First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.
Continue in the practice tool above to load more questions, 50 at a time.
Question 1Risk Strategy and Planning
What is the primary purpose of the risk management plan?
- To list every identified risk with its owner and response
- To document the technical specifications of all project deliverables
- To record the approved cost baseline for the project
- To define how risk activities will be performed and funded Correct answer.
Explanation
The risk management plan describes the approach, processes, roles, funding, and timing for risk management. It is a planning document, not a repository for individual risks or a substitute for other project baselines.
Question 2Risk Strategy and Planning
A project sponsor states that the organization will accept no more than a 5 percent chance of exceeding the project budget. This statement best represents:
- risk appetite
- risk capacity
- risk tolerance Correct answer.
- risk avoidance
Explanation
Risk appetite is the amount of risk an organization is willing to pursue. Risk tolerance is the measurable acceptable variation around an objective, such as a maximum overrun probability.
Question 3Risk Strategy and Planning
A risk's exposure exceeds the threshold defined for the project manager. According to good risk governance, what should happen next?
- The risk should be escalated to the level with authority to manage it Correct answer.
- The risk should be accepted by the project manager without escalation
- The risk should be deleted from the risk register because it is outside scope
- The risk should be reclassified as an issue and closed
Explanation
Risk thresholds define the level at which a risk must be escalated to a higher authority. Escalation ensures the risk is managed by someone with the required decision rights and resources.
Question 4Risk Strategy and Planning
What does a risk breakdown structure primarily provide?
- A numeric ranking of risks by expected monetary value
- A hierarchical representation of risk sources and categories Correct answer.
- A schedule of risk review meetings across the project life cycle
- A hierarchical list of project team members and their risk duties
Explanation
A risk breakdown structure organizes risk sources and categories in a hierarchy. It helps teams identify risks systematically and compare exposures across categories.
Question 5Risk Strategy and Planning
Which element is most characteristic of effective risk governance on a project?
- A policy that all risks must be transferred to a contractor
- Defined risk ownership, authority, and escalation paths Correct answer.
- A single risk owner assigned to every risk in the register
- Monthly risk workshops attended only by senior management
Explanation
Risk governance establishes decision rights, accountability, oversight, and escalation. Clear ownership and authority allow risks to be managed at the appropriate level.
Question 6Risk Strategy and Planning
A project team sets aside funds to cover known risks that have been identified and analyzed. These funds are best classified as:
- contingency reserve Correct answer.
- profit margin
- cost baseline padding
- management reserve
Explanation
A contingency reserve is allocated for identified risks and accepted exposures. Management reserve is used for unknown-unknowns outside the approved baseline.
Question 7Risk Strategy and Planning
An unknown-unknown event occurs that was not in the risk register and requires additional funding. Which reserve should be used, and who typically authorizes it?
- Management reserve, authorized by senior management Correct answer.
- Management reserve, authorized by the project team
- Contingency reserve, authorized by the risk owner
- Contingency reserve, authorized by the project manager
Explanation
Unknown-unknowns fall outside identified risk exposure and are funded from management reserve. Management reserve is controlled by senior management or the sponsor because it affects the overall budget baseline.
Question 8Risk Strategy and Planning
During risk planning, a stakeholder consistently overestimates the likelihood of technical failure based on a past project. This behavior is best described as:
- risk appetite
- risk capacity
- risk attitude Correct answer.
- risk neutral
Explanation
Risk attitude is a stakeholder's perception or bias toward risk, often shaped by experience. It can influence how likelihood and impact are assessed during risk planning.
Question 9Risk Strategy and Planning
A low-complexity, short-duration project is tailoring its risk process. Which approach is most appropriate?
- Adopt the enterprise risk process unchanged for consistency
- Use a simplified register and brief, scaled risk reviews Correct answer.
- Eliminate risk identification because the project is short
- Require full quantitative analysis before every status meeting
Explanation
Tailoring scales risk processes to the project's size, complexity, and risk profile. A simpler register and brief reviews maintain rigor without unnecessary overhead.
Question 10Risk Strategy and Planning
In the risk management plan, what is the risk owner primarily accountable for?
- Approving the project budget
- Performing all quantitative risk analysis
- Maintaining the enterprise risk database
- Managing the assigned risk and its response Correct answer.
Explanation
The risk owner is accountable for monitoring the assigned risk and ensuring the selected response is implemented and effective. This accountability should be explicit in the risk management plan.
Question 11Risk Strategy and Planning
What is the main role of an organizational risk management policy?
- To set the organization's risk principles and expectations Correct answer.
- To replace the project risk register
- To list the specific risks for each active project
- To calculate the exact contingency reserve for each project
Explanation
A risk management policy sets the organization's overall principles, expectations, and mandate for managing risk. Project-level documents then apply that policy to specific objectives and constraints.
Question 12Risk Strategy and Planning
In risk planning, a risk is best stated as a cause, an uncertain event, and:
- an effect on project objectives Correct answer.
- a fixed budget amount approved by finance
- a named team member's assigned role
- a completed change request record
Explanation
A well-formed risk statement links a cause to an uncertain event and its potential effect on objectives. This structure supports clear analysis and response planning.
Question 13Risk Strategy and Planning
Which finding most directly indicates poor risk data quality in the risk register?
- Risk owners include both technical and business staff
- Many risks lack clear owners or probabilities Correct answer.
- Risks are reviewed at every status meeting
- The register includes both threats and opportunities
Explanation
Risk data quality depends on clear, accurate, and complete information such as descriptions, ownership, and assessed probability and impact. Missing owners or probabilities undermines analysis and response planning.
Question 14Risk Strategy and Planning
What should determine the frequency and format of risk reporting on a project?
- The personal preference of the project scheduler
- A fixed monthly cycle applied to every project in the organization
- Stakeholder needs and the project's risk profile Correct answer.
- The number of risks currently open in the register only
Explanation
Risk reporting should be tailored to stakeholder information needs and the project's risk exposure. The risk management plan defines reporting cadence, content, and audience.
Question 15Risk Strategy and Planning
A key risk indicator is most useful when it:
- gives early warning that a risk exposure is rising Correct answer.
- replaces the need for risk identification
- records only risks that have already occurred
- guarantees that the risk will not occur
Explanation
A key risk indicator provides an early warning signal about changing risk exposure. It supports proactive monitoring and timely response rather than guaranteeing outcomes.
Question 16Risk Strategy and Planning
How should an assumption recorded in the assumptions log be treated if it is critical and uncertain?
- It should be removed from the project charter
- It should be analyzed as a risk source and monitored Correct answer.
- It should be converted into a change request immediately
- It should be ignored because assumptions are not risks
Explanation
A critical, uncertain assumption can become a source of risk if it proves false. It should be analyzed, assigned ownership, and monitored like other risk drivers.
Question 17Risk Strategy and Planning
How should historical lessons learned be used during risk planning?
- To replace stakeholder interviews entirely
- To justify avoiding all previously unsuccessful projects
- To inform risk identification using similar past work Correct answer.
- To set the final cost baseline without further analysis
Explanation
Lessons learned provide evidence about past risks, causes, and response effectiveness. They should inform risk identification and response planning for similar work.
Question 18Risk Strategy and Planning
Which behavior best demonstrates a mature project risk culture?
- Risk discussions are limited to the project manager and sponsor
- Team members raise risks early without blame, and leaders act Correct answer.
- Team members report only risks that already have approved responses
- Risks are documented only after they become issues
Explanation
A mature risk culture encourages early, transparent reporting and constructive action. Blame-free escalation helps surface risks before they become issues.
Question 19Risk Strategy and Planning
A risk owned at the program level affects a project's critical path. What is the most appropriate governance action?
- The project manager should hide the risk to avoid program interference
- The project team should accept the risk without informing the program
- Escalate via the defined path and coordinate with the program owner Correct answer.
- The risk should be closed at the project level because the program owns it
Explanation
Risks should be escalated through the defined governance path to the level with authority. The project manager should also coordinate with the program risk owner because the risk affects project objectives.
Question 20Risk Strategy and Planning
Who should approve the project risk management plan to ensure it has authority?
- Key stakeholders and the sponsor, per governance Correct answer.
- Any team member who has risk experience
- An external auditor without project authority
- The risk register administrator alone
Explanation
The risk management plan should be approved by the sponsor and key stakeholders consistent with the project governance structure. Approval confirms commitment to roles, funding, and reporting arrangements.
Question 21Risk Strategy and Planning
An organization can absorb a maximum financial loss of $2 million before insolvency. This limit represents the organization's:
- contingency reserve
- risk threshold for a single project
- risk capacity Correct answer.
- risk appetite
Explanation
Risk capacity is the maximum risk an organization can bear before threatening its viability. It is distinct from appetite, which reflects willingness to take risk.
Question 22Risk Strategy and Planning
When planning risk management for a project within a program, what should the project manager do first?
- Create an independent risk process that ignores program reporting
- Wait until the program closes before identifying project risks
- Align project risk thresholds and reporting with the program Correct answer.
- Transfer all project risks to the program manager
Explanation
Project risk planning should align with the program's risk framework, including categories, thresholds, and reporting. Alignment supports consistent escalation and aggregated risk visibility.
Question 23Risk Strategy and Planning
A project has high uncertainty, many interdependent stakeholders, and rapidly changing requirements. How should risk planning address this complexity?
- Use adaptive reviews, broad engagement, and flexible reserves Correct answer.
- Freeze the risk register after initial approval
- Use a single deterministic risk score for all risks
- Reduce stakeholder involvement to simplify communication
Explanation
Complex, uncertain projects require adaptive risk reviews, broad stakeholder engagement, and flexible reserves. These practices help the team detect change and respond as conditions evolve.
Question 24Risk Strategy and Planning
Which activity is part of planning for risk identification rather than performing risk identification itself?
- Updating a risk response in the register
- Selecting the techniques and participants for identification Correct answer.
- Assigning a probability to a schedule risk
- Documenting a new vendor delivery risk
Explanation
Planning risk identification defines how identification will be conducted, including techniques, participants, inputs, and timing. The other activities are execution steps within identification or analysis.
Question 25Risk Strategy and Planning
Which set of fields is most essential in a newly created risk register?
- Description, cause, effect, owner, probability, and response Correct answer.
- The project's accounting codes and tax identifiers
- Only the risk description and a single due date for each risk
- Team member home addresses and phone numbers
Explanation
A risk register should capture enough information to understand, analyze, assign, and respond to each risk. Core fields include description, cause, effect, owner, probability, impact, and response.
Question 26Risk Strategy and Planning
A project manager is about to begin risk management on a large project and needs to define the methodology, roles, funding, and timing for risk activities. Which document should be created?
- The stakeholder engagement plan
- The risk breakdown structure
- The risk management plan Correct answer.
- The risk register
Explanation
The risk management plan describes how risk management will be structured and performed: methodology, roles and responsibilities, budgeting, timing, and reporting formats. Individual risks and their responses are captured later in the risk register, so the plan must exist first.
Question 27Risk Strategy and Planning
A project manager wants to reveal where risk exposure concentrates across sources such as technical, commercial, and external factors. Which structure should be used?
- The resource breakdown structure
- The risk breakdown structure Correct answer.
- The work breakdown structure
- The organizational breakdown structure
Explanation
The risk breakdown structure is a hierarchical representation of risk sources and categories, used during planning to categorize risks and expose where exposure is concentrated. The other breakdown structures decompose scope, resources, or reporting lines rather than risk sources.
Question 28Risk Strategy and Planning
Which inputs are most relevant when planning how risk management will be performed on a project?
- The activity list, duration estimates, and cost baseline
- The project charter and stakeholder register Correct answer.
- The quality metrics, issue log, and quality control measurements
- The resource calendars and team performance assessments
Explanation
The charter supplies project objectives, success criteria, high-level risks, and the sponsor's authority, while the stakeholder register identifies who can influence risk decisions and what their risk attitudes are; enterprise environmental factors and organizational process assets also shape the approach. Detailed execution artifacts such as activity lists or quality measurements are not primary inputs to this planning process.
Question 29Risk Strategy and Planning
A risk is assigned to a functional manager who is accountable for the risk outcome, while a team member is tasked with carrying out the agreed mitigation steps. What is the team member's role?
- Risk champion
- Risk reviewer
- Risk action owner Correct answer.
- Risk owner
Explanation
The risk owner is accountable for managing the risk and its response overall, whereas the risk action owner performs the specific response actions assigned. The risk management plan should distinguish these roles so accountability is not confused with task execution.
Question 30Risk Strategy and Planning
The risk response plan documents actions to be taken if a specific risk event occurs, plus a separate set of actions to be used if the primary response proves ineffective. What is the second set of actions called?
- A risk response strategy
- A fallback plan Correct answer.
- A workaround
- A contingency plan
Explanation
A contingency plan contains predefined actions to be executed if the risk event occurs, while a fallback plan contains actions to be used if the primary or contingency response fails. Workarounds, by contrast, are unplanned responses to issues that were not addressed in advance.
Question 31Risk Strategy and Planning
Before assessing individual risks, a project manager defines probability and impact scales with explicit descriptive criteria for each level. What is the primary benefit of this step?
- It makes risk ratings comparable across assessors Correct answer.
- It allows every risk to be assigned to the sponsor
- It reduces the number of risks that must be recorded
- It removes the need for management reserves
Explanation
Explicit scales give all assessors a shared interpretation of each level, so ratings are consistent and can be reliably compared and prioritized. The scales do not change how many risks exist, eliminate reserves, or shift ownership of risks to the sponsor.
Question 32Risk Strategy and Planning
Six months into execution, a project's scope and vendor base have changed substantially, but the risk management plan has not been revisited. What is the most appropriate action?
- Continue using the current plan because it was approved at baseline
- Defer any change to the plan until project closure lessons learned
- Replace the plan with the risk register at the next gate
- Update the plan to reflect the new context and re-approve it Correct answer.
Explanation
Planning for risk management is iterative; significant changes in scope, contracts, organization, or environment require the approach, thresholds, roles, and reporting to be revisited and re-approved. Leaving an outdated approach in force means escalations, tolerances, and responsibilities no longer fit the project.
Question 33Risk Strategy and Planning
An organization accepts high uncertainty in technology choices but has very low tolerance for regulatory non-compliance. A project carries both types of risk. How should risk planning reflect this?
- Set category-specific tolerances and prioritize regulatory responses Correct answer.
- Record both categories with the same rating scale and no differentiated treatment
- Escalate every technology risk to the sponsor because appetite is high
- Apply a single uniform threshold to all risks so the project is treated consistently
Explanation
Risk appetite can differ by risk category, so the plan should define tolerances per category, often mapped through the risk breakdown structure, and prioritize responses where tolerance is lowest. A uniform threshold ignores the organization's stated position and would misdirect attention and escalation.
Question 34Risk Strategy and Planning
A risk management plan states that risks must be escalated when they could cause 'significant disruption' or 'major concern'. Reviewers find that different managers escalate different risks. What is the best improvement?
- Define thresholds as measurable deviations tied to project objectives Correct answer.
- Limit escalation to risks that have already occurred and entered the issue log
- Replace thresholds with a statement that the team will use professional judgment
- Require all risks to be escalated so that no judgment is needed
Explanation
Thresholds must be objective, measurable, and traceable to project objectives, such as a schedule slip beyond two weeks or a cost impact above a stated amount, so escalation decisions are consistent. Vague qualitative wording invites each manager to apply a different interpretation.
Question 35Stakeholder Engagement
Which item is a core element of the stakeholder register?
- The approved cost baseline and its funding requirements
- The quality control checklist and inspection results
- Each stakeholder's influence and potential impact Correct answer.
- The project schedule network and its critical path activities
Explanation
The stakeholder register records identification details, an assessment of each stakeholder's influence and potential impact, and a classification of that stakeholder. Baselines, schedules and checklists are documented in other project plans and records.
Question 36Stakeholder Engagement
In the stakeholder engagement assessment matrix, which level describes a stakeholder who knows about the project but neither supports nor opposes it?
- Resistant
- Neutral Correct answer.
- Leading
- Unaware
Explanation
The matrix uses five levels: unaware, resistant, neutral, supportive and leading. Neutral means the stakeholder is aware of the project but does not actively support or oppose it.
Question 37Stakeholder Engagement
On a power/interest grid, how should a stakeholder with high power and low interest be managed?
- Kept satisfied Correct answer.
- Kept informed
- Managed closely with maximum engagement
- Monitored with minimal effort
Explanation
High power, low interest stakeholders can block outcomes but care little about day-to-day detail, so the aim is to keep them satisfied with concise, sufficient information.
Question 38Stakeholder Engagement
What is the main purpose of the stakeholder engagement plan?
- To define how stakeholders will be engaged Correct answer.
- To document the project's quality metrics and tolerances
- To list the resources assigned to each scheduled activity
- To record the cost and schedule baselines for the project
Explanation
The plan describes the strategies and specific actions needed to promote productive involvement of stakeholders in project decisions and execution. It is not a repository for baselines, staffing or quality metrics.
Question 39Stakeholder Engagement
Which document is the best starting point for deciding who should take part in risk identification?
- The cost baseline
- The quality management plan
- The stakeholder register Correct answer.
- The resource calendar
Explanation
The stakeholder register lists identified stakeholders along with their influence, interest and classification, which makes it the natural source for selecting participants. Other documents describe availability, budget or quality approach rather than stakeholder characteristics.
Question 40Stakeholder Engagement
A stakeholder's willingness to accept uncertainty in exchange for a potential benefit is that stakeholder's:
- Risk appetite Correct answer.
- Risk register entry
- Risk threshold
- Risk breakdown structure
Explanation
Risk appetite is the degree of uncertainty an entity is willing to accept in anticipation of a reward. Thresholds express that appetite as measurable levels of exposure that trigger action.
Question 41Stakeholder Engagement
A risk owner must be reached immediately and must confirm receipt of the message. Which communication method fits best?
- A one-way email sent without a request for acknowledgement
- A notice posted on the project intranet site for later reading
- A quarterly newsletter sent to the whole organization
- Interactive communication such as a call or meeting Correct answer.
Explanation
Interactive communication provides immediate two-way exchange and confirmation of understanding, which is essential when timing and acknowledgement matter.
Question 42Stakeholder Engagement
The salience model classifies stakeholders using power, urgency and which third attribute?
- Legitimacy Correct answer.
- Cultural fit
- Proximity
- Risk tolerance
Explanation
The salience model uses power, urgency and legitimacy; stakeholders holding all three are considered definitive and receive the highest priority.
Question 43Stakeholder Engagement
A regulatory body whose approval is required is recorded on the engagement matrix as resistant. What is the most appropriate next step?
- Log the resistance as a risk and take no further action
- Ask the sponsor to have the approval requirement removed from the plan
- Plan engagement to address the regulator's concerns Correct answer.
- Submit the request and notify the regulator after implementation
Explanation
A gap between the current and desired engagement level calls for targeted action in the engagement plan that addresses the root cause of the resistance.
Question 44Stakeholder Engagement
In a risk identification workshop, two senior stakeholders dominate the conversation while others stay silent. What should the risk manager do?
- End the workshop and collect input by email instead
- Record only the senior stakeholders' risks to save time
- Let the discussion continue since seniority suggests better insight
- Use a facilitated round-robin so every participant contributes Correct answer.
Explanation
Facilitation techniques such as round-robin ensure each participant contributes, protecting the group from dominance effects and capturing broader expertise.
Question 45Stakeholder Engagement
You need expert risk input but want to prevent a dominant personality from shaping the group's view. Which technique is most suitable?
- The Delphi technique run in anonymous rounds Correct answer.
- A survey of the general public
- A single focus group run by the sponsor
- An open brainstorming session with all experts together
Explanation
Delphi collects expert opinion in anonymous rounds with controlled feedback, which removes the influence of dominant personalities and converges on a considered view.
Question 46Stakeholder Engagement
A sponsor consistently accepts a schedule risk that other key stakeholders consider unacceptable. What is the most useful interpretation for the risk manager?
- The schedule risk should be transferred to a contractor to end the disagreement
- The other stakeholders' views can be disregarded because the sponsor funds the project
- The risk register should record only the sponsor's view of the risk
- Differing tolerances exist and must be reconciled through agreed thresholds Correct answer.
Explanation
Stakeholders legitimately hold different tolerances for the same risk, and the risk manager's role is to surface the difference and help the group agree on thresholds rather than let one view silently prevail.
Question 47Stakeholder Engagement
A project team spans three continents. Which factor most needs consideration when planning risk-related communication?
- The length of the project's closure report
- Language, time-zone and cultural differences Correct answer.
- The preferred font used in risk register templates
- The number of meeting rooms available at headquarters
Explanation
Cross-border communication must account for language proficiency, time-zone spread and cultural norms, because these directly affect how risk information is interpreted and acted upon.
Question 48Stakeholder Engagement
A risk owner agrees to a response but has no authority to commit the needed resources. What should the risk manager do first?
- Close the risk since a response has been agreed
- Reassign the risk to a randomly selected team member
- Raise the authority gap with the sponsor or PM Correct answer.
- Change the response to accept the risk instead
Explanation
A risk owner must have both responsibility and the authority to act; when authority is missing, the gap is resolved at the level that controls the resources, typically the project manager or sponsor.
Question 49Stakeholder Engagement
A risk exceeds the project manager's authority and will affect deliverables owned by another project. Where should it be escalated?
- To the original requester of the affected deliverable
- To the next level up, such as the program manager Correct answer.
- To the team member who first identified the risk
- To the project's procurement specialist
Explanation
Risks that exceed the project's authority, or that are shared across projects, are escalated to the level able to authorize and fund a response.
Question 50Stakeholder Engagement
What is the most direct consequence of failing to identify a relevant stakeholder early?
- The risk register will contain too many entries
- Their risks surface late, causing rework and resistance Correct answer.
- The cost baseline will be revised automatically
- The project charter cannot be approved
Explanation
Stakeholders overlooked during identification bring requirements, constraints and risks into the project late, which typically produces rework and resistance to decisions already made.