Free ARMP Practice Questions

Question 1

Two roadwork incidents have interrupted both network connections at a distribution center. The carriers use separate upstream networks, but a building survey shows that both connections share the same underground entry duct. The backup routers worked correctly. Which change addresses the failure mechanism revealed by these incidents?

Accepted Answer

Add a connection whose physical route avoids the shared duct.

Answer

Purchase higher-bandwidth service from both carriers under revised performance agreements.

Answer

Install another standby router with automatic switching between the existing carrier connections.

Answer

Introduce faster fault detection and a dedicated escalation arrangement with both carriers.

Question 2

Company policy lets a branch director accept operational risks with residual expected annual loss below $40,000 when no safety or mandatory obligation is compromised. A $22,000 supplier-delay exposure has a signed acceptance, an assigned monitoring owner, and a review date three months away. No assumptions or acceptance conditions have changed. At a routine review, what disposition is justified?

Accepted Answer

Continue under the existing acceptance, with monitoring and the scheduled review.

Answer

Suspend purchasing while negotiating measures to eliminate the supplier-delay exposure.

Answer

Seek board reapproval before continuing the existing supplier arrangement.

Answer

Close the risk record because the director has authorized acceptance.

Question 3

The risk team is comparing two equally likely, two-hour interruptions. Order entry supports substantial daily revenue, but a tested manual process preserves every order and delivery deadlines are still met. Payroll authorization uses inexpensive software, but it has no workaround and the interruption would miss a nonextendable payment cutoff. For business-continuity prioritization, the stronger recommendation is to:

Accepted Answer

Prioritize payroll authorization because its interruption crosses an inflexible operating deadline.

Answer

Prioritize order entry because it supports the greater daily revenue stream.

Answer

Assign equal priority because both scenarios have identical likelihood and duration.

Answer

Prioritize whichever supporting system has the greater recorded replacement value.

Question 4

A manufacturer currently expects four loss events per year, each costing $30,000. It is comparing three technically feasible controls using accepted estimates:

Plan A: 4 events/year, $12,000 loss/event, $25,000 annual control cost.
Plan B: 1 event/year, $30,000 loss/event, $50,000 annual control cost.
Plan C: 0.5 events/year, $20,000 loss/event, $80,000 annual control cost.

Management requires residual annualized loss expectancy (ALE) no greater than $35,000, then minimizes residual ALE plus annual control cost. No other costs or constraints distinguish the plans. Which option meets that decision rule?

Accepted Answer

Plan B, because it is the least-cost option that meets the residual-loss limit.

Answer

Plan A, because it has the lowest modeled annual total among the proposed controls.

Answer

Plan C, because it leaves the smallest modeled annual loss after treatment.

Answer

No new control, because the current $30,000 loss per event is below the $35,000 annual limit.

Question 5

An operations director controls the production process and its risk-treatment budget. The IT manager maintains the recovery service, a risk analyst facilitates assessments, and internal audit independently tests the controls. The organization is outsourcing operation of the recovery service. Who should remain accountable for the business risk of production interruption?

Accepted Answer

The operations director, who owns the process and treatment decisions.

Answer

The IT manager, who supervises the recovery service and its supplier.

Answer

The risk analyst, who maintains the consolidated interruption-risk assessment.

Answer

The internal audit director, who signs the independent control-assurance report.

Question 6

Two risks receive scores of 16 and 8 on the same five-by-five likelihood-impact matrix. Its numbers are labels for ordered categories, and both assessments use the same horizon. A committee member calls the first risk 'twice as costly.' Which statement can the scores actually support?

Accepted Answer

The first has a higher priority score; a monetary loss ratio is not established.

Answer

The first risk has twice the expected annual loss of the second risk.

Answer

The first risk is twice as likely to occur during the assessment period.

Answer

The first risk justifies twice the annual spending on controls for equivalent value.

Question 7

Daily backup jobs are completing successfully at a service company. During a recovery test, analysts use a compromised production-administrator account and are able to overwrite every recovery copy. Management wants to lower the current residual ransomware risk rating because backup-job completion is 100%. What is the strongest reason to withhold that reduction?

Accepted Answer

The recovery copies remain exposed to the same compromise as production.

Answer

The observed weakness is a recovery-speed problem that calls for more frequent backup jobs.

Answer

The successful jobs justify reducing occurrence likelihood, but not the impact of ransomware.

Answer

The exposure belongs in the inherent assessment, so the residual rating should exclude it.

Question 8

During an occupied-site risk walkthrough, smoke begins entering the dispatch area from an electrical cabinet. The evacuation alarm sounds. The practitioner's role under the site's emergency plan is to leave by the designated safe route and report at the assembly point; equipment isolation is assigned to trained responders. Staff ask whether they should finish saving shipment records. The practitioner's immediate response should be to:

Accepted Answer

Evacuate with the staff and report at the assembly point.

Answer

Ask facilities to verify the smoke source before disrupting dispatch operations.

Answer

Save the current shipment records, then evacuate with the remaining staff.

Answer

Isolate power to the electrical cabinet before following the evacuation route.

Question 9

An application has a recovery time objective (RTO) of 90 minutes and a recovery point objective (RPO) of 15 minutes. In an exercise, the complete business service is restored and validated after 60 minutes. Its restored data stop 35 minutes before the simulated interruption, and no other transaction records can fill the gap. How should the result be classified?

Accepted Answer

The RTO is met; the RPO failure leaves an unresolved data-loss exposure.

Answer

Both objectives are met; business validation confirms adequate restoration time and data currency.

Answer

The RPO is met; the RTO is missed because the restored data are too old.

Answer

Neither objective is met; exceeding the data-loss limit also makes restoration too slow.

Question 10

Finance has two validated annual loss estimates: lost production contribution from power failures and equipment-repair costs from those same failures. The estimates use the same year, currency, and current-control assumptions, with no overlapping cost components. An analyst refuses to add them because the losses are correlated. What correction is needed?

Accepted Answer

Add the expected losses; correlation affects their joint occurrence, not the addition of their means.

Answer

Use the larger estimate; adding correlated losses would count the initiating event twice.

Answer

Add the estimates only after applying a correlation discount to their shared-event component.

Answer

Recalculate each loss on an independent-event basis before combining their annual estimates.

Free ARMP Practice Questions

Domain 1: Risk Terminology and Framework

Question 1

Question 2

Question 3

Domain 2: Risk Models and Processes

Question 4

Question 5

Question 6

Domain 3: Threat Analysis

Question 7

Question 8

Domain 4: Monitoring and Reporting

Question 9

Question 10

That's 10 of 1,030