Mary is the project manager for the BLB project. She has instructed the project team to
assemble, to review the risks. She has included the schedule management plan as an input
for the quantitative risk analysis process. Why is the schedule management plan needed for
quantitative risk analysis?

Sammy is the project manager for her organization. She would like to rate each risk based
on its probability and affect on time, cost, and scope. Harry, a project team member, has
never done this before and thinks Sammy is wrong to attempt this approach. Harry says that
an accumulative risk score should be created, not three separate risk scores. Who is correct
in this scenario?

Which of the following phases of the DITSCAP C&A process is used to define the C&A level
of effort, to identify the main C&A roles and responsibilities, and to create an agreement on
the method for implementing the security requirements?

A security policy is an overall general statement produced by senior management that
dictates what role security plays within the organization. Which of the following are required
to be addressed in a well designed policy? Each correct answer represents a part of the
solution. Choose all that apply.

The Project Risk Management knowledge area focuses on which of the following
processes? Each correct answer represents a complete solution. Choose all that apply.

Which of the following are the goals of risk management? Each correct answer represents a
complete solution. Choose three.

You are the project manager of the GHG project. You are preparing for the quantitative risk
analysis process. You are using organizational process assets to help you complete the
quantitative risk analysis process. Which one of the following is NOT a valid reason to utilize
organizational process assets as a part of the quantitative risk analysis process?

Bill is the project manager of the JKH Project. He and the project team have identified a risk
event in the project with a high probability of occurrence and the risk event has a high cost
impact on the project. Bill discusses the risk event with Virginia, the primary project
customer, and she decides that the requirements surrounding the risk event should be
removed from the project. The removal of the requirements does affect the project scope,
but it can release the project from the high risk exposure. What risk response has been
enacted in this project?

Which of the following statements is true about residual risks?

Which of the following documents is described in the statement below? “It is developed
along with all processes of the risk management. It contains the results of the qualitative risk
analysis, quantitative risk analysis, and risk response planning.”