I85PREP
⌘ K
CPA Australia Financial Risk Management study materials
CPA Australia Financial Risk Management study resources

CPA Australia Financial Risk Management practice questions

One question at a time. Build your CPA Australia Financial Risk Management understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Financial risk management fundamentals and governance

In enterprise risk management, which statement best describes the relationship between risk appetite and risk tolerance?

  1. Risk appetite and risk tolerance are identical concepts and are used interchangeably in governance documentation.
  2. Risk tolerance is the broad level of risk an entity seeks, while risk appetite is the narrow operational boundary applied to a single transaction.
  3. Risk appetite is the amount of risk an entity is willing to accept in pursuit of objectives, while risk tolerance sets the acceptable variation around specific limits. Correct answer.
  4. Risk appetite applies only to financial risks, whereas risk tolerance applies only to operational and compliance risks.

Explanation

Risk appetite expresses the aggregate amount and type of risk an organisation is willing to pursue to achieve its objectives. Risk tolerance translates that appetite into measurable boundaries or acceptable variation for specific risk categories, so the two operate at different levels of granularity.

Question 2Financial risk management fundamentals and governance

A board delegates authority for day-to-day risk decisions to management but retains oversight of the risk framework. Which governance principle does this illustrate?

  1. Outsourcing of risk ownership to external auditors
  2. Segregation of duties between front office and back office
  3. Three lines model replacing board responsibility
  4. Delegation of authority with retained accountability Correct answer.

Explanation

Boards may delegate operational decision rights to management, but accountability for the risk framework and its oversight remains with the board. Delegation transfers authority, not ultimate responsibility.

Question 3Financial risk management fundamentals and governance

Which element is most characteristic of a strong risk culture within a financial institution?

  1. Employees are encouraged to escalate concerns without fear of retaliation. Correct answer.
  2. Risk reporting is restricted to the chief risk officer and the board.
  3. Incentive schemes reward volume growth regardless of risk outcomes.
  4. Risk limits are set annually and never revisited during the year.

Explanation

A sound risk culture encourages open escalation of concerns and protects whistleblowers, so problems surface early. It also aligns incentives with risk-adjusted outcomes and keeps risk information flowing to decision makers.

Question 4Financial risk management fundamentals and governance

Under the three lines model, which group typically performs independent assurance and challenge over the effectiveness of risk management?

  1. The second line, which sets frameworks and monitors compliance
  2. The external customer base, which provides market discipline
  3. The first line, which owns and manages risk in the business
  4. The third line, internal audit, which provides independent assurance Correct answer.

Explanation

In the three lines model, internal audit forms the third line and provides independent, objective assurance to the board on the effectiveness of governance and risk management. The first line owns risk and the second line provides oversight and frameworks.

Question 5Financial risk management fundamentals and governance

Which of the following best defines a risk register in a financial risk management framework?

  1. A list of approved counterparties with assigned credit limits
  2. A summary of daily profit and loss by trading desk
  3. A structured record of identified risks with owners, ratings and controls Correct answer.
  4. A schedule of upcoming regulatory capital filings

Explanation

A risk register is a structured inventory of identified risks, typically capturing description, cause, consequence, inherent and residual ratings, controls, and risk owners. It supports monitoring and reporting across the risk universe.

Question 6Financial risk management fundamentals and governance

A company's risk appetite statement specifies that it will accept no more than a defined maximum loss from any single counterparty. This is best described as:

  1. A risk limit derived from risk appetite Correct answer.
  2. A key risk indicator threshold
  3. A control self-assessment result
  4. A stress testing scenario

Explanation

A maximum acceptable loss per counterparty is a quantitative limit that operationalises the organisation's risk appetite. Limits translate high-level appetite into measurable boundaries that can be monitored and enforced.

Question 7Financial risk management fundamentals and governance

Which of the following is a primary responsibility of a board risk committee?

  1. Executing daily hedging trades in the treasury function
  2. Overseeing the risk management framework and advising the board on risk appetite Correct answer.
  3. Preparing statutory financial statements for external audit
  4. Setting individual trader position limits without management input

Explanation

A board risk committee oversees the design and effectiveness of the risk framework and recommends risk appetite and tolerances to the board. It provides oversight rather than executing transactions or preparing accounts.

Question 8Financial risk management fundamentals and governance

Which statement best explains why an organisation separates the risk management function from the business units that take risk?

  1. It allows the risk function to execute trades on behalf of the business.
  2. It guarantees that no financial losses will occur.
  3. It ensures that risk oversight is independent of the incentive to generate revenue. Correct answer.
  4. It removes the need for the board to approve risk appetite.

Explanation

Independence helps ensure risk oversight is not compromised by commercial incentives that favour revenue generation. This separation supports objective challenge and monitoring of risk-taking activities.

Question 9Financial risk management fundamentals and governance

A treasury team reports a large unhedged foreign exchange exposure that breaches the approved policy limit. According to sound governance practice, what should happen first?

  1. The trader responsible should be promoted to avoid reputational damage.
  2. The policy limit should be retrospectively changed to match the exposure.
  3. The breach should be escalated promptly through the governance chain and remediation initiated. Correct answer.
  4. The exposure should be concealed until the next quarterly board meeting.

Explanation

Limit breaches require prompt escalation to the appropriate governance level and documented remediation. Retrospective changes to limits or concealment undermine the control framework and accountability.

Question 10Financial risk management fundamentals and governance

An organisation uses a heat map plotting likelihood against impact to prioritise risks. Which limitation should governance participants recognise when relying on this tool?

  1. Heat maps are only valid for operational risks and cannot be used for financial risks.
  2. Heat maps can create a false sense of precision and may obscure the range of possible outcomes. Correct answer.
  3. Heat maps eliminate the need for risk owners to assess controls.
  4. Heat maps cannot incorporate qualitative judgements.

Explanation

Heat maps aggregate subjective ratings into categories, which can imply more precision than exists and hide tail outcomes or correlation between risks. They are a communication and prioritisation aid, not a substitute for deeper quantitative analysis.

Question 11Financial risk management fundamentals and governance

A financial institution defines its risk universe before conducting a risk assessment. What is the main governance benefit of a well-defined risk universe?

  1. It provides a structured basis for allocating assessment effort and assigning ownership across all material risk types. Correct answer.
  2. It replaces the need for independent internal audit.
  3. It sets the capital adequacy ratio for the institution.
  4. It guarantees that all risks will be eliminated.

Explanation

Defining the risk universe ensures that all material risk categories are identified and assigned owners, allowing assessment and reporting effort to be prioritised. It supports completeness and accountability in the risk framework.

Question 12Financial risk management fundamentals and governance

A firm's risk appetite statement says it has a 'low tolerance for compliance breaches'. Which action is most consistent with operationalising this statement?

  1. Allowing breaches provided they are below a monetary value
  2. Delegating all compliance decisions to the front office
  3. Reviewing compliance breaches only at the annual general meeting
  4. Setting a zero-tolerance threshold with mandatory escalation of every confirmed breach Correct answer.

Explanation

A low or zero tolerance for compliance breaches is operationalised through strict thresholds, mandatory escalation and remediation tracking. This converts the qualitative appetite statement into enforceable practice.

Question 13Financial risk management fundamentals and governance

Which of the following best describes the purpose of a risk appetite framework approved by the board?

  1. To list the names of all employees authorised to trade derivatives
  2. To replace the internal audit plan for the coming year
  3. To link strategy, risk appetite and limits so that risk-taking is aligned with objectives Correct answer.
  4. To document historical losses for financial reporting

Explanation

A risk appetite framework connects strategic objectives to the level of risk the board is willing to accept, cascading into limits and monitoring. This alignment ensures risk-taking supports strategy within defined boundaries.

Question 14Financial risk management fundamentals and governance

A risk manager wants to compare the organisation's residual risk profile against its stated appetite across several risk categories. Which approach is most appropriate?

  1. Rely solely on the external auditor's management letter
  2. Review the marketing department's customer satisfaction scores
  3. Aggregate residual risk ratings by category and compare them with the board-approved tolerance for each category Correct answer.
  4. Compare only the largest single loss event from the prior year

Explanation

Comparing aggregated residual risk by category against board-approved tolerances provides a structured view of whether the profile sits within appetite. This supports targeted reporting and remediation where tolerances are exceeded.

Question 15Financial risk management fundamentals and governance

In a risk governance framework, what is the role of a risk owner?

  1. To provide independent assurance to the board on controls
  2. To audit the risk management function annually
  3. To set the organisation's overall risk appetite
  4. To manage a specific risk, including monitoring controls and reporting on its status Correct answer.

Explanation

A risk owner is accountable for managing an assigned risk, including implementing and monitoring controls and reporting changes in risk status. This assigns clear accountability within the first line of the framework.

Question 16Financial risk management fundamentals and governance

An organisation's key risk indicators (KRIs) show a steady deterioration in a metric over three consecutive months, though the limit has not yet been breached. What is the most appropriate governance response?

  1. Remove the KRI from reporting because it has not breached
  2. Take no action until the limit is formally breached
  3. Immediately change the KRI definition to avoid a future breach
  4. Investigate the trend and consider pre-emptive action or escalation before the limit is reached Correct answer.

Explanation

KRIs are forward-looking signals, so a deteriorating trend warrants investigation and possible pre-emptive action before a limit is breached. Acting early is the purpose of leading indicators within the risk framework.

Question 17Financial risk management fundamentals and governance

Which scenario best illustrates a conflict of interest that segregation of duties is designed to prevent?

  1. A compliance officer monitors regulatory changes
  2. A risk analyst prepares a risk report for the risk committee
  3. An auditor reviews controls in a business unit
  4. A trader both executes transactions and independently reconciles the firm's positions Correct answer.

Explanation

Segregation of duties separates execution from reconciliation and record-keeping so that one person cannot both create and conceal an error or fraud. Combining trading and independent reconciliation in one role creates exactly this conflict.

Question 18Financial risk management fundamentals and governance

A board is reviewing whether its risk management framework remains fit for purpose after a major acquisition. Which activity best supports this review?

  1. A review of the prior year's marketing budget
  2. A periodic independent assessment of framework design and effectiveness against recognised standards Correct answer.
  3. A survey of customer product preferences
  4. A comparison of office rental costs across locations

Explanation

Periodic independent assessment against recognised frameworks and standards tests whether the risk framework remains effective as the organisation changes. Acquisitions alter the risk profile, so reassessment is a governance necessity.

Question 19Financial risk management fundamentals and governance

Which statement about the relationship between risk management and strategy is most accurate?

  1. Risk management informs strategy by identifying the risks and uncertainties that could affect strategic objectives. Correct answer.
  2. Strategy should be set without reference to risk appetite.
  3. Risk management is a compliance overhead separate from strategic planning.
  4. Risk management applies only after strategic decisions have been implemented.

Explanation

Effective risk management is integrated into strategy formulation, helping the board understand the uncertainties and exposures inherent in strategic choices. It is not a detached compliance activity applied only after decisions are made.

Question 20Financial risk management fundamentals and governance

A firm applies the COSO enterprise risk management framework. Which characteristic is central to that framework's approach?

  1. It integrates risk management with strategy and performance across the entity. Correct answer.
  2. It requires the elimination of all residual risk.
  3. It applies only to listed companies in a single jurisdiction.
  4. It focuses exclusively on internal financial reporting controls.

Explanation

The COSO ERM framework emphasises integrating risk with strategy and performance, rather than treating risk as a separate compliance exercise. It is principles-based and applicable across entity types and jurisdictions.

Question 21Financial risk management fundamentals and governance

A risk committee receives a report showing that a business unit's residual risk exceeds its approved tolerance, but the unit reports strong control effectiveness. What is the most appropriate challenge by the committee?

  1. Request evidence that control effectiveness has been independently validated and ask for a remediation plan to return within tolerance. Correct answer.
  2. Ignore the exception because it is only one business unit.
  3. Immediately close the business unit without further review.
  4. Accept the report because strong controls always reduce residual risk to acceptable levels.

Explanation

The committee should test the reported control effectiveness and require a plan to bring residual risk back within tolerance. Strong self-assessed controls do not automatically justify accepting a breach of approved limits.

Question 22Financial risk management fundamentals and governance

An organisation adopts a risk appetite statement that is qualitative only, such as 'we are conservative'. Which governance weakness does this most likely create?

  1. It provides no measurable basis for setting limits or monitoring whether risk-taking remains within appetite. Correct answer.
  2. It prevents the board from delegating authority to management.
  3. It requires the organisation to abandon stress testing.
  4. It makes the statement impossible to communicate to staff.

Explanation

A purely qualitative appetite statement lacks measurable thresholds, making it difficult to cascade into limits or to monitor compliance. Effective frameworks combine qualitative direction with quantitative tolerances where feasible.

Question 23Financial risk management fundamentals and governance

Two business units report the same risk category using different rating scales and definitions. What is the most significant governance consequence for the board risk committee?

  1. It automatically satisfies regulatory reporting requirements.
  2. It guarantees that each unit's risk is correctly assessed in isolation.
  3. Aggregated reporting may misstate the organisation's true risk profile and impair oversight. Correct answer.
  4. It removes the need for a common risk taxonomy.

Explanation

Inconsistent scales and definitions undermine comparability, so aggregated reports may misrepresent the enterprise risk profile and weaken board oversight. A common taxonomy and rating methodology are needed for reliable aggregation.

Question 24Financial risk management fundamentals and governance

A board is considering whether to accept a strategic initiative that offers high returns but exposes the firm to a risk type outside its stated appetite. What is the most defensible governance position?

  1. Approve the initiative because high returns always justify additional risk.
  2. Delegate the decision entirely to the business unit without board involvement.
  3. Decline or restructure the initiative unless the board formally revises the risk appetite to accommodate the exposure. Correct answer.
  4. Approve the initiative and adjust the risk appetite retrospectively after losses occur.

Explanation

Risk-taking should remain within the board-approved appetite; exposures outside it require a formal decision to revise appetite or to restructure the initiative. Retrospective adjustment after losses or unchecked delegation undermines governance.

Question 25Financial risk management fundamentals and governance

An internal audit report finds that the second line monitors limits but has no authority to enforce remediation, and the first line sets its own limits. Which governance deficiency is most significant?

  1. Excessive frequency of board risk committee meetings
  2. Excessive independence between the first and second lines
  3. Insufficient authority and separation in limit setting and enforcement Correct answer.
  4. Overreliance on external assurance providers

Explanation

Allowing the first line to set its own limits and denying the second line enforcement authority weakens the control framework and independence of oversight. Limit setting and enforcement should be governed by approved policy with clear authority.

Question 26Financial risk management fundamentals and governance

Which of the following best describes the 'three lines model' as it is applied to financial risk governance in an organisation?

  1. The first line sets the risk appetite, the second line executes the strategy, and the third line approves the annual report.
  2. The first line owns and manages risk in the business, the second line provides independent oversight and challenge, and the third line provides independent assurance. Correct answer.
  3. The first line is internal audit, the second line is the board, and the third line is the external regulator.
  4. The first line manages liquidity, the second line manages market risk, and the third line manages operational risk.

Explanation

The three lines model allocates risk responsibilities: business units (first line) own and manage risk, a risk and compliance function (second line) provides independent oversight and challenge, and internal audit (third line) provides independent assurance to the board. This separation supports effective governance by ensuring that risk-taking, oversight and assurance are not performed by the same group.

Question 27Financial risk management fundamentals and governance

A financial institution is designing its risk appetite framework. Which element is most essential for the framework to be operable by management?

  1. Quantitative risk limits and tolerances linked to specific metrics and escalation triggers Correct answer.
  2. An annual review by the external auditor
  3. A list of all risks identified in the risk register
  4. A statement that the organisation is conservative in its risk-taking

Explanation

A risk appetite framework becomes operable when qualitative appetite statements are translated into quantitative limits, tolerances and escalation triggers that management can monitor and act on. Without measurable limits, the appetite statement cannot be used to constrain risk-taking or to trigger governance action.

Question 28Financial risk management fundamentals and governance

A board risk committee is reviewing the organisation's risk culture. Which indicator is most directly relevant to assessing whether risk culture is functioning as intended?

  1. The frequency of board meetings
  2. The number of risk policies approved during the year
  3. The proportion of staff who can correctly describe the organisation's risk appetite in their own business area Correct answer.
  4. The total value of insurance premiums paid

Explanation

Risk culture is reflected in whether employees understand and act on the organisation's risk appetite and expected behaviours. Surveying staff understanding of risk appetite in their own area provides direct evidence of whether the culture is embedded, whereas policy counts and meeting frequency measure activity rather than culture.

Question 29Financial risk management fundamentals and governance

An organisation is implementing a risk management information system (RMIS). Which governance requirement should be prioritised to support reliable risk reporting to the board?

  1. Ensuring the system is the lowest-cost option available
  2. Allowing each business unit to configure its own risk rating scales independently
  3. Defining data ownership, validation controls and a single agreed risk taxonomy across the organisation Correct answer.
  4. Restricting system access to the internal audit function only

Explanation

Reliable board risk reporting depends on consistent data definitions, clear ownership and validation controls so that risk information is complete and comparable. A single agreed taxonomy prevents inconsistent aggregation and supports credible reporting.

Question 30Financial risk management fundamentals and governance

A firm's board delegates authority to a management risk committee. Which delegation practice best preserves board accountability for risk oversight?

  1. The board sets clear delegated limits and receives regular reporting on exceptions and emerging risks Correct answer.
  2. The board delegates risk oversight to the business units that take the risk
  3. The board delegates risk oversight to the external auditor
  4. The board delegates all risk decisions without retaining any reporting or approval rights

Explanation

Effective delegation requires the board to set clear authority limits and to maintain oversight through regular reporting on exceptions and emerging risks. This preserves board accountability while allowing management to act within defined boundaries.

Question 31Financial risk management fundamentals and governance

A risk manager is preparing a board paper that compares the firm's current risk profile with its stated risk appetite. Which presentation approach best supports effective board decision-making?

  1. Present only the risks that are within appetite to demonstrate strong control
  2. Present only quantitative market risk metrics because they are the most objective
  3. Present a long narrative describing every risk in the risk register without prioritisation
  4. Present a dashboard showing each material risk against its approved appetite, with trend and exception commentary Correct answer.

Explanation

A dashboard that positions each material risk against its approved appetite, with trend information and commentary on exceptions, gives the board a concise and balanced basis for decisions. It highlights where action is needed rather than obscuring breaches.

Question 32Financial risk management fundamentals and governance

An organisation is reviewing its risk governance arrangements after a series of operational losses. Which structural change most directly strengthens independent challenge of risk-taking?

  1. Reporting the chief risk officer directly to the board risk committee with a dual reporting line to the CEO Correct answer.
  2. Reducing the frequency of risk committee meetings to quarterly
  3. Moving the risk function under the finance department to reduce costs
  4. Combining the chief risk officer role with the head of trading role

Explanation

Independent challenge is strengthened when the chief risk officer has direct access to the board risk committee and is not solely subordinate to the executives whose activities are being challenged. A dual reporting line preserves executive engagement while providing an independent escalation route.

Question 33Financial risk management fundamentals and governance

A financial institution is establishing a new product approval process. Which governance control is most important to ensure that risks are identified before a product is launched?

  1. Approval by the sales team because it understands customer demand
  2. A cross-functional new product committee that reviews risk, compliance and capital impacts before approval Correct answer.
  3. Requiring the product sponsor to self-certify that all risks have been considered
  4. Post-launch review by internal audit after twelve months of operation

Explanation

A cross-functional approval committee brings together risk, compliance and finance perspectives before launch, ensuring that material risks and capital impacts are assessed and controlled. Self-certification by the sponsor lacks independent challenge, and post-launch review is too late to prevent harm.

Question 34Financial risk management fundamentals and governance

Which statement best describes the role of a board risk committee in relation to the organisation's risk management framework?

  1. It approves individual customer credit applications above a threshold
  2. It manages the day-to-day hedging of the firm's market risk exposures
  3. It prepares the detailed risk calculations used in regulatory capital reporting
  4. It oversees the design and effectiveness of the risk management framework and recommends it to the board Correct answer.

Explanation

A board risk committee oversees the design and effectiveness of the risk management framework and advises the board on risk appetite and risk matters. It does not perform operational risk tasks such as capital calculations, credit approvals or hedging.

Question 35Financial risk management fundamentals and governance

An organisation is mapping its risk universe. Which approach best ensures the risk universe is comprehensive and useful for governance?

  1. Limit the universe to financial risks because non-financial risks are unquantifiable
  2. Adopt the risk universe used by a peer organisation without modification
  3. Include only risks that have caused losses in the past five years
  4. Structure the universe by risk category and by business process, and review it regularly for emerging risks Correct answer.

Explanation

A comprehensive risk universe is structured across risk categories and business processes and is refreshed to capture emerging risks. This structure supports consistent identification and assignment of risk ownership across the organisation.

Question 36Financial risk management fundamentals and governance

A firm's risk appetite statement is expressed only in terms of earnings volatility. Which governance weakness does this create?

  1. It makes the statement too detailed for board approval
  2. It requires the firm to hold excessive regulatory capital
  3. It omits non-financial risks such as conduct, compliance and operational resilience Correct answer.
  4. It prevents the firm from measuring market risk

Explanation

An appetite expressed solely in earnings volatility addresses financial risk but leaves non-financial risks such as conduct, compliance and operational resilience without stated tolerances. Governance requires appetite to cover all material risk categories so that limits and escalation triggers exist for each.

Question 37Financial risk management fundamentals and governance

A risk owner in a financial institution is assigned to a specific risk. Which responsibility is most consistent with that role?

  1. Providing independent assurance on the effectiveness of controls to the board
  2. Setting the firm's overall risk appetite and tolerance levels
  3. Designing the internal audit plan for the risk area
  4. Monitoring the risk, ensuring controls operate, and reporting on the risk against its appetite Correct answer.

Explanation

A risk owner is accountable for managing an assigned risk, which includes monitoring it, ensuring controls operate effectively, and reporting its status against appetite. This operational accountability sits in the first line and is distinct from assurance and board-level appetite setting.

Question 38Financial risk management fundamentals and governance

An organisation's risk committee receives a report showing that a business unit's residual risk exceeds its approved tolerance, but the business unit has not submitted a remediation plan. What is the most appropriate governance response?

  1. Adjust the tolerance upward so that the risk is no longer in breach
  2. Wait until the next annual risk review to consider the matter
  3. Accept the breach because residual risk is inherently uncertain
  4. Require the business unit to submit a time-bound remediation plan and escalate the breach to the board Correct answer.

Explanation

A breach of approved tolerance requires a documented, time-bound remediation plan and escalation to the board so that accountable executives are informed and can act. Adjusting the tolerance without justification would undermine the credibility of the risk appetite framework.

Question 39Financial risk management fundamentals and governance

Which statement best explains why an organisation should align its risk appetite with its strategic plan?

  1. It guarantees that the strategy will achieve its financial targets
  2. It ensures that the risks accepted in pursuing strategy are within the level the board is willing to bear Correct answer.
  3. It ensures that the strategic plan is approved by the regulator
  4. It removes the need for a separate risk register

Explanation

Aligning risk appetite with strategy ensures that the risks inherent in pursuing strategic objectives are consciously accepted within the board's stated tolerance. This links risk-taking to governance oversight rather than treating risk and strategy as separate exercises.

Question 40Financial risk management fundamentals and governance

An organisation is designing key risk indicators (KRIs) for its risk dashboard. Which characteristic is most important for a KRI to be effective for governance?

  1. It is updated only when a loss event occurs
  2. It is selected because it is easy to calculate rather than because it is relevant
  3. It has a clear threshold linked to risk appetite and is reported with a defined escalation path Correct answer.
  4. It measures the same thing as the firm's key performance indicators

Explanation

An effective KRI has a threshold linked to the approved risk appetite and a defined escalation path so that deterioration triggers timely governance action. This connection to appetite is what distinguishes a risk indicator from general management information.

Question 41Market risk measurement and management

A bank holds a single A-rated corporate bond position. Which risk measure estimates the loss that will not be exceeded on 99 out of 100 trading days?

  1. 99% one-day value at risk Correct answer.
  2. The bond's convexity
  3. The bond's modified duration
  4. The bond's credit spread

Explanation

Value at risk is defined by both a confidence level and a horizon, and a 99% one-day VaR is the loss threshold expected to be exceeded on roughly one day in a hundred. Duration and convexity describe price sensitivity to yield changes rather than a probabilistic loss quantile.

Question 42Market risk measurement and management

A portfolio has a one-day 95% VaR of $2 million. Under the historical simulation approach, what does this figure mean?

  1. Losses exceeded $2 million on about 5% of historical or simulated days Correct answer.
  2. The portfolio will lose exactly $2 million once every twenty days
  3. The expected loss conditional on a loss occurring is $2 million
  4. The maximum possible loss on any single day is $2 million

Explanation

VaR is a quantile of the loss distribution: at 95% confidence, roughly 5% of outcomes lie beyond the threshold. It says nothing about the size of losses once the threshold is breached, and it is not a worst-case bound.

Question 43Market risk measurement and management

Which measure averages the losses that occur in the tail beyond the VaR threshold, making it sensitive to the shape of the extreme loss distribution?

  1. Delta-normal VaR
  2. Variance-covariance duration
  3. Expected shortfall Correct answer.
  4. Tracking error

Explanation

Expected shortfall, also called conditional VaR, is the mean of losses exceeding the VaR quantile, so it captures tail severity rather than only the threshold. It is sub-additive and therefore coherent, unlike VaR.

Question 44Market risk measurement and management

A risk manager wants a VaR method that makes no assumption about the shape of the return distribution and revalues the portfolio using actual past market moves. Which approach fits best?

  1. Variance-covariance with normal returns
  2. Monte Carlo simulation using a normal factor model
  3. Historical simulation Correct answer.
  4. Analytical delta-normal VaR

Explanation

Historical simulation applies the empirical distribution of past factor changes directly to the current portfolio, so it does not impose a parametric distribution. Its weakness is dependence on the historical window chosen.

Question 45Market risk measurement and management

A trader holds a $10 million long position in a stock with a daily return standard deviation of 2%. Using the delta-normal approach and ignoring the mean, what is the one-day 95% VaR (z = 1.645)?

  1. $1,645,000
  2. $329,000 Correct answer.
  3. $32,900
  4. $200,000

Explanation

Delta-normal VaR equals the position value multiplied by the return volatility and the confidence factor: 10,000,000 x 0.02 x 1.645 = $329,000. The mean return is conventionally set to zero for short horizons.

Question 46Market risk measurement and management

A portfolio's one-day 99% VaR is $4 million and its one-day 99% expected shortfall is $7 million. What does the $7 million figure represent?

  1. The loss that will be exceeded on 99 days out of 100
  2. The largest loss observed in the historical window
  3. The median loss across all simulated scenarios
  4. The average loss on days when the loss exceeds $4 million Correct answer.

Explanation

Expected shortfall conditions on the loss exceeding the VaR quantile and averages those tail outcomes, which is why it exceeds VaR. It is not a maximum nor a median.

Question 47Market risk measurement and management

A bank scales a ten-day 99% VaR of $6 million to a one-day figure using the square-root-of-time rule. What is the resulting one-day VaR?

  1. $18,973,666
  2. $600,000
  3. $1,897,367 Correct answer.
  4. $3,000,000

Explanation

Under the square-root-of-time rule, one-day VaR equals ten-day VaR divided by the square root of ten: 6,000,000 / 3.1623 is approximately $1.897 million. The rule assumes independent and identically distributed returns.

Question 48Market risk measurement and management

Which condition must hold for the square-root-of-time scaling of VaR to be theoretically valid?

  1. Returns are positively autocorrelated
  2. The confidence level is at least 99%
  3. Returns are serially independent and identically distributed Correct answer.
  4. The portfolio contains only fixed income securities

Explanation

Scaling by the square root of time follows from variance adding linearly only when successive returns are independent and identically distributed. Positive autocorrelation causes the rule to understate risk over longer horizons.

Question 49Market risk measurement and management

A risk analyst is told the portfolio's daily profit and loss is normally distributed with a mean of zero and a standard deviation of $500,000. What is the one-day 99% VaR (z = 2.326)?

  1. $2,326,000
  2. $1,163,000 Correct answer.
  3. $1,000,000
  4. $500,000

Explanation

For a zero-mean normal distribution, VaR is the standard deviation multiplied by the one-tailed normal quantile: 500,000 x 2.326 = $1,163,000. Using 1.645 would instead give a 95% figure.

Question 50Market risk measurement and management

Why does a delta-normal VaR calculation tend to understate risk for a portfolio containing deep out-of-the-money option positions?

  1. The linear delta approximation ignores the convex payoff and non-normal return distribution Correct answer.
  2. Options are excluded from VaR calculations by regulation
  3. Delta is constant for all option positions
  4. The normal distribution has fatter tails than option payoffs

Explanation

Delta-normal VaR linearises option payoffs, so it misses the gamma or convexity effect that makes losses accelerate for short option positions. The normal assumption also understates the fat tails typical of option portfolios.