You are completing the qualitative risk analysis process with your project team and are relying on
the risk management plan to help you determine the budget, schedule for risk management, and
risk categories. You discover that the risk categories have not been created. When the risk
categories should have been created?

You work as a project manager for BlueWell Inc. You have declined a proposed change request
because of the risk associated with the proposed change request. Where should the declined
change request be documented and stored?

Capability maturity models are the models that are used by the enterprise to rate itself in terms of
the least mature level to the most mature level. Which of the following capability maturity levels
shows that the enterprise does not recognize the need to consider the risk management or the
business impact from IT risk?

Using which of the following one can produce comprehensive result while performing qualitative
risk analysis?

Which of the following is the BEST method for discovering high-impact risk types?

Which of the following is MOST appropriate method to evaluate the potential impact of legal,
regulatory, and contractual requirements on business objectives?

Wendy is about to perform qualitative risk analysis on the identified risks within her project. Which
one of the following will NOT help Wendy to perform this project management activity?

There are four inputs to the Monitoring and Controlling Project Risks process. Which one of the
following will NOT help you, the project manager, to prepare for risk monitoring and controlling?

You are the project manager of HWD project. It requires installation of some electrical machines.
You and the project team decided to hire an electrician as electrical work can be too dangerous to
perform. What type of risk response are you following?

You are the project manager of GHT project. You have implemented an automated tool to analyze
and report on access control logs based on severity. This tool generates excessively large
amounts of results. You perform a risk assessment and decide to configure the monitoring tool to
report only when the alerts are marked “critical”. What you should do in order to fulfill that?