PMI PMI-RMP Practice Exams
Last updated on Oct 22,2026- Exam Code: PMI-RMP
- Exam Name: PMI Risk Management Professional
- Certification Provider: PMI
- Latest update: Oct 22,2026
The project team recorded a risk in the risk register indicating that weather-related delays may impact equipment delivery during project execution. When it is time to request the equipment shipment there is bad weather, but the client wants the equipment delivered anyway .
What should the project manager do?
- A . Wait until the weather improves before sending the equipment.
- B . Ask the project sponsor to approve shipping the equipment.
- C . Proceed with the planned risk response to move the equipment.
- D . Request the shipment of the equipment to satisfy the client.
C
Explanation:
The project manager should proceed with the planned risk response to move the equipment, as this is the best way to deal with the weather-related risk that was identified and recorded in the risk register. A risk register is a document that lists all the identified risks, their causes, impacts, probabilities, and responses for a project 1. A risk response is a strategy or action that is taken to reduce the negative effects or enhance the positive effects of a risk event2. A risk response should be planned and executed according to the risk management plan, which is a document that describes how risk management activities will be structured and performed on a project3. The risk management plan should also define the roles and responsibilities, risk categories, risk appetite and thresholds, risk identification and analysis methods, risk response strategies, risk monitoring and reporting mechanisms, and risk governance mechanisms3. Therefore, the project manager should follow the risk management plan and the risk register to implement the planned risk response to move the equipment, as this is the most effective and efficient way to manage the risk and meet the project objectives. Waiting until the weather improves before sending the equipment, asking the project sponsor to approve shipping the equipment, or requesting the shipment of the equipment to satisfy the client are not the best options to deal with the weather-related risk. Waiting until the weather improves may cause further delays and increase the cost and scope of the project, as well as damage the relationship with the client. Asking the project sponsor to approve shipping the equipment may not be necessary or feasible, as the project sponsor may not have the authority or the availability to make such a decision. Requesting the shipment of the equipment to satisfy the client may not be realistic or safe, as the bad weather may pose a threat to the quality and integrity of the equipment, as well as the health and safety of the people involved in the transportation. These options may also deviate from the risk management plan and the risk register, which may create confusion and inconsistency in the risk management process.
Reference: 1, 2, 3.
A risk manager is assigned to a new system deployment project with a strict contractually agreed-on schedule. One of the key risks identified is the availability of experts because many are shared on other strategic projects in the organization.
What should the risk manager do to address this situation?
- A . Implement a disciplined tracking method and report to stakeholders accordingly.
- B . Call for a project team meeting to review risk strategies and make required adjustments.
- C . Escalate the staffing topic to the sponsor and request more budget for contingencies.
- D . Revisit the project charter for scope adjustments and sign them off with the customer.
A
Explanation:
According to the PMI Risk Management Professional (PMI-RMP) ® Examination Content Outline1, one of the tasks in the domain of Risk Response is to call for a project team meeting to review risk strategies and make required adjustments, as needed, based on risk monitoring and reporting 1. In this scenario, the risk manager should do this to address the situation of the availability of experts, which is a key risk for the project. The project team meeting will help the risk manager and the project team to evaluate the effectiveness of the current risk response plan, identify any new risks or changes in existing risks, and develop alternative risk strategies and actions to deal with the staffing issue. The project team meeting will also facilitate the communication and collaboration among the project team members and other stakeholders, and ensure that the project objectives and expectations are aligned. The risk manager should not implement a disciplined tracking method and report to stakeholders accordingly, because that is not a proactive risk response strategy, but rather a passive risk monitoring and reporting technique2. The risk manager should not escalate the staffing topic to the sponsor and request more budget for contingencies, because that is not a feasible or appropriate risk response strategy, as it does not address the root cause of the risk or provide a solution to the problem3. The risk manager should not revisit the project charter for scope adjustments and sign them off with the customer, because that is not a risk response strategy, but rather a scope management process that may have negative impacts on the project quality, cost, and schedule, and may violate the contractual agreement with the customer4.
Reference: 1: PMI Risk Management Professional (PMI-RMP) ® Examination Content Outline, page 102: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Sixth Edition, page 4563: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Sixth Edition, page 4364: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Sixth Edition, page 133.
A risk manager has been assigned to a new project and learns that stakeholders and project team members are spread across multiple time zones. Furthermore, many project team members have not worked together in the past. These items are identified as potential risks and added to the risk register.
How should the risk manager improve collaboration during risk planning?
- A . Gather risk information from all parties and compile all submissions into a strength, weaknesses, opportunities, and threats (SWOT) analysis template.
- B . Create a repository for project documents and related artifacts that can be accessed by all parties.
- C . Communicate program metrics to all parties and create a scorecard to measure the effectiveness.
- D . Work with the project manager to develop a start-up workshop and colocate the team if permitted.
In the middle of a construction project, the primary construction materials provider canceled the contract and moved to a competitor offering a higher price. The risk manager considers this a low-impact issue because many construction materials providers can fulfill the project demands. However, after informing the stakeholders of this issue, the major investor is about to drop their intention to continue executing the project. The risk manager does not understand their decision.
What should the risk manager do next to understand the major stakeholder’s decision regarding the project?
- A . Perform a risk impact analysis.
- B . Perform a risk reserve analysis.
- C . Perform a procurement analysis.
- D . Perform a stakeholder impact and influence analysis.
D
Explanation:
A stakeholder impact and influence analysis is a technique to identify the level of interest and power of each stakeholder, and to assess how they may affect or be affected by the project outcomes. It can help the risk manager to understand the stakeholder’s perspective and expectations, and to communicate with them effectively. In this case, the risk manager should perform a stakeholder impact and influence analysis to understand why the major investor is about to drop their intention to continue executing the project, and to address their concerns and needs. A risk impact analysis, a risk reserve analysis, and a procurement analysis are not relevant to the stakeholder’s decision, and would not help the risk manager to understand their rationale.
Reference: PMI Risk Management Professional (PMI-RMP) ® Exam Content Outline1, PMI Practice Standard for Project Risk Management2, Risk Management Professional (PMI-RMP) ® Cert Guide3
A project manager has requested a risk manager facilitate risk identification on a project. While facilitating this effort, the project manager wants to ensure that stakeholders interact and provide their expertise so that an exhaustive list of risks is created .
Which risk identification technique should the risk manager use?
- A . Prompt lists
- B . Interviews
- C . Delphi technique
- D . Nominal group technique
D
Explanation:
The risk identification technique that the risk manager should use is the nominal group technique. This technique involves bringing stakeholders together to brainstorm potential risks and then ranking them based on their importance. This allows for interaction and collaboration among stakeholders, which can help ensure that an exhaustive list of risks is created.
The nominal group technique is a risk identification technique that involves the interaction and collaboration of stakeholders to generate an exhaustive list of risks. It is a structured process that allows each participant to share their ideas independently, then rank and prioritize them as a group. This technique ensures that all opinions are considered and reduces the influence of dominant or biased individuals12
Reference: 1: PMI Risk Management Professional (PMI-RMP) ® Handbook, page 10 2: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Seventh Edition, page 1 1. 2.2.1
.
The trigger for a highly categorized threat has occurred. The risk has a set response plan.
Who is responsible for developing responses to risk and monitoring the implementation status of the risk response?
- A . Risk Action Owner
- B . Risk Owner
- C . Project Manager
- D . Product Manager
A company manages confidential customer information, and a data breach exposing sensitive information was discovered .
What should the risk manager do?
- A . Execute the security risks contingency plan.
- B . Get a report of customers affected by the risk.
- C . Identify residual and secondary risks.
- D . Coordinate a response with the risk owner.
D
Explanation:
According to the PMBOK Guide, the risk owner is the person assigned the responsibility of monitoring the risk and implementing the risk response plan. The risk owner should be involved in the risk response execution and evaluation, and should communicate the results and outcomes to the relevant stakeholders. In the case of a data breach, the risk owner should coordinate a response with the risk manager and other parties involved, such as the security team, the legal team, the customer service team, and the senior management. The risk owner should also report the status of the risk and the effectiveness of the response plan to the risk manager. The risk manager should oversee the risk response process and ensure that the risk is handled appropriately and in alignment with the project objectives and stakeholder expectations.
Reference: = PMBOK Guide, 6th edition, pages 452-453; The Standard for Risk Management in Portfolios, Programs, and Projects, page 79.
In a project to promote public health and mitigate health risks, the national health authorities intend to take actions to limit the risks of harmful insects by using pesticides; however, it is expected that some residents will have negative health effects due to the use of the pesticides but according to the assessment completed by the health authorities, not moving forward with this plan will have much more serious consequences on public health rather than following through with the original plan .
How should the project manager address this concern with the health authorities?
- A . Suspend the project as the secondary risk will negatively impact residents’ health which is not acceptable.
- B . Consult with health experts to provide a risk trigger before using pesticides that will impact the
residents. - C . Assess and record associated secondary risks and proceed to treat them as any other risks.
- D . Proceed with the project as normal since a minor number of residents will be effected negatively.
C
Explanation:
The project manager should assess and record associated secondary risks and proceed to treat them as any other risks. This involves identifying and evaluating the potential negative health effects of using pesticides and developing a plan to mitigate these risks. While it is important to consider the concerns of residents, the health authorities have determined that not moving forward with the plan will have more serious consequences on public health.
Secondary risks are those that arise as a direct outcome of implementing a risk response. In this case, the use of pesticides is a risk response to limit the risks of harmful insects, but it may also cause negative health effects to some residents. This is a secondary risk that needs to be assessed and recorded in the risk register, along with its probability, impact, and response plan. The project manager should not suspend the project, as this would ignore the primary risk of harmful insects. The project manager should not consult with health experts to provide a risk trigger, as this is not a valid risk management technique. A risk trigger is an indication that a risk event is about to occur or has occurred, not a condition that prevents a risk response from being implemented. The project manager should not proceed with the project as normal, as this would neglect the secondary risk and its potential consequences. The project manager should follow the risk management process and treat the secondary risk as any other risk in the project.
Reference: PMI. (2017). A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Sixth Edition. Chapter 11: Project Risk Management, p. 408. 5
A project manager realizes the team undertaking the project work has fallen behind the planned schedule. The risk manager identifies a new risk resulting from this delay and will need to understand how this will affect the project deadline.
Which kind of numerical analysis should be performed to understand the worst-case scenarios?
- A . Earned value analysis
- B . Qualitative risk analysis
- C . Sensitivity analysis
- D . Root cause analysis
C
Explanation:
sensitivity analysis is a technique that helps to determine which risks have the most potential impact on the project. It examines the extent to which the uncertainty of each project element affects the objective being examined when all other uncertain elements are held at their baseline values. Sensitivity analysis is often used to assess the risk exposure of the project schedule and cost, and to identify the critical risks that need to be managed. In this case, the risk manager needs to understand how the new risk resulting from the delay will affect the project deadline, which is the objective being examined. By performing sensitivity analysis, the risk manager can compare the relative importance and interaction of the new risk with other existing risks, and determine the worst-case scenarios for the project completion date. Sensitivity analysis can also help to prioritize risks for response planning and to develop contingency reserves. This is part of the Perform Quantitative Risk Analysis process in the PMBOK® Guide2.
Reference: 1: PMI Risk Management Professional (PMI-RMP) ® Examination Content Outline 2: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) C Sixth Edition
The project manager asks the risk manager to determine the initial risk assessment for a six month
initiative that is about to kick-off .
Which two artifacts will help the risk manager conduct the related analysis? (Choose two.)
- A . Work breakdown structure (W&S)
- B . Project organizational chart
- C . Configuration management plan
- D . Brainstorming
- E . Monte Carlo analysis
AB
Explanation:
According to the PMBOK Guide, one of the tools and techniques for the identify risks process is data gathering. Data gathering is the process of collecting information from various sources to identify potential risks that may affect the project objectives. One of the data gathering techniques is document analysis, which involves reviewing and analyzing available project documents and other information sources to identify potential risks 1.
Two of the artifacts that will help the risk manager conduct the initial risk assessment for a six month initiative are the work breakdown structure (WBS) and the project organizational chart. These are two of the project documents that can be analyzed for potential risks in the project.
The work breakdown structure (WBS) is a hierarchical decomposition of the total scope of work to be carried out by the project team to accomplish the project objectives and create the required deliverables. The WBS represents the work defined in the current approved project scope statement and provides the framework for detailed cost estimating, resource planning, and risk management. By reviewing the WBS, the risk manager can identify potential risks that are associated with each work package, deliverable, or scope element, such as technical complexity, quality requirements, dependencies, assumptions, constraints, and uncertainties 1.
The project organizational chart is a graphical representation of the project team members and their reporting relationships. The project organizational chart depicts the roles and responsibilities of the project team, as well as the communication channels and authority levels among the team members and other stakeholders. By reviewing the project organizational chart, the risk manager can identify potential risks that are related to the project team structure, such as resource availability, skill gaps, team dynamics, stakeholder expectations, and conflict resolution 1.
Some of the other options are not relevant or appropriate for the question scenario:
The configuration management plan is a component of the project management plan that describes how the project team will manage the configuration of the project’s deliverables and documentation. The configuration management plan defines the processes, tools, and methods for identifying, controlling, tracking, and auditing the changes to the project’s baselines. The configuration management plan is not an artifact that will help the risk manager conduct the initial risk assessment, as it does not provide information on the potential risks that may affect the project objectives or scope 1.
Brainstorming is a technique for the identify risks process that involves generating a list of potential risks through a group discussion. Brainstorming is not an artifact, but rather a tool and technique for identifying risks. Brainstorming can help the risk manager conduct the initial risk assessment, but only after reviewing and analyzing the available project documents and information sources 1. Monte Carlo analysis is a technique for the perform quantitative risk analysis process that involves simulating the combined effect of individual project risks and other sources of uncertainty on the project objectives, such as cost or schedule. Monte Carlo analysis is not an artifact, but rather a tool and technique for analyzing risks. Monte Carlo analysis can help the risk manager conduct the initial risk assessment, but only after identifying and prioritizing the individual project risks and their probability and impact 1.
Reference: PMBOK Guide, 6th edition, pages 397-399, 414-415, 431-432, 441-442, 156-157, 168-169, 89-901; PMI-RMP Exam Content Outline, 2015, page 7.