Skip to main content

PMP Project Management Professional Exam

Risk Management Practice Questions

10 practice questions with detailed explanations — aligned to the PMP Project Management Professional Exam.

Master Risk Management to boost your score on the PMP Project Management Professional Exam. Each question below mirrors the style and difficulty of real exam questions, complete with detailed explanations so you understand the why behind every answer. Work through all 10 questions, review any that trip you up, and use the related topics below to round out your preparation.

  1. Q1.What is the formula for Expected Monetary Value (EMV) used in risk analysis?

    A.EMV = Probability × Duration
    B.EMV = Probability × Impact (in currency)
    C.EMV = Impact ÷ Probability
    D.EMV = Total Budget × Risk Score
    BEMV = Probability × Impact (in currency)

    Explanation: EMV = Probability × Impact. For example, a 30% chance of a $50,000 cost overrun has an EMV of $15,000. EMV is used in quantitative risk analysis and decision tree analysis to evaluate risk reserves and make risk-informed decisions.

    See answer — start free trial

    3-day free trial · $9.99/mo after · cancel anytime

  2. Q2.What is the difference between a risk and an issue?

    A.A risk is certain to happen; an issue is uncertain
    B.An issue has not yet occurred; a risk has already occurred
    C.A risk is an uncertain future event; an issue is a risk that has occurred and requires immediate action
    D.Both terms mean the same thing in project management
    CA risk is an uncertain future event; an issue is a risk that has occurred and requires immediate action

    Explanation: A risk is an uncertain future event that may or may not occur. When a risk event occurs, it becomes an issue that requires immediate response. Issues are logged in the issue log and require resolution. Risks are tracked in the risk register.

    See answer — start free trial

    3-day free trial · $9.99/mo after · cancel anytime

  3. Q3.A project team decides to purchase insurance to deal with a specific project risk. This is an example of which risk response strategy?

    A.Avoid
    B.Transfer
    C.Mitigate
    D.Accept
    BTransfer

    Explanation: Transferring risk shifts the financial impact of a risk to a third party — most commonly through insurance, bonds, warranties, or fixed-price contracts. The risk still exists but the financial consequence is borne by another party.

    See answer — start free trial

    3-day free trial · $9.99/mo after · cancel anytime

  4. Q4.What is a residual risk?

    A.A new risk created by a risk response action
    B.A risk that remains after a risk response has been implemented
    C.A risk identified after project closure
    D.The highest-priority risk on the risk register
    BA risk that remains after a risk response has been implemented

    Explanation: Residual risks are risks that remain after risk responses have been applied — risks that have not been fully eliminated. For example, mitigating the probability of a server failure still leaves a residual risk of some server failure probability. Residual risks are monitored throughout the project.

    See answer — start free trial

    3-day free trial · $9.99/mo after · cancel anytime

  5. Q5.An opportunity risk response strategy in which you take action to ensure the opportunity definitely occurs is called:

    A.Exploit
    B.Enhance
    C.Share
    D.Accept
    AExploit

    Explanation: Exploit is the opportunity equivalent of Avoid — it eliminates uncertainty by ensuring the opportunity definitely occurs. For example, assigning the best-skilled resources to a task to guarantee a performance gain. Enhance increases the probability of the opportunity; Share brings in a partner to realize the opportunity.

    See answer — start free trial

    3-day free trial · $9.99/mo after · cancel anytime

  6. Q6.A project has a 30% probability of a $100,000 loss event. The Expected Monetary Value (EMV) of this risk is:

    A.-$30,000
    B.-$100,000
    C.$30,000
    D.$70,000
    A-$30,000

    Explanation: EMV = Probability × Impact. For this risk: 0.30 × (-$100,000) = -$30,000. Negative EMV represents a threat (potential cost). Positive EMV represents an opportunity. EMV is used in decision tree analysis and risk reserve calculations.

    See answer — start free trial

    3-day free trial · $9.99/mo after · cancel anytime

  7. Q7.Which risk response strategy transfers the financial impact of a risk to a third party?

    A.Transfer (e.g., insurance, fixed-price contracts)
    B.Avoid
    C.Mitigate
    D.Accept
    ATransfer (e.g., insurance, fixed-price contracts)

    Explanation: Risk transfer shifts the financial consequence of a risk to another party — typically through insurance, fixed-price contracts (passing cost overrun risk to the vendor), or performance bonds. Transfer does not eliminate the risk; it assigns responsibility for consequences to someone else.

    See answer — start free trial

    3-day free trial · $9.99/mo after · cancel anytime

  8. Q8.A risk register entry shows a risk with a high probability but very low impact. How should this risk be prioritized?

    A.Lower priority — address high probability/high impact risks first; this risk may only need monitoring
    B.Highest priority — high probability risks must always be addressed first
    C.Escalate to the project sponsor immediately
    D.Transfer to a third party regardless of impact level
    ALower priority — address high probability/high impact risks first; this risk may only need monitoring

    Explanation: Risk prioritization considers both probability AND impact. A high-probability/low-impact risk (bottom-left of a probability-impact matrix) is relatively low priority compared to high-probability/high-impact (top-right) risks. It should be monitored and may be accepted passively.

    See answer — start free trial

    3-day free trial · $9.99/mo after · cancel anytime

  9. Q9.Secondary risks are best described as:

    A.Risks that arise as a direct result of implementing a risk response strategy
    B.Risks that are lower priority than primary risks on the risk register
    C.Risks identified after the project has begun execution
    D.Environmental risks outside the project team's control
    ARisks that arise as a direct result of implementing a risk response strategy

    Explanation: Secondary risks emerge as a consequence of risk responses. For example, hiring a subcontractor to transfer a technical risk creates a new secondary risk: the subcontractor may fail to perform. Both primary and secondary risks must be identified and managed.

    See answer — start free trial

    3-day free trial · $9.99/mo after · cancel anytime

  10. Q10.Residual risk is defined as the risk that:

    A.Remains after risk responses have been implemented
    B.Was not identified during initial risk identification
    C.Results from scope changes approved through change control
    D.Is owned by the project sponsor rather than the project manager
    ARemains after risk responses have been implemented

    Explanation: Residual risk is the risk remaining after planned risk responses have been applied. No response eliminates 100% of a risk. Residual risk is typically managed through contingency reserves and passive acceptance — the project manager monitors it throughout the project.

    See answer — start free trial

    3-day free trial · $9.99/mo after · cancel anytime

More PMP Project Management Professional Exam Topics

Studying for the PMP Project Management Professional exam? Read more about PMP Prep: Project Management