list of potential risks and their causes, effects, and probabilities.
Reference: 3, 2, 5
Question #150
A risk manager for a hospital extension project is leading a project team in developing a risk management plan. One team member is responsible for conducting risk identification. The team member just joined the team and is struggling to ensure the coverage of all risks that might arise in this complex project.
How should the risk manager address this concern?
- A . Develop a risk breakdown structure {RBS) to identify possible risks.
- B . Develop a risk impact analysis to assess the consequences of possible risks
- C . Develop a probability and impact matrix to analyze possible risks.
- D . Create a risk register to capture and track possible risks.
Correct Answer: A