Risk analysis (probability and impact) in Software Engineering - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Risk Probability and Impact

In risk analysis, what does the 'probability' of a risk represent?

A The chance that the risk event will occur

B The severity of the consequences if the risk occurs

C The total number of risks identified

D The cost to fix the risk after it happens

💡 Hint

Think about what 'probability' means in everyday situations.

Probability refers to how likely it is that a risk event will happen, not the impact or cost.

📋 Factual

intermediate

Risk Impact Definition

What does the 'impact' of a risk measure in risk analysis?

A The likelihood of the risk occurring

B The number of people affected by the risk

C The effect or damage caused if the risk happens

D The time it takes to detect the risk

💡 Hint

Impact relates to the result or damage from the risk.

Impact measures how serious or damaging the risk event would be if it occurs.

🚀 Application

advanced

Calculating Risk Exposure

If a risk has a probability of 0.3 and an impact value of 50 (on a scale of 0 to 100), what is the risk exposure?

A 15

B 65

C 0.6

D 1500

💡 Hint

Risk exposure is usually calculated by multiplying probability by impact.

Risk exposure = Probability × Impact = 0.3 × 50 = 15.

🔍 Analysis

advanced

Prioritizing Risks by Probability and Impact

You have two risks: Risk A with probability 0.7 and impact 20, Risk B with probability 0.4 and impact 50. Which risk should be prioritized based on risk exposure?

A Risk B, because it has higher impact

B Risk A, because it has higher probability

C Risk A, because its risk exposure is higher

D Risk B, because its risk exposure is higher

💡 Hint

Calculate risk exposure for both and compare.

Risk A exposure = 0.7 × 20 = 14; Risk B exposure = 0.4 × 50 = 20. Risk B has higher exposure and should be prioritized.

❓ Reasoning

expert

Interpreting Risk Matrix Placement

In a risk matrix, a risk is placed in the high probability but low impact quadrant. What does this imply about managing this risk?

A The risk is unlikely and can be ignored

B The risk happens often but causes minor damage, so monitoring is sufficient

C The risk has high impact and high probability, so it is the top priority

D The risk is rare but very damaging, so immediate action is needed

💡 Hint

Think about what high probability and low impact mean together.

A risk with high probability but low impact occurs frequently but causes minor issues, so it usually requires monitoring rather than urgent action.

Practice

1. What does risk analysis in software engineering primarily combine?

easy

A. The programming language and the software framework

B. The cost of the project and the team size

C. The number of developers and the project deadline

D. The likelihood of a problem and its potential impact

Solution

1. Step 1: Understand risk analysis components

   Risk analysis involves assessing how likely a problem is and how severe its consequences could be.

2. Step 2: Identify what is combined

   The two main factors combined are probability (likelihood) and impact (severity).

3. Final Answer:

   The likelihood of a problem and its potential impact -> Option D

4. Quick Check:

   Risk = Probability x Impact [OK]

Hint: Risk = chance of problem x how bad it is [OK]

Common Mistakes:

• Confusing risk with project cost
• Mixing team size with risk factors
• Thinking risk depends on programming language

2. Which formula correctly calculates the risk score in risk analysis?

easy

A. Risk score = Probability - Impact

B. Risk score = Probability + Impact

C. Risk score = Probability x Impact

D. Risk score = Impact ÷ Probability

Solution

1. Step 1: Recall risk score calculation

   The risk score is calculated by multiplying the probability of an event by its impact.

2. Step 2: Evaluate each formula

   Addition, subtraction, or division do not correctly represent risk score calculation.

3. Final Answer:

   Risk score = Probability x Impact -> Option C

4. Quick Check:

   Risk score uses multiplication [OK]

Hint: Multiply chance and impact for risk score [OK]

Common Mistakes:

• Adding probability and impact instead of multiplying
• Dividing impact by probability
• Subtracting values instead of combining

3. Given a risk with probability 0.3 and impact 8, what is the risk score?

medium

A. 8.3

B. 2.4

C. 0.375

D. 24

Solution

1. Step 1: Identify given values

   Probability = 0.3, Impact = 8.

2. Step 2: Calculate risk score by multiplying

   Risk score = 0.3 x 8 = 2.4.

3. Final Answer:

   2.4 -> Option B

4. Quick Check:

   0.3 x 8 = 2.4 [OK]

Hint: Multiply probability and impact numbers [OK]

Common Mistakes:

• Adding instead of multiplying
• Multiplying in reverse order but miscalculating
• Confusing decimal multiplication

4. A project manager calculates risk score as Probability + Impact instead of Probability x Impact. What is the main error?

medium

A. Using addition instead of multiplication for risk score

B. Ignoring the impact value

C. Using probability as a percentage

D. Calculating risk score twice

Solution

1. Step 1: Identify the calculation mistake

   The manager added probability and impact instead of multiplying them.

2. Step 2: Understand correct risk score formula

   Risk score must be calculated by multiplying probability and impact to reflect combined effect.

3. Final Answer:

   Using addition instead of multiplication for risk score -> Option A

4. Quick Check:

   Risk score = Probability x Impact, not addition [OK]

Hint: Risk score needs multiplication, not addition [OK]

Common Mistakes:

• Adding values instead of multiplying
• Forgetting to include impact
• Misinterpreting probability scale

5. A software project has three risks with these values: Risk A (0.2, 10), Risk B (0.5, 3), Risk C (0.1, 15). Which risk should be prioritized based on risk score?

hard

A. Risk A

B. Risk B

C. Risk C

D. All have equal priority

Solution

1. Step 1: Calculate risk scores for each risk

   Risk A: 0.2 x 10 = 2.0
   Risk B: 0.5 x 3 = 1.5
   Risk C: 0.1 x 15 = 1.5

2. Step 2: Compare risk scores to prioritize

   Risk A has the highest score of 2.0.

3. Final Answer:

   Risk A -> Option A

4. Quick Check:

   Risk A score = 2.0 > others [OK]

Hint: Pick risk with highest score [OK]

Common Mistakes:

• Choosing risk with highest probability only
• Choosing risk with highest impact only
• Assuming all risks have equal priority