Tracy is the project manager of the NLT Project for her company. The NLT Project is
scheduled to last 14 months and has a budget at completion of $4,555,000. Tracy’s
organization will receive a bonus of $80,000 per day that the project is completed early up
to $800,000. Tracy realizes that there are several opportunities within the project to save on
time by crashing the project work. Crashing the project is what type of risk response?

Diana is the project manager of the QPS project for her company. In this project Diana and
the project team have identified a pure risk. Diana and the project team decided, along with
the key stakeholders, to remove the pure risk from the project by changing the project plan
altogether. What is a pure risk?

You work as a project manager for BlueWell Inc. You are about to complete the quantitative
risk analysis process for your project. You can use three available tools and techniques to
complete this process. Which one of the following is NOT a tool or technique that is
appropriate for the quantitative risk analysis process?

You work as a project manager for TechSoft Inc. You, the project team, and the key project
stakeholders have completed a round of quantitative risk analysis. You now need to update
the risk register with your findings so that you can communicate the risk results to the
project stakeholders – including management. You will need to update all of the following
information except for which one?

Lisa is the project manager of the SQL project for her company. She has completed the risk
response planning with her project team and is now ready to update the risk register to
reflect the risk response. Which of the following statements best describes the level of detail
Lisa should include with the risk responses she has created?

David is the project manager of HGF project for his company. David, the project team, and
several key stakeholders have completed risk identification and are ready to move into
qualitative risk analysis. Tracy, a project team member, does not understand why they need
to complete qualitative risk analysis. Which one of the following is the best explanation for
completing qualitative risk analysis?

The Identify Risk process determines the risks that affect the project and document their
characteristics. Why should the project team members be involved in the Identify Risk
process?

Which of the following NIST Special Publication documents provides a guideline on
questionnaires and checklists through which systems can be evaluated for compliance
against specific control objectives?

Which of the following recovery plans includes specific strategies and actions to deal with

specific variances to assumptions resulting in a particular security problem, emergency, or
state of affairs?

An organization monitors the hard disks of its employees’ computers from time to time.
Which policy does this pertain to?