PMI Updated PMI-RMP Exam Questions and Answers by tomos

When a project involves equipment provided by the customer, the risk of delayed delivery is significant, as it can have a high impact on the project timeline. The risk manager should ensure that this risk is well-documented in the risk register and managed as a high-impact project risk. By doing so, the project team can monitor the situation closely and implement contingency plans if necessary. This approach is consistent with PMI’s guidelines on risk management, which emphasize the importance of identifying, documenting, and managing high-impact risks to mitigate their effects on project objectives​​.

Relying solely on historical project results for new assumptions can cause errors, as unique circumstances may differ. The PMBOK® Guide notes:

"Assumptions should be validated as part of project planning. Overreliance on past project data without proper contextual analysis can result in unrealistic expectations."

— PMBOK® Guide, 6th Edition, Section 11.2

According to the PMBOK Guide, the risk owner is the person assigned the responsibility of monitoring the risk and implementing the risk response plan. The risk owner should be involved in the risk response execution and evaluation, and should communicate the results and outcomes to the relevant stakeholders. In the case of a data breach, the risk owner should coordinate a response with the risk manager and other parties involved, such as the security team, the legal team, the customer service team, and the senior management. The risk owner should also report the status of the risk and the effectiveness of the response plan to the risk manager. The risk manager should oversee the risk response process and ensure that the risk is handled appropriately and in alignment with the project objectives and stakeholder expectations. References: = PMBOK Guide, 6th edition, pages 452-453; The Standard for Risk Management in Portfolios, Programs, and Projects, page 79.

According to the PMBOK® Guide, a scope change request is a formal proposal to modify any project document, deliverable, or baseline. It is an output of the Perform Integrated Change Control process, which is the process of reviewing all change requests, approving changes, and managing changes to the deliverables, organizational process assets, project documents, and the project management plan. A scope change request may introduce new risks or affect existing risks on the project, which may impact the project objectives, such as scope, schedule, cost, and quality.

The risk manager should support the project manager with the scope change request by evaluating any new risks that are introduced due to the change in scope. This is because the risk manager is responsible for planning, implementing, and monitoring the risk management activities on the project, as well as communicating and reporting the risk information to the project manager and other stakeholders. The risk manager should use the appropriate risk identification and analysis techniques, such as brainstorming, interviews, checklists, SWOT analysis, cause and effect diagrams, probability and impact assessment, etc., to identify and evaluate the new risks that may arise from the scope change. The risk manager should also document the new risks in the risk register, which is a project document that contains the details of all identified individual project risks and other relevant information.

The other options are not valid for what the risk manager should do to support the project manager with the scope change request:

Update the risk management plan to reflect the scope change: This is not a valid option because the risk management plan is a component of the project management plan, which describes how risk management activities will be structured and performed on the project. It is an output of the Plan Risk Management process, which is the process of defining how to conduct risk management activities for a project. The risk management plan should not be updated to reflect the scope change, but rather to reflect any changes in the risk management approach, methodology, roles and responsibilities, budget, timing, risk categories, definitions, reporting formats, etc. The risk management plan should be updated only when there is a change in the risk management process, not in the project scope.

Reassess the identified risks that impact the project scope: This is not a valid option because reassessing the identified risks that impact the project scope is part of the Monitor Risks process, which is the process of implementing risk response plans, tracking identified risks, monitoring residual risks, identifying new risks, and evaluating risk process effectiveness throughout the project. The risk manager should not reassess the identified risks that impact the project scope before evaluating any new risks that are introduced due to the change in scope. The risk manager should first identify and analyze the new risks, and then reassess the existing risks to determine if they are still valid, relevant, and prioritized.

Update the risk register to identify, analyze, and plan a response for any new risk: This is not a valid option because updating the risk register to identify, analyze, and plan a response for any new risk is a combination of several risk management processes, such as Identify Risks, Perform Qualitative Risk Analysis, Perform Quantitative Risk Analysis, and Plan Risk Responses. The risk manager should not update the risk register to identify, analyze, and plan a response for any new risk in one step, but rather follow the sequential and iterative risk management processes to ensure a comprehensive and consistent risk management approach. The risk manager should also coordinate and communicate with the project manager and other stakeholders when updating the risk register, as well as obtain their approval and input.

PMBOK® Guide1, Risk Management Professional (PMI-RMP)® Cert Guide1