Free PMI-RMP sample questions

Correct answer: To provide a hierarchical framework for potential sources of risk to ensure coverage.

The Risk Breakdown Structure (RBS) is a hierarchical representation of potential sources of risk. During planning, it is established to ensure that the risk identification process is systematic and comprehensive, preventing the team from overlooking entire categories of risk (e.g., technical, external, management).

Correct answer: Educate the sponsor that opportunities often carry uncertainty and defining a measurable risk threshold is more practical than zero risk.

Zero risk is theoretically impossible in complex projects and usually implies missing out on all opportunities (positive risks). The professional approach is to facilitate a discussion on risk appetite vs. risk threshold, helping the sponsor define specific, measurable limits (thresholds) for acceptable variance rather than an impossible absolute.

Correct answer: Enterprise Environmental Factors (EEFs)

Enterprise Environmental Factors (EEFs) include external conditions like government regulations, industry standards, and legal requirements. Reviewing these is essential to ensure the risk strategy accounts for non-negotiable external constraints.

Correct answers: Methodology; Funding

The Risk Management Plan defines the Methodology (approaches, tools, and data sources) and Funding (budget for risk management activities). It plans *how* to manage risk, but does not contain the actual risks themselves (Risk Register) or the specific responses (Risk Response Plan).

Funding is a key component of the Risk Management Plan, detailing the budget allocated for risk management activities.

Correct answer: False

This is False. The Risk Management Plan is a subsidiary plan of the Project Management Plan that describes *how* risk management activities will be structured and performed. The specific risks and responses are documented in the Risk Register, which is a project document, not part of the Risk Management Plan itself.

Correct answer: It places greater weight on high-impact risks, making them more prominent in analysis.

Non-linear scales (like logarithmic or exponential) are used to emphasize high-impact events. They prevent high-impact risks from being 'averaged out' by low probability in simple linear multiplication, ensuring that catastrophic risks remain visible and prioritized.

Correct answer: It provides a framework (like PESTLE or TECOP) to ensure all categories of risk are considered.

A Prompt List is a predetermined list of risk categories (e.g., PESTLE, TECOP, VUCA) used as a framework to facilitate risk identification. Strategically, it helps reduce cognitive bias and ensures that the team doesn't focus solely on technical risks while ignoring external or commercial factors.

Correct answer: Risk Management Plan

The Risk Management Plan is the specific document where roles, responsibilities, and authority levels for risk management activities are defined.

Correct answer: Facilitate a risk appetite workshop to define specific, measurable thresholds for both 'Security Breaches' and 'Schedule Delay'.

The conflict arises from undefined risk appetites. The Risk Manager must facilitate a session to quantify these appetites into thresholds (e.g., 'Zero tolerance for data loss' vs. 'Acceptable 2-week delay'). This provides an objective framework for prioritizing risks when security and speed conflict.

Correct answer: The Delphi Technique

The Delphi Technique uses anonymous questionnaires circulated to experts. By keeping responses anonymous, it removes the bias of hierarchy and groupthink, allowing for honest risk identification without fear of retribution or influence from dominant personalities.