PMI PMI-RMP Practice Exams
Last updated on Oct 21,2026- Exam Code: PMI-RMP
- Exam Name: PMI Risk Management Professional
- Certification Provider: PMI
- Latest update: Oct 21,2026
The risk manager notices that in their workshops, most of the risks identified are threats .
What should the risk manager do to increase the number of opportunities identified?
- A . Use the Delphi technique involving experts who have identified opportunities in the past
- B . Interview more stakeholders who have a positive mindset
- C . Conduct a strengths, weaknesses, opportunities, and threats (SWOT) analysis
- D . Conduct a political, economic, sociological, technological, legal, and environmental (PESTLE) analysis
B
Explanation:
The risk management plan is a document that describes how risk management activities will be structured and performed on a project. It defines the roles and responsibilities, risk categories, risk appetite and thresholds, risk identification and analysis methods, risk response strategies, risk monitoring and reporting mechanisms, and risk governance mechanisms 1. The risk management plan should be aligned with the project management plan, which defines the project scope, schedule, cost, quality, and other aspects2. When an organization decides to accelerate a key project, it means that the project objectives, assumptions, constraints, and environment have changed. This will affect the risk exposure and profile of the project, as well as the risk management approach and resources. Therefore, the first action for the project risk manager to take is to revise the risk management plan to reflect the new situation and ensure that the risk management process is still effective and efficient. Revising the risk management plan may involve updating the risk categories, risk appetite and thresholds, risk identification and analysis methods, risk response strategies, risk monitoring and reporting mechanisms, and risk governance mechanisms to suit the accelerated project. The project risk manager should also communicate the revised risk management plan to the relevant stakeholders and obtain their approval and support 1. Ensuring sufficient resources are available, updating the risk register, and meeting with the project’s stakeholders are all important actions to take when accelerating a project, but they are not the first action. These actions should be done after revising the risk management plan, as they depend on the updated risk management approach and process. For example, the project risk manager may need to allocate more resources to risk management activities, identify and analyze new or changed risks, implement new or modified risk responses, and report the risk status and performance to the stakeholders based on the revised risk management plan 1.
Reference: 2, 1.
Business rhythm can fluctuate greatly between different industries and vary between companies within the same industry .
What should be used 10 determine how often a project’s risk register should be updated or reviewed in a given year when the project is in an industry with a very high business rhythm?
- A . The risk management plan
- B . The risk triggers
- C . The risk prioritization criteria
- D . The portfolio management plan
A
Explanation:
The risk management plan provides guidance on how often the risk register should be updated or reviewed. It takes into account the specific industry, project, and organizational context, including the business rhythm.
During the project’s lifecycle, project risk managers must monitor any risks and address risk responses .
What does this level of monitoring consist of?
- A . Carry out the agreed risk response action should the risk occur.
- B . Provide a numerical estimate of the overall effect of risk on the objectives.
- C . Track identified risks and maintain the viability of response plans.
- D . Develop the overall risk management strategy for risk integration.
The stakeholders of a building construction project are not comfortable with the project manager’s handling of the project as they believe there is a financial risk. The project manager asks the risk manager to assist in demonstrating to the stakeholders that the project risks are under a tolerable threshold.
What should the risk manager do first to demonstrate this to the stakeholders?
- A . Gather other project risk historical information.
- B . Gather and reconcile project risk report data.
- C . Work with the sponsor to convince the risks are under control.
- D . Work with the team to ensure the project is in good health.
A project team has completed the risk identification steps in a project and compiled a list of 25 risks.
The team wants to create response plans for all the risks to avoid any future issues, but the resources and constraints limit the options.
What should the risk manager do?
- A . Perform a sensitivity analysis.
- B . Perform a qualitative risk analysis.
- C . Perform a constraint analysis.
- D . Perform a root-cause analysis.
As a project approached completion, a risk manager conducted a risk response audit and verified the effectiveness of risk responses .
What should the risk manager do next?
- A . Close and communicate the results of the risk response actions.
- B . Run a workshop to analyze the effectiveness of the risk plan.
- C . Conduct a risk reserve analysis and document the results.
- D . Verify that all risk response actions have been documented.
A
18 1. A risk manager and project team are managing a software system project, which is expected to be completed within 12 months. The project is currently halfway through, and the team has just delivered the second version of the prototype. During the weekly status meeting, a team member reported that an important stakeholder is facing an issue, which will likely result in a change request that is outside the scope of the current prototype.
What should the risk manager advise the team to do first?
An experienced and the only developer on a software implementation project will be on leave for several weeks. The risk of this critical resource’s availability was added to the risk register. Contingencies were made for a support developer to job shadow this resource, depending on how things go prior to their leave. The project team was pleased with the backup plan and the new resource was able to shadow for a few weeks.
What should the risk manager do next?
- A . Update the risk register to indicate the risk has occurred and close out the expired risk from the register.
- B . Update, continuously monitor, and communicate the residual and secondary risks of the backup resource on the project.
- C . Hire a permanent developer to support the project, and work with the backup resource to eliminate this risk.
- D . Hire another developer to support the project, contingent on when the experienced developer returns.
During a brainstorming session, a stakeholder identifies a risk that, if realized, could greatly impact their team. The stakeholder insists that this particular risk should be mitigated to the greatest extent possible, however, the majority of other stakeholders feel that different risks have higher probabilities of occurring.
Which action should the risk manager take to address this risk?
- A . Accept the identified risk because other stakeholders feel that there are higher priority risks to address.
- B . Mitigate the identified risk in order to reduce the probability of impacting the stakeholder’s team.
- C . Escalate the identified risk to the project sponsor and allow them to determine the best course of action.
- D . Add the identified risk to the risk register for future probability and impact analysis.
D
Explanation:
Adding the identified risk to the risk register is the best action that the risk manager can take to address this risk. The risk register is a document that records the identified risks, their characteristics, their status, and their responses. By adding the risk to the risk register, the risk manager can ensure that the risk is not overlooked or ignored, and that it will be subjected to further probability and impact analysis to determine its priority and response strategy. Accepting the identified risk because other stakeholders feel that there are higher priority risks to address is not a good practice, as it may lead to overlooking a potentially significant risk that could affect the stakeholder’s team. Mitigating the identified risk in order to reduce the probability of impacting the stakeholder’s team is not advisable, as it may be a premature or unnecessary action without proper analysis of the risk probability and impact. Escalating the identified risk to the project sponsor and allowing them to determine the best course of action is not appropriate, as it may be an overreaction or a sign of lack of competence from the risk manager, who should be able to handle the risk identification and analysis process.
Reference: PMI Risk Management Professional (PMI-RMP) ® Exam Content Outline1, PMI Practice Standard for Project Risk Management2, Risk Management Professional (PMI-RMP) ® Cert Guide3
In a large mobile network deployment project, there is delay risk due to insufficient staffing. The risk manager is considering executing a response plan, which involves allowing staff members to work overtime. However, this action may lead to excessive additional cost .
What should the risk manager do?
- A . Document the concern over the potential excessive additional cost.
- B . Manage the potential excessive additional cost as a new risk.
- C . Ensure the project sponsor has the risk appetite for the residual risk created by allowing overtime.
- D . Prepare a detailed response plan for the residual risk with a clear owner and time line to ensure there are no impacts to the project.
A project manager is working on a high priority and high profile project. The project team had identified three opportunities, and after analysis, risk responses were recorded. Although risk responses were adequate for the identified opportunities, two of those opportunities were not acted upon. During the risk audit, the project manager found out that several of the planned risk responses were not implemented.
What should the project manager have done to avoid this?
- A . Provided regular training to the risk owners for plan implementation
- B . Determined risk triggers and thresholds in the risk response plan
- C . Increased communications to influence stakeholder risk responses
- D . Updated the project schedule, adding risk owner implementation tasks.
D
Explanation:
The project manager should have updated the project schedule by adding risk owner implementation tasks. This would have ensured that the planned risk responses were implemented in a timely manner and tracked as part of the project schedule. This would also have allowed the project manager to monitor the progress of risk response implementation and take corrective action if necessary.
According to the PMI-RMP Exam Content Outline and Specifications1, one of the tasks under Domain 4: Risk Monitoring and Reporting is to “update project schedule, budget, and risk register with risk response outcomes”. This implies that the project manager should have added the risk owner implementation tasks to the project schedule, so that they can be tracked and monitored. By doing so, the project manager could have ensured that the planned risk responses were executed as intended, and that the opportunities were not missed.
Reference: PMI-RMP Exam Content Outline and Specifications, page 10.