1. GDAS PM Professions:
PMP Study Group
Session #10: Risk Management
Monique Howard
January 8, 2009
© 2005 Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice

2. 1. In your project, you can use all the following tools and techniques for risk response
planning EXCEPT:
1. Strategies for negative risks or threats
2. Contingent response planning
3. Strategy for threat and opportunities
4. Strategy for residual risks

3. 1. In your project, you can use all the following tools and techniques for risk response
planning EXCEPT:
1. Strategies for negative risks or threats
2. Contingent response planning
3. Strategy for threat and opportunities
4. Strategy for residual risks
Correct Choice: 4
Justification: Figure 11-14
Reference: PMBOK Third Edition, Page Number: 260

4. 2. You are the project manager in an automobile manufacturing company. A vendor was
sending you the machine parts required in your manufacturing process,but the parts did
not reach in time because of heavy rains. You had anticipated this risk and planned for it in
your risk response plan. So, as per your risk response plan, you started using machine
parts which had been supplied one year ago and were not utilized at that time. However,
this has subjected your project to a new risk - that the machine parts which were not used
for one year might be having higher level of defects.
This new risk can also be called:
1. Unidentifiable Risk
2. Unmanageable Risk
3. Secondary Risk
4. Residual Risk

5. 2. You are the project manager in an automobile manufacturing company. A vendor was
sending you the machine parts required in your manufacturing process,but the parts did
not reach in time because of heavy rains. You had anticipated this risk and planned for it in
your risk response plan. So, as per your risk response plan, you started using machine
parts which had been supplied one year ago and were not utilized at that time. However,
this has subjected your project to a new risk - that the machine parts which were not used
for one year might be having higher level of defects.
This new risk can also be called:
1. Unidentifiable Risk
2. Unmanageable Risk
3. Secondary Risk
4. Residual Risk
Correct Choice: 3
Justification: Secondary risks that arise as a direct outcome of implementing a risk response.
Reference: PMBOK Third Edition, Page Number: 264

6. 3. In your project, you have identified important risks, and planned appropriate responses to the
risks. Some risks e.g. possibility of natural disasters have been documented and accepted
in your risk management plan. If there are risks that remain after you have taken these
steps, then such risks are called:
1. Unidentifiable Risks
2. Residual Risks
3. Secondary Risks
4. Accepted Risks

7. 4. Risk Management Planning is the process of deciding how to approach and plan the risk
management activities for a project. It is important to plan for the risk management
processes that follow to ensure that the level, type, and visibility of risk management are
commensurate with both the risk and importance of the project to the organization. The
output of Risk Management Planning is:
1. Risks
2. Risk Management Plan
3. Risk Ranking of the Project
4. Planning Meetings

8. 3. In your project, you have identified important risks, and planned appropriate responses to the
risks. Some risks e.g. possibility of natural disasters have been documented and accepted
in your risk management plan. If there are risks that remain after you have taken these
steps, then such risks are called:
1. Unidentifiable Risks
2. Residual Risks
3. Secondary Risks
4. Accepted Risks
Correct Choice: 2
Justification: Residual risks that are expected to remain after planned responses have been taken, as well as those which have
been deliberately accepted.
Reference: PMBOK Third Edition, Page Number: 264

9. 4. Risk Management Planning is the process of deciding how to approach and plan the risk
management activities for a project. It is important to plan for the risk management
processes that follow to ensure that the level, type, and visibility of risk management are
commensurate with both the risk and importance of the project to the organization. The
output of Risk Management Planning is:
1. Risks
2. Risk Management Plan
3. Risk Ranking of the Project
4. Planning Meetings
Correct Choice: 2
Justification: Figure 11-3
Reference: PMBOK Third Edition, Page Number: 242

10. 5. In your project, you have identified a list of identified risks, a list of potential responses
and root causes of risks. You should document this information in the :
1. Risk Management Plan
2. Risk Database
3. Project Plan
4. Risk Register

11. 5. In your project, you have identified a list of identified risks, a list of potential responses
and root causes of risks. You should document this information in the :
1. Risk Management Plan
2. Risk Database
3. Project Plan
4. Risk Register
Correct Choice: 4
Justification: The risk register includes a list of identified risks, a list of potential responses, root causes of risk, and updated risk
categories.
Reference: PMBOK Third Edition, Page Number: 249

12. 6. Risk management helps in maximizing the probability and consequences of positive
events and minimizing the probability and consequences of adverse events to project
objectives. Risk Response Planning helps in this context because it:
1. helps in deciding how to approach and plan the risk management activities.
2. develops procedures and techniques to enhance opportunities and reduce threats to project
objectives.
3. determines which risks might affect the project and documents their characteristics.
4. monitors residual risks, identifies new risks and executes risk reduction plans.

13. 6. Risk management helps in maximizing the probability and consequences of positive
events and minimizing the probability and consequences of adverse events to project
objectives. Risk Response Planning helps in this context because it:
1. helps in deciding how to approach and plan the risk management activities.
2. develops procedures and techniques to enhance opportunities and reduce threats to project
objectives.
3. determines which risks might affect the project and documents their characteristics.
4. monitors residual risks, identifies new risks and executes risk reduction plans.
Correct Choice: 2
Justification: Risk response planning - developing options and actions to enhance opportunities, and reducing threats to project
objectives.
Reference: PMBOK Third Edition, Page Number: 237
pmstudy.com comments:
* Option 1: This is Risk Management Planning
* Option 3: This is Risk Identification
* Option 4: This is Risk Monitoring and Control

14. 7. Utility function is a commonly used technique to find out the tolerance of a project manager
towards risk. Some project managers are more averse to risk than others. All of the
following are different classifications of tolerance for risk EXCEPT:
1. Risk Averter
2. Risk Seeker
3. Risk Mitigator
4. Risk Neutral

15. 7. Utility function is a commonly used technique to find out the tolerance of a project manager
towards risk. Some project managers are more averse to risk than others. All of the
following are different classifications of tolerance for risk EXCEPT:
1. Risk Averter
2. Risk Seeker
3. Risk Mitigator
4. Risk Neutral
Correct Choice: 3
Justification:
Reference: Project Management - A Systems Approach to Planning, Scheduling and Controlling, Page Number: 906

16. 8. As part of the Risk Management Process, you just created an overall risk ranking of the
project and a list of prioritized risks, identified which risks need additional analysis and
determined trends in risk analysis results. What should you do next?
1. Analyze the effect of risk events and assign a numerical rating to those risks.
2. Create a list of identified risks.
3. Determine the fundamental conditions or events that may give rise to identified risk (root causes of
risk).
4. Make a list of potential responses to the risks.

17. 8. As part of the Risk Management Process, you just created an overall risk ranking of the
project and a list of prioritized risks, identified which risks need additional analysis and
determined trends in risk analysis results. What should you do next?
1. Analyze the effect of risk events and assign a numerical rating to those risks.
2. Create a list of identified risks.
3. Determine the fundamental conditions or events that may give rise to identified risk (root causes of
risk).
4. Make a list of potential responses to the risks.
Correct Choice: 1
Justification: Tasks like creating an overall risk ranking of the project, which includes a list of prioritized risks, identifying which
risks need additional analysis and determining trends in risk analysis results - are all outputs of Qualitative Risk Analysis (PMBOK
Page 253). So, the next step is to perform Quantitative Risk Analysis (i.e. analyze the effect of risk events and assign a numerical
rating to those risks) - (PMBOK Page 254)
Please note that Option 2, Option 3 and Option 4 refer to outputs from Risk Identification Phase which has already been completed
(PMBOK Page 249)
Reference: pmstudy.com notes as mentioned above

18. 9. You are in the process of developing options, and determining actions to enhance
opportunities and reduce threats to the project`s objectives. What should you be
doing next?
1. Determining which risks might affect the project and documenting their
characteristics.
2. Identifying, analyzing and planning for newly arising risks.
3. Deciding how to approach and conduct risk management activities for the project.
4. Assessing the priority of identified risks using their probability of occurring.

19. 9. You are in the process of developing options, and determining actions to enhance
opportunities and reduce threats to the project`s objectives. What should you be
doing next?
1. Determining which risks might affect the project and documenting their
characteristics.
2. Identifying, analyzing and planning for newly arising risks.
3. Deciding how to approach and conduct risk management activities for the project.
4. Assessing the priority of identified risks using their probability of occurring.
Correct Choice: 2
Justification:
"Developing options, and determining actions to enhance opportunities and reduce threats to the project`s objectives" - this is Risk
Response Planning; PMBOK Page 260
"Identifying, analyzing and planning for newly arising risks" - this is Risk Monitoring and Control - PMBOK Page 264. Please note that
this happens after Risk Response Planning and is the correct answer
The other options happen before Risk Response Planning:
Determining which risks might affect the project and documenting their characteristics (Risk Identification, PMBOK Page 246)
Deciding how to approach and conduct risk management activities for the project (Risk Management Planning - PMBOK Page 242)
Assessing the priority of identified risks using their probability of occurring (Qualitative Risk Analysis - PMBOK Page 249)
Reference: pmstudy.com notes as mentioned above

20. 10. You are in the build phase of the project. But it has run into several unanticipated
problems. Several risks have surfaced which you had not anticipated earlier. The project
is over-budget and behind schedule. What should you do?
1. Create updates to risk response plan
2. Create a revised project plan
3. Perform risk response audits
4. Perform updated risk identification and analysis

21. 10. You are in the build phase of the project. But it has run into several unanticipated
problems. Several risks have surfaced which you had not anticipated earlier. The project
is over-budget and behind schedule. What should you do?
1. Create updates to risk response plan
2. Create a revised project plan
3. Perform risk response audits
4. Perform updated risk identification and analysis
Correct Choice: 4
Justification: Results from an earned value analysis may indicate potential deviation of the project at completion from cost and
schedule targets. When a project deviates significantly from the baseline, updated risk identification and analysis should be
performed.
Reference: pmstudy.com notes as mentioned above

22. 11. In your project, there is:
* 50% probability of $ 40,000 profit
* 50% probability of $ 25,000 loss
What is the expected profit in your project?
1. $ 32,500
2. $ 25,000
3. $ 7,500
4. - $ 7,500 (i.e. loss of $ 7,500)

23. 11. In your project, there is:
* 50% probability of $ 40,000 profit
* 50% probability of $ 25,000 loss
What is the expected profit in your project?
1. $ 32,500
2. $ 25,000
3. $ 7,500
4. - $ 7,500 (i.e. loss of $ 7,500)
Correct Choice: 3
Justification:
Expected Profit = Sum of (Probability X Profit) (for each alternative)
= (0.50 x $ 40,000) + (0.50 x - $ 25,000)
= $ 20,000 - $ 12,500
= $ 7,500 profit
Reference: pmstudy.com notes as mentioned above

24. 12. In risk response planning, you are in the process of developing options, and determining
actions to reduce threats to your project`s objectives. When you show the results of your
risk response planning to your project sponsor, she is not comfortable with the risks in
the project and she suggests that the project scope should be decreased. This is an
example of :
1. Inappropriate risk management because it is having a direct impact on your project scope
2. Risk Avoidance
3. Risk Mitigation
4. Risk Transfer

25. 12. In risk response planning, you are in the process of developing options, and determining
actions to reduce threats to your project`s objectives. When you show the results of your
risk response planning to your project sponsor, she is not comfortable with the risks in
the project and she suggests that the project scope should be decreased. This is an
example of :
1. Inappropriate risk management because it is having a direct impact on your project scope
2. Risk Avoidance
3. Risk Mitigation
4. Risk Transfer
Correct Choice: 2
Justification: Risk avoidance involves changing the project management plan to elimiate the threat posed by an adverse risk.... or
to relax the objective that is in jeopardy, such as extending the schedule or reducing scope.
Reference: PMBOK Third Edition, Page Number: 261

26. 13. In your project, you just conducted a risk data quality analysis to evaluate the degree to which
the data about risks is useful for risk management. What could be a potential next
step?
1. Perform a structured review of project plans and assumptions, both at the total project and detailed
scope levels
2. Develop checklists for identifying risks based on historical information and knowledge that has
been accumulated from previous similar projects
3. Conduct planning meetings to develop the risk management plan
4. Conduct interviews to quantify the probability and consequences of risks on project activities

27. 13. In your project, you just conducted a risk data quality analysis to evaluate the degree to which
the data about risks is useful for risk management. What could be a potential next
step?
1. Perform a structured review of project plans and assumptions, both at the total project and detailed
scope levels
2. Develop checklists for identifying risks based on historical information and knowledge that has
been accumulated from previous similar projects
3. Conduct planning meetings to develop the risk management plan
4. Conduct interviews to quantify the probability and consequences of risks on project activities
Correct Choice: 4
Justification: Risk data quality analysis is a tool for Qualitative Risk Analysis.
* Option 4 refers to "Interviewing" which is a tool and technique for Quantitative Risk Analysis. Quantitative Risk Analysis is conducted
after Qualitatitive Risk Analysis
* Option 1 refers to "Documentation Reviews" which is a tool and technique for Risk Identification. Risk Identification is conducted
before Qualitatitive Risk Analysis
* Option 2 refers to "Checklists" which is a tool and technique for Risk Identification. Risk Identification is conducted before Qualitatitive
Risk Analysis
* Option 3 refers to "Planning Meetings" which is a tool and technique for Risk Management Planning. Risk Management Planning is
conducted before Qualitatitive Risk Analysis
Reference: pmstudy.com notes as mentioned above

28. 14. You are the project manager of a project which involves oil-exploration in the ocean. Since
you cannot plan for all eventualities, you establish a contingency reserve, including
amounts of time, money or resources to handle known or unknown risks. This is an
example of :
1. Risk Avoidance
2. Risk Transfer
3. Active Risk Acceptance
4. Improper Risk Planning since all risks should be identified and accounted for

29. 14. You are the project manager of a project which involves oil-exploration in the ocean. Since
you cannot plan for all eventualities, you establish a contingency reserve, including
amounts of time, money or resources to handle known or unknown risks. This is an
example of :
1. Risk Avoidance
2. Risk Transfer
3. Active Risk Acceptance
4. Improper Risk Planning since all risks should be identified and accounted for
Correct Choice: 3
Justification: The most common active acceptance strategy is to establish a contingency reserve, including amounts of time,
money or resources, to handle known-or even sometimes potential, unknown - threats or opportunities.
Reference: PMBOK Third Edition, Page Number: 263

30. 15. Please refer to this Decision Tree which shows the analysis of profit/loss for the two
alternatives (i.e. to build or buy).
What is the opportunity cost if the project manager decides to build instead of buy?
1. $ 1,500
2. $ 3,500
3. $ 1,500
4. $ 5,000

31. Correct Choice: 2
Justification: Please refer to the diagram:
Profit of Build : $ 5,000
Profit of Buy : $ 3,500
Opportunity cost of Build = Profit you give up if you do not buy = $ 3,500
Reference: pmstudy.com notes as mentioned above

32. Wrap Up
Conference#: 702-696-4520 or 866-409-2889
Participant – 370670831
11 Procurement Management and Tips January 22 2:00pm Presenter: https://
& Tricks (PMBOK Chapters 12) EST
www.rooms.hp.com/attend/default.aspx?key
=EHHP87PUR6
Participant: https://
www.rooms.hp.com/attend/default.aspx?key
=EPFBPLUR8X