Risk analysis (probability and impact) in Software Engineering - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Risk Probability and Impact

In risk analysis, what does the 'probability' of a risk represent?

A The chance that the risk event will occur

B The severity of the consequences if the risk occurs

C The total number of risks identified

D The cost to fix the risk after it happens

💡 Hint

Think about what 'probability' means in everyday situations.

Probability refers to how likely it is that a risk event will happen, not the impact or cost.

📋 Factual

intermediate

Risk Impact Definition

What does the 'impact' of a risk measure in risk analysis?

A The likelihood of the risk occurring

B The number of people affected by the risk

C The effect or damage caused if the risk happens

D The time it takes to detect the risk

💡 Hint

Impact relates to the result or damage from the risk.

Impact measures how serious or damaging the risk event would be if it occurs.

🚀 Application

advanced

Calculating Risk Exposure

If a risk has a probability of 0.3 and an impact value of 50 (on a scale of 0 to 100), what is the risk exposure?

A 15

B 65

C 0.6

D 1500

💡 Hint

Risk exposure is usually calculated by multiplying probability by impact.

Risk exposure = Probability × Impact = 0.3 × 50 = 15.

🔍 Analysis

advanced

Prioritizing Risks by Probability and Impact

You have two risks: Risk A with probability 0.7 and impact 20, Risk B with probability 0.4 and impact 50. Which risk should be prioritized based on risk exposure?

A Risk B, because it has higher impact

B Risk A, because it has higher probability

C Risk A, because its risk exposure is higher

D Risk B, because its risk exposure is higher

💡 Hint

Calculate risk exposure for both and compare.

Risk A exposure = 0.7 × 20 = 14; Risk B exposure = 0.4 × 50 = 20. Risk B has higher exposure and should be prioritized.

❓ Reasoning

expert

Interpreting Risk Matrix Placement

In a risk matrix, a risk is placed in the high probability but low impact quadrant. What does this imply about managing this risk?

A The risk is unlikely and can be ignored

B The risk happens often but causes minor damage, so monitoring is sufficient

C The risk has high impact and high probability, so it is the top priority

D The risk is rare but very damaging, so immediate action is needed

💡 Hint

Think about what high probability and low impact mean together.

A risk with high probability but low impact occurs frequently but causes minor issues, so it usually requires monitoring rather than urgent action.