PMI-RMP study materials
PMI-RMP study resources

PMI-RMP practice questions

One question at a time. Build your PMI-RMP understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Risk Strategy and Planning

What is the primary purpose of the risk management plan?

  1. To list every identified risk with its owner and response
  2. To document the technical specifications of all project deliverables
  3. To record the approved cost baseline for the project
  4. To define how risk activities will be performed and funded Correct answer.

Explanation

The risk management plan describes the approach, processes, roles, funding, and timing for risk management. It is a planning document, not a repository for individual risks or a substitute for other project baselines.

Question 2Risk Strategy and Planning

A project sponsor states that the organization will accept no more than a 5 percent chance of exceeding the project budget. This statement best represents:

  1. risk appetite
  2. risk capacity
  3. risk tolerance Correct answer.
  4. risk avoidance

Explanation

Risk appetite is the amount of risk an organization is willing to pursue. Risk tolerance is the measurable acceptable variation around an objective, such as a maximum overrun probability.

Question 3Risk Strategy and Planning

A risk's exposure exceeds the threshold defined for the project manager. According to good risk governance, what should happen next?

  1. The risk should be escalated to the level with authority to manage it Correct answer.
  2. The risk should be accepted by the project manager without escalation
  3. The risk should be deleted from the risk register because it is outside scope
  4. The risk should be reclassified as an issue and closed

Explanation

Risk thresholds define the level at which a risk must be escalated to a higher authority. Escalation ensures the risk is managed by someone with the required decision rights and resources.

Question 4Risk Strategy and Planning

What does a risk breakdown structure primarily provide?

  1. A numeric ranking of risks by expected monetary value
  2. A hierarchical representation of risk sources and categories Correct answer.
  3. A schedule of risk review meetings across the project life cycle
  4. A hierarchical list of project team members and their risk duties

Explanation

A risk breakdown structure organizes risk sources and categories in a hierarchy. It helps teams identify risks systematically and compare exposures across categories.

Question 5Risk Strategy and Planning

Which element is most characteristic of effective risk governance on a project?

  1. A policy that all risks must be transferred to a contractor
  2. Defined risk ownership, authority, and escalation paths Correct answer.
  3. A single risk owner assigned to every risk in the register
  4. Monthly risk workshops attended only by senior management

Explanation

Risk governance establishes decision rights, accountability, oversight, and escalation. Clear ownership and authority allow risks to be managed at the appropriate level.

Question 6Risk Strategy and Planning

A project team sets aside funds to cover known risks that have been identified and analyzed. These funds are best classified as:

  1. contingency reserve Correct answer.
  2. profit margin
  3. cost baseline padding
  4. management reserve

Explanation

A contingency reserve is allocated for identified risks and accepted exposures. Management reserve is used for unknown-unknowns outside the approved baseline.

Question 7Risk Strategy and Planning

An unknown-unknown event occurs that was not in the risk register and requires additional funding. Which reserve should be used, and who typically authorizes it?

  1. Management reserve, authorized by senior management Correct answer.
  2. Management reserve, authorized by the project team
  3. Contingency reserve, authorized by the risk owner
  4. Contingency reserve, authorized by the project manager

Explanation

Unknown-unknowns fall outside identified risk exposure and are funded from management reserve. Management reserve is controlled by senior management or the sponsor because it affects the overall budget baseline.

Question 8Risk Strategy and Planning

During risk planning, a stakeholder consistently overestimates the likelihood of technical failure based on a past project. This behavior is best described as:

  1. risk appetite
  2. risk capacity
  3. risk attitude Correct answer.
  4. risk neutral

Explanation

Risk attitude is a stakeholder's perception or bias toward risk, often shaped by experience. It can influence how likelihood and impact are assessed during risk planning.

Question 9Risk Strategy and Planning

A low-complexity, short-duration project is tailoring its risk process. Which approach is most appropriate?

  1. Adopt the enterprise risk process unchanged for consistency
  2. Use a simplified register and brief, scaled risk reviews Correct answer.
  3. Eliminate risk identification because the project is short
  4. Require full quantitative analysis before every status meeting

Explanation

Tailoring scales risk processes to the project's size, complexity, and risk profile. A simpler register and brief reviews maintain rigor without unnecessary overhead.

Question 10Risk Strategy and Planning

In the risk management plan, what is the risk owner primarily accountable for?

  1. Approving the project budget
  2. Performing all quantitative risk analysis
  3. Maintaining the enterprise risk database
  4. Managing the assigned risk and its response Correct answer.

Explanation

The risk owner is accountable for monitoring the assigned risk and ensuring the selected response is implemented and effective. This accountability should be explicit in the risk management plan.

Question 11Risk Strategy and Planning

What is the main role of an organizational risk management policy?

  1. To set the organization's risk principles and expectations Correct answer.
  2. To replace the project risk register
  3. To list the specific risks for each active project
  4. To calculate the exact contingency reserve for each project

Explanation

A risk management policy sets the organization's overall principles, expectations, and mandate for managing risk. Project-level documents then apply that policy to specific objectives and constraints.

Question 12Risk Strategy and Planning

In risk planning, a risk is best stated as a cause, an uncertain event, and:

  1. an effect on project objectives Correct answer.
  2. a fixed budget amount approved by finance
  3. a named team member's assigned role
  4. a completed change request record

Explanation

A well-formed risk statement links a cause to an uncertain event and its potential effect on objectives. This structure supports clear analysis and response planning.

Question 13Risk Strategy and Planning

Which finding most directly indicates poor risk data quality in the risk register?

  1. Risk owners include both technical and business staff
  2. Many risks lack clear owners or probabilities Correct answer.
  3. Risks are reviewed at every status meeting
  4. The register includes both threats and opportunities

Explanation

Risk data quality depends on clear, accurate, and complete information such as descriptions, ownership, and assessed probability and impact. Missing owners or probabilities undermines analysis and response planning.

Question 14Risk Strategy and Planning

What should determine the frequency and format of risk reporting on a project?

  1. The personal preference of the project scheduler
  2. A fixed monthly cycle applied to every project in the organization
  3. Stakeholder needs and the project's risk profile Correct answer.
  4. The number of risks currently open in the register only

Explanation

Risk reporting should be tailored to stakeholder information needs and the project's risk exposure. The risk management plan defines reporting cadence, content, and audience.

Question 15Risk Strategy and Planning

A key risk indicator is most useful when it:

  1. gives early warning that a risk exposure is rising Correct answer.
  2. replaces the need for risk identification
  3. records only risks that have already occurred
  4. guarantees that the risk will not occur

Explanation

A key risk indicator provides an early warning signal about changing risk exposure. It supports proactive monitoring and timely response rather than guaranteeing outcomes.

Question 16Risk Strategy and Planning

How should an assumption recorded in the assumptions log be treated if it is critical and uncertain?

  1. It should be removed from the project charter
  2. It should be analyzed as a risk source and monitored Correct answer.
  3. It should be converted into a change request immediately
  4. It should be ignored because assumptions are not risks

Explanation

A critical, uncertain assumption can become a source of risk if it proves false. It should be analyzed, assigned ownership, and monitored like other risk drivers.

Question 17Risk Strategy and Planning

How should historical lessons learned be used during risk planning?

  1. To replace stakeholder interviews entirely
  2. To justify avoiding all previously unsuccessful projects
  3. To inform risk identification using similar past work Correct answer.
  4. To set the final cost baseline without further analysis

Explanation

Lessons learned provide evidence about past risks, causes, and response effectiveness. They should inform risk identification and response planning for similar work.

Question 18Risk Strategy and Planning

Which behavior best demonstrates a mature project risk culture?

  1. Risk discussions are limited to the project manager and sponsor
  2. Team members raise risks early without blame, and leaders act Correct answer.
  3. Team members report only risks that already have approved responses
  4. Risks are documented only after they become issues

Explanation

A mature risk culture encourages early, transparent reporting and constructive action. Blame-free escalation helps surface risks before they become issues.

Question 19Risk Strategy and Planning

A risk owned at the program level affects a project's critical path. What is the most appropriate governance action?

  1. The project manager should hide the risk to avoid program interference
  2. The project team should accept the risk without informing the program
  3. Escalate via the defined path and coordinate with the program owner Correct answer.
  4. The risk should be closed at the project level because the program owns it

Explanation

Risks should be escalated through the defined governance path to the level with authority. The project manager should also coordinate with the program risk owner because the risk affects project objectives.

Question 20Risk Strategy and Planning

Who should approve the project risk management plan to ensure it has authority?

  1. Key stakeholders and the sponsor, per governance Correct answer.
  2. Any team member who has risk experience
  3. An external auditor without project authority
  4. The risk register administrator alone

Explanation

The risk management plan should be approved by the sponsor and key stakeholders consistent with the project governance structure. Approval confirms commitment to roles, funding, and reporting arrangements.

Question 21Risk Strategy and Planning

An organization can absorb a maximum financial loss of $2 million before insolvency. This limit represents the organization's:

  1. contingency reserve
  2. risk threshold for a single project
  3. risk capacity Correct answer.
  4. risk appetite

Explanation

Risk capacity is the maximum risk an organization can bear before threatening its viability. It is distinct from appetite, which reflects willingness to take risk.

Question 22Risk Strategy and Planning

When planning risk management for a project within a program, what should the project manager do first?

  1. Create an independent risk process that ignores program reporting
  2. Wait until the program closes before identifying project risks
  3. Align project risk thresholds and reporting with the program Correct answer.
  4. Transfer all project risks to the program manager

Explanation

Project risk planning should align with the program's risk framework, including categories, thresholds, and reporting. Alignment supports consistent escalation and aggregated risk visibility.

Question 23Risk Strategy and Planning

A project has high uncertainty, many interdependent stakeholders, and rapidly changing requirements. How should risk planning address this complexity?

  1. Use adaptive reviews, broad engagement, and flexible reserves Correct answer.
  2. Freeze the risk register after initial approval
  3. Use a single deterministic risk score for all risks
  4. Reduce stakeholder involvement to simplify communication

Explanation

Complex, uncertain projects require adaptive risk reviews, broad stakeholder engagement, and flexible reserves. These practices help the team detect change and respond as conditions evolve.

Question 24Risk Strategy and Planning

Which activity is part of planning for risk identification rather than performing risk identification itself?

  1. Updating a risk response in the register
  2. Selecting the techniques and participants for identification Correct answer.
  3. Assigning a probability to a schedule risk
  4. Documenting a new vendor delivery risk

Explanation

Planning risk identification defines how identification will be conducted, including techniques, participants, inputs, and timing. The other activities are execution steps within identification or analysis.

Question 25Risk Strategy and Planning

Which set of fields is most essential in a newly created risk register?

  1. Description, cause, effect, owner, probability, and response Correct answer.
  2. The project's accounting codes and tax identifiers
  3. Only the risk description and a single due date for each risk
  4. Team member home addresses and phone numbers

Explanation

A risk register should capture enough information to understand, analyze, assign, and respond to each risk. Core fields include description, cause, effect, owner, probability, impact, and response.

Question 26Risk Strategy and Planning

A project manager is about to begin risk management on a large project and needs to define the methodology, roles, funding, and timing for risk activities. Which document should be created?

  1. The stakeholder engagement plan
  2. The risk breakdown structure
  3. The risk management plan Correct answer.
  4. The risk register

Explanation

The risk management plan describes how risk management will be structured and performed: methodology, roles and responsibilities, budgeting, timing, and reporting formats. Individual risks and their responses are captured later in the risk register, so the plan must exist first.

Question 27Risk Strategy and Planning

A project manager wants to reveal where risk exposure concentrates across sources such as technical, commercial, and external factors. Which structure should be used?

  1. The resource breakdown structure
  2. The risk breakdown structure Correct answer.
  3. The work breakdown structure
  4. The organizational breakdown structure

Explanation

The risk breakdown structure is a hierarchical representation of risk sources and categories, used during planning to categorize risks and expose where exposure is concentrated. The other breakdown structures decompose scope, resources, or reporting lines rather than risk sources.

Question 28Risk Strategy and Planning

Which inputs are most relevant when planning how risk management will be performed on a project?

  1. The activity list, duration estimates, and cost baseline
  2. The project charter and stakeholder register Correct answer.
  3. The quality metrics, issue log, and quality control measurements
  4. The resource calendars and team performance assessments

Explanation

The charter supplies project objectives, success criteria, high-level risks, and the sponsor's authority, while the stakeholder register identifies who can influence risk decisions and what their risk attitudes are; enterprise environmental factors and organizational process assets also shape the approach. Detailed execution artifacts such as activity lists or quality measurements are not primary inputs to this planning process.

Question 29Risk Strategy and Planning

A risk is assigned to a functional manager who is accountable for the risk outcome, while a team member is tasked with carrying out the agreed mitigation steps. What is the team member's role?

  1. Risk champion
  2. Risk reviewer
  3. Risk action owner Correct answer.
  4. Risk owner

Explanation

The risk owner is accountable for managing the risk and its response overall, whereas the risk action owner performs the specific response actions assigned. The risk management plan should distinguish these roles so accountability is not confused with task execution.

Question 30Risk Strategy and Planning

The risk response plan documents actions to be taken if a specific risk event occurs, plus a separate set of actions to be used if the primary response proves ineffective. What is the second set of actions called?

  1. A risk response strategy
  2. A fallback plan Correct answer.
  3. A workaround
  4. A contingency plan

Explanation

A contingency plan contains predefined actions to be executed if the risk event occurs, while a fallback plan contains actions to be used if the primary or contingency response fails. Workarounds, by contrast, are unplanned responses to issues that were not addressed in advance.

Question 31Risk Strategy and Planning

Before assessing individual risks, a project manager defines probability and impact scales with explicit descriptive criteria for each level. What is the primary benefit of this step?

  1. It makes risk ratings comparable across assessors Correct answer.
  2. It allows every risk to be assigned to the sponsor
  3. It reduces the number of risks that must be recorded
  4. It removes the need for management reserves

Explanation

Explicit scales give all assessors a shared interpretation of each level, so ratings are consistent and can be reliably compared and prioritized. The scales do not change how many risks exist, eliminate reserves, or shift ownership of risks to the sponsor.

Question 32Risk Strategy and Planning

Six months into execution, a project's scope and vendor base have changed substantially, but the risk management plan has not been revisited. What is the most appropriate action?

  1. Continue using the current plan because it was approved at baseline
  2. Defer any change to the plan until project closure lessons learned
  3. Replace the plan with the risk register at the next gate
  4. Update the plan to reflect the new context and re-approve it Correct answer.

Explanation

Planning for risk management is iterative; significant changes in scope, contracts, organization, or environment require the approach, thresholds, roles, and reporting to be revisited and re-approved. Leaving an outdated approach in force means escalations, tolerances, and responsibilities no longer fit the project.

Question 33Risk Strategy and Planning

An organization accepts high uncertainty in technology choices but has very low tolerance for regulatory non-compliance. A project carries both types of risk. How should risk planning reflect this?

  1. Set category-specific tolerances and prioritize regulatory responses Correct answer.
  2. Record both categories with the same rating scale and no differentiated treatment
  3. Escalate every technology risk to the sponsor because appetite is high
  4. Apply a single uniform threshold to all risks so the project is treated consistently

Explanation

Risk appetite can differ by risk category, so the plan should define tolerances per category, often mapped through the risk breakdown structure, and prioritize responses where tolerance is lowest. A uniform threshold ignores the organization's stated position and would misdirect attention and escalation.

Question 34Risk Strategy and Planning

A risk management plan states that risks must be escalated when they could cause 'significant disruption' or 'major concern'. Reviewers find that different managers escalate different risks. What is the best improvement?

  1. Define thresholds as measurable deviations tied to project objectives Correct answer.
  2. Limit escalation to risks that have already occurred and entered the issue log
  3. Replace thresholds with a statement that the team will use professional judgment
  4. Require all risks to be escalated so that no judgment is needed

Explanation

Thresholds must be objective, measurable, and traceable to project objectives, such as a schedule slip beyond two weeks or a cost impact above a stated amount, so escalation decisions are consistent. Vague qualitative wording invites each manager to apply a different interpretation.

Question 35Stakeholder Engagement

Which item is a core element of the stakeholder register?

  1. The approved cost baseline and its funding requirements
  2. The quality control checklist and inspection results
  3. Each stakeholder's influence and potential impact Correct answer.
  4. The project schedule network and its critical path activities

Explanation

The stakeholder register records identification details, an assessment of each stakeholder's influence and potential impact, and a classification of that stakeholder. Baselines, schedules and checklists are documented in other project plans and records.

Question 36Stakeholder Engagement

In the stakeholder engagement assessment matrix, which level describes a stakeholder who knows about the project but neither supports nor opposes it?

  1. Resistant
  2. Neutral Correct answer.
  3. Leading
  4. Unaware

Explanation

The matrix uses five levels: unaware, resistant, neutral, supportive and leading. Neutral means the stakeholder is aware of the project but does not actively support or oppose it.

Question 37Stakeholder Engagement

On a power/interest grid, how should a stakeholder with high power and low interest be managed?

  1. Kept satisfied Correct answer.
  2. Kept informed
  3. Managed closely with maximum engagement
  4. Monitored with minimal effort

Explanation

High power, low interest stakeholders can block outcomes but care little about day-to-day detail, so the aim is to keep them satisfied with concise, sufficient information.

Question 38Stakeholder Engagement

What is the main purpose of the stakeholder engagement plan?

  1. To define how stakeholders will be engaged Correct answer.
  2. To document the project's quality metrics and tolerances
  3. To list the resources assigned to each scheduled activity
  4. To record the cost and schedule baselines for the project

Explanation

The plan describes the strategies and specific actions needed to promote productive involvement of stakeholders in project decisions and execution. It is not a repository for baselines, staffing or quality metrics.

Question 39Stakeholder Engagement

Which document is the best starting point for deciding who should take part in risk identification?

  1. The cost baseline
  2. The quality management plan
  3. The stakeholder register Correct answer.
  4. The resource calendar

Explanation

The stakeholder register lists identified stakeholders along with their influence, interest and classification, which makes it the natural source for selecting participants. Other documents describe availability, budget or quality approach rather than stakeholder characteristics.

Question 40Stakeholder Engagement

A stakeholder's willingness to accept uncertainty in exchange for a potential benefit is that stakeholder's:

  1. Risk appetite Correct answer.
  2. Risk register entry
  3. Risk threshold
  4. Risk breakdown structure

Explanation

Risk appetite is the degree of uncertainty an entity is willing to accept in anticipation of a reward. Thresholds express that appetite as measurable levels of exposure that trigger action.

Question 41Stakeholder Engagement

A risk owner must be reached immediately and must confirm receipt of the message. Which communication method fits best?

  1. A one-way email sent without a request for acknowledgement
  2. A notice posted on the project intranet site for later reading
  3. A quarterly newsletter sent to the whole organization
  4. Interactive communication such as a call or meeting Correct answer.

Explanation

Interactive communication provides immediate two-way exchange and confirmation of understanding, which is essential when timing and acknowledgement matter.

Question 42Stakeholder Engagement

The salience model classifies stakeholders using power, urgency and which third attribute?

  1. Legitimacy Correct answer.
  2. Cultural fit
  3. Proximity
  4. Risk tolerance

Explanation

The salience model uses power, urgency and legitimacy; stakeholders holding all three are considered definitive and receive the highest priority.

Question 43Stakeholder Engagement

A regulatory body whose approval is required is recorded on the engagement matrix as resistant. What is the most appropriate next step?

  1. Log the resistance as a risk and take no further action
  2. Ask the sponsor to have the approval requirement removed from the plan
  3. Plan engagement to address the regulator's concerns Correct answer.
  4. Submit the request and notify the regulator after implementation

Explanation

A gap between the current and desired engagement level calls for targeted action in the engagement plan that addresses the root cause of the resistance.

Question 44Stakeholder Engagement

In a risk identification workshop, two senior stakeholders dominate the conversation while others stay silent. What should the risk manager do?

  1. End the workshop and collect input by email instead
  2. Record only the senior stakeholders' risks to save time
  3. Let the discussion continue since seniority suggests better insight
  4. Use a facilitated round-robin so every participant contributes Correct answer.

Explanation

Facilitation techniques such as round-robin ensure each participant contributes, protecting the group from dominance effects and capturing broader expertise.

Question 45Stakeholder Engagement

You need expert risk input but want to prevent a dominant personality from shaping the group's view. Which technique is most suitable?

  1. The Delphi technique run in anonymous rounds Correct answer.
  2. A survey of the general public
  3. A single focus group run by the sponsor
  4. An open brainstorming session with all experts together

Explanation

Delphi collects expert opinion in anonymous rounds with controlled feedback, which removes the influence of dominant personalities and converges on a considered view.

Question 46Stakeholder Engagement

A sponsor consistently accepts a schedule risk that other key stakeholders consider unacceptable. What is the most useful interpretation for the risk manager?

  1. The schedule risk should be transferred to a contractor to end the disagreement
  2. The other stakeholders' views can be disregarded because the sponsor funds the project
  3. The risk register should record only the sponsor's view of the risk
  4. Differing tolerances exist and must be reconciled through agreed thresholds Correct answer.

Explanation

Stakeholders legitimately hold different tolerances for the same risk, and the risk manager's role is to surface the difference and help the group agree on thresholds rather than let one view silently prevail.

Question 47Stakeholder Engagement

A project team spans three continents. Which factor most needs consideration when planning risk-related communication?

  1. The length of the project's closure report
  2. Language, time-zone and cultural differences Correct answer.
  3. The preferred font used in risk register templates
  4. The number of meeting rooms available at headquarters

Explanation

Cross-border communication must account for language proficiency, time-zone spread and cultural norms, because these directly affect how risk information is interpreted and acted upon.

Question 48Stakeholder Engagement

A risk owner agrees to a response but has no authority to commit the needed resources. What should the risk manager do first?

  1. Close the risk since a response has been agreed
  2. Reassign the risk to a randomly selected team member
  3. Raise the authority gap with the sponsor or PM Correct answer.
  4. Change the response to accept the risk instead

Explanation

A risk owner must have both responsibility and the authority to act; when authority is missing, the gap is resolved at the level that controls the resources, typically the project manager or sponsor.

Question 49Stakeholder Engagement

A risk exceeds the project manager's authority and will affect deliverables owned by another project. Where should it be escalated?

  1. To the original requester of the affected deliverable
  2. To the next level up, such as the program manager Correct answer.
  3. To the team member who first identified the risk
  4. To the project's procurement specialist

Explanation

Risks that exceed the project's authority, or that are shared across projects, are escalated to the level able to authorize and fund a response.

Question 50Stakeholder Engagement

What is the most direct consequence of failing to identify a relevant stakeholder early?

  1. The risk register will contain too many entries
  2. Their risks surface late, causing rework and resistance Correct answer.
  3. The cost baseline will be revised automatically
  4. The project charter cannot be approved

Explanation

Stakeholders overlooked during identification bring requirements, constraints and risks into the project late, which typically produces rework and resistance to decisions already made.