30 Questions — PMI – PMI-RMP : Certified Risk Management Professional - Domain 3 - Risk Analysis

Expand any question to reveal the correct answer and explanation.

1. 1 A project manager is evaluating two mutually exclusive vendor contracts. Contract A has a 60% probability of a $150,000 profit and a 40% probability of a $40,000 loss. Contract B has a 50% probability of a $200,000 profit and a 50% probability of a $60,000 loss. Based purely on Expected Monetary Value (EMV), which contract should be selected and what is its value?

   EMV requires multiplying each probability by its respective monetary outcome and summing the results, ensuring losses are treated as negative values.

   Contract A with an EMV of $74,000

   The EMV for Contract A is calculated as $(0.60 \times 150,000) + (0.40 \times -40,000) = 90,000 - 16,000 = 74,000$, which is higher than Contract B's EMV of $70,000$.

   • ✗ Contract B with an EMV of $70,000

     While Contract B has a higher potential profit, its EMV calculation of $(0.50 \times 200,000) + (0.50 \times -60,000) = 70,000$ is mathematically inferior to Contract A.

   • ✗ Contract B with an EMV of $140,000

     This value incorrectly ignores the negative impact of the 50% loss probability by only summing the absolute values of outcomes.

   • ✗ Contract A with an EMV of $110,000

     This calculation fails to treat the loss as a negative integer, leading to an overestimation of the average expected outcome.

2. 2 During a qualitative risk analysis, the risk professional identifies a threat that has a very low probability of occurring, but if it does, it will occur within the next 48 hours. Which specific risk attribute best describes the immediate need for attention despite the low probability?

   Consider the difference between when a risk might happen and when you must act to prevent it.

   Urgency

   Urgency refers to the period of time within which a response must be implemented to be effective, regardless of the probability level.

   • ✗ Proximity

     Proximity refers to the timeframe before the risk might occur, whereas urgency specifically measures the window for taking action.

   • ✗ Dormancy

     Dormancy measures the time that may elapse after a risk has occurred before its impact is discovered, which is not the focus here.

   • ✗ Propinquity

     Propinquity describes how significant the risk is perceived to be by stakeholders, which is a psychological rather than temporal measure.

3. 3 A Monte Carlo simulation results in an S-curve showing that the project has a $P_{80}$ value of $2.4M. How should the project manager interpret this specific data point for the project sponsor?

   Think about cumulative probability and what the area to the left of the point on the curve represents.

   There is an 80% probability that the project will cost $2.4M or less.

   In a cumulative probability distribution (S-curve) for cost, the P-value represents the probability that the total cost will not exceed the specified value.

   • ✗ There is an 80% probability that the project will cost exactly $2.4M.

     Probability distributions provide a range of likelihoods for outcomes, and the probability of a specific single-point outcome in a continuous range is effectively zero.

   • ✗ The project is 80% likely to experience a cost overrun if the budget is set at $2.4M.

     A $P_{80}$ indicates only a 20% chance of exceeding the value, making this interpretation the mathematical inverse of the correct meaning.

   • ✗ The project will cost at least $2.4M in 80% of the simulated scenarios.

     This misinterprets the cumulative nature of the S-curve, which tracks 'less than or equal to' probabilities from left to right.

4. 4 A Tornado diagram is generated as part of a sensitivity analysis for a large construction project. What does the length of the longest bar at the top of the diagram represent?

   Consider what a 'sensitivity' check is meant to reveal about variables in a model.

   The variable that has the greatest impact on the project outcome uncertainty.

   Sensitivity analysis uses Tornado diagrams to rank risks by their potential to influence the target objective, with the longest bars indicating the most sensitive variables.

   • ✗ The risk with the highest probability of occurrence.

     Probability is often a component, but the Tornado diagram specifically measures sensitivity or the range of impact on the final objective.

   • ✗ The risk that must be addressed first according to the qualitative prioritization.

     Tornado diagrams are quantitative tools; qualitative prioritization involves subjective scales like urgency and proximity rather than mathematical sensitivity bars.

   • ✗ The total contingency reserve required for the project.

     While the diagram identifies drivers of uncertainty, it does not calculate the specific monetary sum required for reserves.

5. 5 Using the Beta/PERT distribution, a risk owner provides three estimates for a task's duration: Optimistic ($12$ days), Most Likely ($20$ days), and Pessimistic ($40$ days). What is the calculated standard deviation ($\\sigma$) for this task?

   Recall the formula for volatility that measures the spread between the two extreme estimates in a weighted distribution.

   $4.67$ days

   The standard deviation for a Beta distribution is calculated as $\\sigma = (P - O) / 6$, which here is $(40 - 12) / 6 = 28 / 6 = 4.666...$, rounded to $4.67$.

   • ✗ $24$ days

     This value represents the Mean ($\mu$) of a simple average or triangular distribution, not the standard deviation.

   • ✗ $22$ days

     This is the result of the weighted Mean ($\mu$) calculation for the Beta distribution: $(12 + 4(20) + 40) / 6 = 132 / 6 = 22$.

   • ✗ $14$ days

     This is the simple range $(P - O)$ divided by 2, which is not a standard statistical measure for task volatility in project management.

6. 6 In a Decision Tree analysis, Node A leads to two branches. Branch 1 has a 70% probability of a $50k cost and a 30% probability of a $100k cost. Branch 2 has a 100% probability of a $70k cost. Which branch has the lower (better) Expected Monetary Value (EMV)?

   Calculate the weighted average of the outcomes for the first branch and compare it to the fixed cost of the second.

   Branch 1 with an EMV of $65k

   Branch 1 EMV is $(0.70 \times 50,000) + (0.30 \times 100,000) = 35,000 + 30,000 = 65,000$, which is lower (more favorable for costs) than Branch 2's $70k.

   • ✗ Branch 2 with an EMV of $70k

     While Branch 2 offers certainty, its expected cost is $5k higher than the probabilistic average of Branch 1.

   • ✗ Branch 1 with an EMV of $75k

     This represents a calculation error where probabilities were likely reversed or math was performed incorrectly.

   • ✗ Both branches are equal in EMV

     A mathematical comparison shows a distinct $5,000 difference between the certain cost and the probabilistic weighted average.

7. 7 Which qualitative risk assessment parameter should be used to evaluate the degree to which a risk is perceived as significant by various stakeholder groups, even if its mathematical impact is relatively low?

   Focus on the psychological or subjective 'closeness' of the risk to those involved.

   Stakeholder Salience

   Stakeholder salience or propinquity evaluates the significance of a risk based on the perceptions and values of stakeholders rather than objective data.

   • ✗ Manageability

     Manageability refers to the ease with which a risk can be influenced or controlled by the project team.

   • ✗ Connectivity

     Connectivity refers to the degree of correlation between risks, or how one risk event may trigger others in the network.

   • ✗ Strategic Impact

     Strategic impact measures how a risk affects the long-term goals of the organization, not necessarily the subjective stakeholder perception.

8. 8 You are comparing the schedule risk of two tasks. Task X has a Beta/PERT duration of $20 \pm 2$ days. Task Y has a Beta/PERT duration of $20 \pm 5$ days. Which task is riskier from a quantitative perspective, and why?

   Think about which task has a wider 'bell curve' and what that means for predictability.

   Task Y, because it has a higher standard deviation and thus higher volatility.

   A larger range around the mean (standard deviation) indicates greater uncertainty and a wider spread of potential outcomes, signifying higher risk.

   • ✗ Task X, because the tighter range suggests a higher probability of missing the exact target date.

     Tighter ranges indicate lower volatility and higher confidence in the mean, representing lower overall risk.

   • ✗ Task Y, because its most likely value is less certain than Task X.

     The 'most likely' value is a single input; risk is determined by the spread of the distribution (variance), not the value of the mode itself.

   • ✗ Both have the same risk because they have the same mean duration.

     Expected value (mean) only shows the average; risk analysis requires evaluating the spread or standard deviation to understand potential variance.

9. 9 A risk is identified that could cause a database failure. After the failure occurs, it may take up to three weeks before the corruption is detected by the end-users. This three-week period represents which risk attribute?

   This term describes a risk that has 'happened' but is hidden for a while.

   Dormancy

   Dormancy is the period of time that may elapse after a risk has occurred before its impact is discovered.

   • ✗ Proximity

     Proximity is the time before the risk occurs, not the time after it happens but before it is noticed.

   • ✗ Detectability

     While related, detectability (as in FMEA) is the likelihood of detection, whereas dormancy is the specific temporal duration of the lag.

   • ✗ Urgency

     Urgency is the time available to respond before it is too late, which is distinct from the time it takes to realize a problem exists.

10. 10 When performing a Monte Carlo simulation for a project schedule, you find that the project has a 95% probability of completion in 12 months, but the sponsor requires a 10-month delivery. What is the most appropriate quantitative next step?

    You need to find out *which* tasks are making the schedule so long so you can fix them.

    Perform a sensitivity analysis to identify the critical path activities with the highest risk impact.

    Sensitivity analysis (like Tornado diagrams) helps pinpoint which specific task uncertainties are driving the schedule delay, allowing for targeted response planning.

    • ✗ Accept the risk and communicate to the sponsor that 10 months is impossible.

      Quantitative results should be used to inform response strategies (like crashing or fast-tracking) rather than just accepting a failure to meet objectives.

    • ✗ Run the simulation again using a Triangular distribution to see if the results improve.

      Changing the distribution type to achieve a desired result is a manipulation of data and does not address the underlying schedule risks.

    • ✗ Immediately add 20% to the project budget to account for the 2-month gap.

      Adding funds without analyzing the specific risk drivers or response effectiveness is poor project governance and not a quantitative analytical process.

11. 11 A project team uses a Probability-Impact (P-I) matrix to score risks. One risk is scored as 'High Probability' and 'High Impact.' However, the team lead notes the risk has a 'Low Manageability' score. How does this affect the risk's priority in Domain III?

    Think about whether a 'hard to handle' problem needs more or less attention than an 'easy' one.

    It may increase the priority because it represents a threat the team cannot easily control.

    Manageability is a qualitative factor; risks that are difficult to control often require more senior attention or earlier escalation, increasing their priority.

    • ✗ It decreases the priority because the team should only focus on risks they can control.

      Ignoring risks that are difficult to manage is dangerous; these often represent the greatest threats to project success.

    • ✗ It has no effect on priority as priority is determined only by Probability $\\times$ Impact.

      Modern risk management (PMI-RMP) uses multiple attributes like manageability, dormancy, and urgency to refine prioritization beyond a simple matrix.

    • ✗ It changes the risk into a 'Constraint' rather than a risk.

      A risk remains a risk (uncertainty) even if it is hard to manage; a constraint is a known fact or limitation with no uncertainty.

12. 12 During a quantitative risk analysis, you encounter a risk that could lead to a 'Known-Unknown.' How is this typically accounted for in the project's financial modeling?

    Identify which type of reserve is managed by the project manager for identified risks.

    By calculating and allocating a contingency reserve.

    Contingency reserves are specifically set aside for 'Known-Unknowns' (identified risks for which a response is planned).

    • ✗ By allocating a management reserve.

      Management reserves are used for 'Unknown-Unknowns' (unidentified risks that cannot be specifically planned for).

    • ✗ By adding it to the baseline budget as a fixed cost.

      Fixed costs are for certainties; risks involve uncertainty and must be managed through reserves.

    • ✗ By ignoring it in the model since the specific impact is not yet known.

      The purpose of quantitative analysis is to model these uncertainties so they are not ignored.

13. 13 You are interpreting a Tornado diagram and see that the bars for 'Labor Cost' are much wider than the bars for 'Material Cost.' What does this indicate about your project model?

    Consider what 'range of impact' looks like visually in a sensitivity tool.

    The project objective is more sensitive to fluctuations in labor costs than material costs.

    The width of the bars in a Tornado diagram shows the range of impact each variable has on the project outcome; wider bars mean higher sensitivity.

    • ✗ Labor costs are significantly higher than material costs.

      A Tornado diagram measures sensitivity (relative impact of uncertainty), not the absolute magnitude of the underlying cost.

    • ✗ There is a higher probability that labor costs will increase.

      Tornado diagrams do not display probability directly; they show the potential range of the outcome based on the variability of the input.

    • ✗ Material costs are easier to manage and control.

      The diagram does not provide information on manageability or ease of control, only the mathematical sensitivity of the output to the input.

14. 14 What is the primary benefit of using a Monte Carlo simulation over a simple 'Expected Monetary Value' (EMV) calculation for a project budget?

    Think about the difference between a single number (average) and a curve (distribution).

    It provides a range of possible outcomes and their associated probabilities rather than a single average.

    Monte Carlo simulations model thousands of scenarios to show a distribution of results, whereas EMV provides only a single weighted average (point estimate).

    • ✗ It is less time-consuming and requires less data to produce accurate results.

      Monte Carlo simulations are more complex and data-intensive than simple EMV calculations.

    • ✗ It eliminates the need for expert judgment in probability assessments.

      Simulations still rely on expert judgment to define the input distributions (Optimistic, Pessimistic, etc.) for each task.

    • ✗ It guarantees that the project will stay within the calculated P-value.

      Quantitative tools provide probability forecasts; they do not guarantee outcomes or eliminate the possibility of extreme tail risks.

15. 15 A risk professional is analyzing the 'Connectivity' of several risks in a project. They find that Risk A, if it occurs, has a high probability of triggering Risks B, C, and D. How should Risk A be treated in the qualitative prioritization?

    Think about the total 'systemic' impact if a single event causes three others.

    It should be given a higher priority because it acts as a risk 'hub' or driver.

    Risks with high connectivity have a multiplier effect on project uncertainty and should be prioritized for response to prevent a cascade of issues.

    • ✗ It should be treated as a single risk and prioritized only by its individual impact.

      Individual impact assessments that ignore connectivity understate the true systemic risk to the project.

    • ✗ It should be moved to the management reserve list as it is too complex for a standard response.

      Complex risks must be planned for in the contingency reserve; management reserves are for unidentified threats.

    • ✗ The probabilities of B, C, and D should be added to the probability of A.

      Probabilities cannot be simply added together; connectivity requires qualitative ranking or advanced modeling like influence diagrams.

16. 16 You have a task with a Beta/PERT estimate. The Optimistic time is $10$ days, Most Likely is $15$ days, and Pessimistic is $26$ days. What is the Expected Duration (Mean) of this task?

    Apply the weighted average formula that gives more importance to the most likely outcome.

    $16$ days

    The Beta/PERT formula is $\mu = (O + 4M + P) / 6$. Here: $(10 + 4(15) + 26) / 6 = (10 + 60 + 26) / 6 = 96 / 6 = 16$.

    • ✗ $15$ days

      This is the 'Most Likely' (Mode) value, which is not the same as the weighted Mean in a PERT calculation.

    • ✗ $17$ days

      This is the result of a simple Triangular average: $(10+15+26)/3 = 51/3 = 17$.

    • ✗ $18$ days

      This value does not correspond to standard project management distribution formulas based on the provided inputs.

17. 17 In the context of Risk Analysis, what is the 'Probability of Occurrence' for a risk that has already happened during the project?

    Consider the mathematical definition of a 'certain event'.

    100%

    Once a risk event occurs, it is no longer uncertain and its probability is effectively 1.0 (or 100%).

    • ✗ 0%

      Zero probability would imply the event cannot happen, which is incorrect as it has already occurred.

    • ✗ The same probability as it was in the risk register.

      Risk registers track future uncertainty; once an event occurs, it transitions from a risk to an issue or a fact.

    • ✗ It depends on if the impact is still being felt.

      Probability refers to the likelihood of the event occurring; once it occurs, the likelihood of that specific instance is absolute.

18. 18 When calculating Expected Monetary Value (EMV) for an opportunity (positive risk), the impact is $50,000 and the probability is 30%. How should this be represented in the final EMV sum?

    Positive risks (opportunities) contribute value to a project’s expected outcome.

    As a positive addition of $15,000

    Opportunities have positive impacts; therefore, their EMV $(0.30 \times 50,000 = 15,000)$ adds to the total value of the project or pathway.

    • ✗ As a subtraction of $15,000 to account for the 'uncertainty' cost.

      While uncertain, opportunities are beneficial and increase the expected value rather than acting as a cost.

    • ✗ It should not be included as EMV only applies to threats.

      EMV is a neutral tool used to quantify the average outcome of both threats (negative) and opportunities (positive).

    • ✗ As $50,000, since probabilities for opportunities are ignored in conservative accounting.

      Ignoring probability violates the core principle of Expected Monetary Value analysis.

19. 19 Which analytical tool is best suited for assessing 'project risk complexity' and root causes by looking at the interconnected relationships of various failure modes?

    Look for the tool often called a 'Fishbone' diagram.

    Ishikawa Diagram

    Also known as a Fishbone or Cause-and-Effect diagram, this tool is specifically mentioned in the ECO for assessing complexity and root causes.

    • ✗ P-I Matrix

      The P-I matrix is used for ranking individual risks by probability and impact, not for exploring complex root-cause relationships.

    • ✗ Burn-down Chart

      Burn-down charts track progress or risk exposure over time (Domain IV/V) but do not analyze root causes.

    • ✗ Histogram

      A histogram shows the frequency of data points and is used in quantitative analysis, but it does not map causal relationships.

20. 20 A risk professional notes that a risk has high 'Proximity' but low 'Urgency.' What does this mean in practical terms for the project schedule?

    Differentiate between 'when it happens' and 'when I need to start the fix'.

    The risk event will happen soon, but the response does not need to be initiated immediately.

    Proximity is the time until the event; Urgency is the time available to respond. If proximity is high but urgency is low, the event is near but the required response is quick to implement.

    • ✗ The risk event is far away, but the team must start working on the response today.

      This describes a risk with low proximity but high urgency (e.g., long lead-time procurement for a future event).

    • ✗ The risk is psychological and should be handled through stakeholder management.

      This refers to propinquity, not proximity or urgency.

    • ✗ The risk will have a long-lasting impact after it occurs.

      This describes high dormancy or impact duration, not proximity or urgency.

21. 21 You are reviewing a Monte Carlo simulation cost histogram. The 'Most Likely' outcome on the chart corresponds to which statistical measure?

    It’s the tallest bar on the chart.

    Mode

    In statistics, the mode is the value that appears most frequently in a data set or the highest peak on a probability distribution histogram.

    • ✗ Mean

      The mean is the arithmetic average, which in a skewed distribution will be different from the peak (mode).

    • ✗ Median

      The median is the middle value (50th percentile); it only equals the mode in a perfectly symmetrical distribution.

    • ✗ Standard Deviation

      Standard deviation measures the spread or width of the distribution, not the central peak.

22. 22 A project manager performs a 'Risk Data Quality Assessment' during Domain III. What is the primary purpose of this activity?

    Before you rank risks, you need to make sure your experts aren't just guessing or using bad data.

    To ensure that the information used for qualitative analysis is accurate, reliable, and unbiased.

    Qualitative analysis is subjective; assessing the quality of the data prevents 'garbage in, garbage out' scenarios in risk prioritization.

    • ✗ To calculate the final monetary value of the contingency reserve.

      This is a task for quantitative analysis (Domain III, Task 2), not a qualitative data quality assessment.

    • ✗ To determine which software tool should be used for Monte Carlo simulations.

      Tool selection is part of Risk Strategy and Planning (Domain I), not an assessment of risk data quality.

    • ✗ To verify that all project stakeholders have signed off on the Risk Management Plan.

      Plan sign-off is a governance task in Domain I, not a data analysis task in Domain III.

23. 23 When building a Decision Tree, what does a 'Circular Node' (Chance Node) represent?

    It's a point where 'luck' or 'probability' takes over from 'choice'.

    An uncertain event with multiple probabilistic outcomes.

    In decision tree notation, circles represent points of uncertainty where outcomes are determined by probability.

    • ✗ A point where the project manager must choose between alternative paths.

      Decision points are represented by squares, not circles.

    • ✗ The final net profit or loss at the end of a branch.

      End points or 'leaf' nodes represent final outcomes, often denoted by triangles or simple terminal values.

    • ✗ A risk that has a 100% probability of occurrence.

      Probability nodes represent uncertainty (less than 100%); a certain event would be a fixed cost or path in the model.

24. 24 A risk has an optimistic impact of $2k, a most likely impact of $10k, and a pessimistic impact of $30k. If the team uses a Triangular distribution for their quantitative model, what is the Mean impact?

    Use the simple average formula where all three points are weighted equally.

    $14k

    The Triangular Mean is $\\mu = (O + M + P) / 3$. Here: $(2 + 10 + 30) / 3 = 42 / 3 = 14$.

    • ✗ $10k

      This is the 'Most Likely' value, but the Triangular mean accounts for the skew caused by the $30k pessimistic estimate.

    • ✗ $12.33k

      This is the result of the Beta/PERT calculation: $(2 + 4(10) + 30) / 6 = 72 / 6 = 12$.

    • ✗ $16k

      This value does not correspond to the average of the provided inputs using standard distribution formulas.

25. 25 In a risk register, 'Connectivity' is rated as 'High' for a specific threat. Why would a quantitative Monte Carlo simulation likely show a wider range of outcomes because of this high connectivity?

    Consider the 'domino effect' in a probabilistic model.

    Because the occurrence of the threat triggers multiple other risks, compounding the total impact.

    Connectivity implies dependencies; when risks are linked, the 'success' or 'failure' of one node cascades, increasing the volatility of the total project results.

    • ✗ Because high connectivity reduces the overall probability of any single risk occurring.

      Connectivity relates to the correlation of impacts, not a reduction in individual event probabilities.

    • ✗ Because simulation tools ignore connectivity and treat all risks as independent.

      Advanced simulations actually model these correlations to provide a more realistic (and usually more volatile) view of risk.

    • ✗ Because high connectivity means the risk is easier to detect and mitigate.

      Connectivity describes the network relationship of risks; it does not inherently mean they are easier to detect.

26. 26 A risk analyst is performing a 'Sensitivity Analysis' on a software project. They find that the project schedule is highly sensitive to 'Developer Turnover' but not to 'Hardware Delivery.' What should be the primary focus of the Risk Response plan in Domain IV?

    Spend your time and money where the biggest 'swing' in the results is happening.

    Retention strategies and cross-training for the development team.

    Quantitative analysis identifying a high-sensitivity variable dictates that response efforts should be focused there to have the greatest impact on reducing overall uncertainty.

    • ✗ Buying insurance for the hardware delivery to ensure it remains a low-impact risk.

      Insurance (Transfer) is a valid strategy, but focusing resources on a low-sensitivity area is inefficient according to analytical findings.

    • ✗ Re-running the sensitivity analysis because hardware is usually more important than people.

      Biased assumptions should not override the mathematical results of a properly conducted sensitivity analysis.

    • ✗ Applying a 10% buffer to both the hardware and labor tasks equally.

      Uniform buffers ignore the specific sensitivity data, which shows that labor requires significantly more attention than hardware.

27. 27 Which qualitative attribute describes the period between a risk occurring and the time it takes to implement a response before the impact becomes irreversible?

    This is your 'deadline' for a specific risk action.

    Urgency

    Urgency specifically identifies the 'window of opportunity' to take action after or before a risk occurs to mitigate its effects.

    • ✗ Manageability

      Manageability is the ease of control, not a time-based measurement of a response window.

    • ✗ Proximity

      Proximity is the time until the event happens, not the time available to fix it.

    • ✗ Impact Duration

      Impact duration is how long the consequences last, not the deadline for taking action.

28. 28 You calculate an EMV for a potential lawsuit. There is a 10% chance of losing $1M and a 90% chance of winning (loss is $0). The cost to settle out of court now is $150k. Based on EMV, should you settle?

    Compare the 'average cost' of the risk to the 'certain cost' of the settlement.

    No, because the EMV of the lawsuit is only $100k, which is less than the settlement cost.

    EMV of the lawsuit = $(0.10 \times 1,000,000) + (0.90 \times 0) = 100,000$. Since $100k < $150k, the probabilistic average cost of fighting is lower than the settlement.

    • ✗ Yes, because $1M is a catastrophic loss and must be avoided at all costs.

      This is a risk-averse decision based on 'Impact' alone, but purely based on 'Expected Monetary Value,' the settlement is more expensive.

    • ✗ Yes, because there is a 10% chance of failure, which is above the 5% threshold.

      Thresholds are organizational policies; EMV analysis is a mathematical comparison of average outcomes.

    • ✗ No, because winning has a 90% probability and should be exploited.

      One does not 'exploit' a 90% chance of $0 impact; one evaluates the weighted average of the threat to make a decision.

29. 29 A project manager is analyzing a Monte Carlo S-curve for the project schedule. The 50th percentile ($P_{50}$) is 180 days. The 90th percentile ($P_{90}$) is 210 days. The project sponsor demands a 'high confidence' date. Which date should be provided?

    High confidence means you want a date that is very likely to be met even if things go wrong.

    210 days

    Higher P-values (like P90) indicate greater confidence because they account for a larger portion of the potential outcomes in the simulation.

    • ✗ 180 days

      P50 is the median; it represents only a 50% confidence level, which is generally not considered 'high confidence' in project management.

    • ✗ 195 days (the average of P50 and P90)

      Averaging percentiles is not a standard statistical practice for establishing confidence levels in risk modeling.

    • ✗ 160 days (P10 to be aggressive)

      P10 represents very low confidence (only a 10% chance of success), making it the opposite of a high-confidence date.

30. 30 Which technique is used during qualitative analysis to group risks by their source (e.g., technical, external, organizational) to identify areas of concentrated uncertainty?

    It's the risk-specific version of a Work Breakdown Structure (WBS).

    Risk Breakdown Structure (RBS) Categorization

    The RBS is a hierarchical framework that allows the team to organize and categorize risks by their source, helping to identify risk concentrations.

    • ✗ Sensitivity Analysis

      Sensitivity analysis is a quantitative tool for measuring impact, not a qualitative tool for grouping risks by source.

    • ✗ Delphi Technique

      Delphi is an information-gathering technique used for identification (Domain II), not a categorization method in Domain III.

    • ✗ SWOT Analysis

      While SWOT identifies external/internal factors, the RBS is the standard structure for classifying all project risks by category.