PMP Project Management Professional Exam
Risk Management Practice Questions
10 practice questions with detailed explanations — aligned to the PMP Project Management Professional Exam.
Master Risk Management to boost your score on the PMP Project Management Professional Exam. Each question below mirrors the style and difficulty of real exam questions, complete with detailed explanations so you understand the why behind every answer. Work through all 10 questions, review any that trip you up, and use the related topics below to round out your preparation.
Q1.What is the formula for Expected Monetary Value (EMV) used in risk analysis?
A.EMV = Probability × DurationB.EMV = Probability × Impact (in currency)C.EMV = Impact ÷ ProbabilityD.EMV = Total Budget × Risk Score✓B. EMV = Probability × Impact (in currency)Explanation: EMV = Probability × Impact. For example, a 30% chance of a $50,000 cost overrun has an EMV of $15,000. EMV is used in quantitative risk analysis and decision tree analysis to evaluate risk reserves and make risk-informed decisions.
See answer — start free trial3-day free trial · $9.99/mo after · cancel anytime
Q2.What is the difference between a risk and an issue?
A.A risk is certain to happen; an issue is uncertainB.An issue has not yet occurred; a risk has already occurredC.A risk is an uncertain future event; an issue is a risk that has occurred and requires immediate actionD.Both terms mean the same thing in project management✓C. A risk is an uncertain future event; an issue is a risk that has occurred and requires immediate actionExplanation: A risk is an uncertain future event that may or may not occur. When a risk event occurs, it becomes an issue that requires immediate response. Issues are logged in the issue log and require resolution. Risks are tracked in the risk register.
See answer — start free trial3-day free trial · $9.99/mo after · cancel anytime
Q3.A project team decides to purchase insurance to deal with a specific project risk. This is an example of which risk response strategy?
A.AvoidB.TransferC.MitigateD.Accept✓B. TransferExplanation: Transferring risk shifts the financial impact of a risk to a third party — most commonly through insurance, bonds, warranties, or fixed-price contracts. The risk still exists but the financial consequence is borne by another party.
See answer — start free trial3-day free trial · $9.99/mo after · cancel anytime
Q4.What is a residual risk?
A.A new risk created by a risk response actionB.A risk that remains after a risk response has been implementedC.A risk identified after project closureD.The highest-priority risk on the risk register✓B. A risk that remains after a risk response has been implementedExplanation: Residual risks are risks that remain after risk responses have been applied — risks that have not been fully eliminated. For example, mitigating the probability of a server failure still leaves a residual risk of some server failure probability. Residual risks are monitored throughout the project.
See answer — start free trial3-day free trial · $9.99/mo after · cancel anytime
Q5.An opportunity risk response strategy in which you take action to ensure the opportunity definitely occurs is called:
A.ExploitB.EnhanceC.ShareD.Accept✓A. ExploitExplanation: Exploit is the opportunity equivalent of Avoid — it eliminates uncertainty by ensuring the opportunity definitely occurs. For example, assigning the best-skilled resources to a task to guarantee a performance gain. Enhance increases the probability of the opportunity; Share brings in a partner to realize the opportunity.
See answer — start free trial3-day free trial · $9.99/mo after · cancel anytime
Q6.A project has a 30% probability of a $100,000 loss event. The Expected Monetary Value (EMV) of this risk is:
A.-$30,000B.-$100,000C.$30,000D.$70,000✓A. -$30,000Explanation: EMV = Probability × Impact. For this risk: 0.30 × (-$100,000) = -$30,000. Negative EMV represents a threat (potential cost). Positive EMV represents an opportunity. EMV is used in decision tree analysis and risk reserve calculations.
See answer — start free trial3-day free trial · $9.99/mo after · cancel anytime
Q7.Which risk response strategy transfers the financial impact of a risk to a third party?
A.Transfer (e.g., insurance, fixed-price contracts)B.AvoidC.MitigateD.Accept✓A. Transfer (e.g., insurance, fixed-price contracts)Explanation: Risk transfer shifts the financial consequence of a risk to another party — typically through insurance, fixed-price contracts (passing cost overrun risk to the vendor), or performance bonds. Transfer does not eliminate the risk; it assigns responsibility for consequences to someone else.
See answer — start free trial3-day free trial · $9.99/mo after · cancel anytime
Q8.A risk register entry shows a risk with a high probability but very low impact. How should this risk be prioritized?
A.Lower priority — address high probability/high impact risks first; this risk may only need monitoringB.Highest priority — high probability risks must always be addressed firstC.Escalate to the project sponsor immediatelyD.Transfer to a third party regardless of impact level✓A. Lower priority — address high probability/high impact risks first; this risk may only need monitoringExplanation: Risk prioritization considers both probability AND impact. A high-probability/low-impact risk (bottom-left of a probability-impact matrix) is relatively low priority compared to high-probability/high-impact (top-right) risks. It should be monitored and may be accepted passively.
See answer — start free trial3-day free trial · $9.99/mo after · cancel anytime
Q9.Secondary risks are best described as:
A.Risks that arise as a direct result of implementing a risk response strategyB.Risks that are lower priority than primary risks on the risk registerC.Risks identified after the project has begun executionD.Environmental risks outside the project team's control✓A. Risks that arise as a direct result of implementing a risk response strategyExplanation: Secondary risks emerge as a consequence of risk responses. For example, hiring a subcontractor to transfer a technical risk creates a new secondary risk: the subcontractor may fail to perform. Both primary and secondary risks must be identified and managed.
See answer — start free trial3-day free trial · $9.99/mo after · cancel anytime
Q10.Residual risk is defined as the risk that:
A.Remains after risk responses have been implementedB.Was not identified during initial risk identificationC.Results from scope changes approved through change controlD.Is owned by the project sponsor rather than the project manager✓A. Remains after risk responses have been implementedExplanation: Residual risk is the risk remaining after planned risk responses have been applied. No response eliminates 100% of a risk. Residual risk is typically managed through contingency reserves and passive acceptance — the project manager monitors it throughout the project.
See answer — start free trial3-day free trial · $9.99/mo after · cancel anytime
More PMP Project Management Professional Exam Topics
Studying for the PMP Project Management Professional exam? Read more about PMP Prep: Project Management →