You’re on a roll
Create a free account to save your FRM progress, track your accuracy by topic, and pick up right where you left off.
Free Questions › FRM › Risk Management & Investment Management
Free FRM Risk Management & Investment Management Practice Questions & Answers
400 exam-style Risk Management & Investment Management questions. Pick your answer, hit Check answer, and see the worked solution — free to start, no signup.
100% free · No login to startQuestion 121
What is 'the risk of concentration in government bonds' for European banks?
Select an option first.
Correct answer: B — The 'sovereign-bank nexus' risk: European banks hold large amounts of domestic government bonds, which under Basel currently receive 0% risk weight. If a sovereign defaults or restructures, banks holding that sovereign's debt suffer large losses, potentially triggering a banking crisis linked to sovereign stress — as occurred during the 2011-2012 European sovereign debt crisis
Explanation: B is correct. Sovereign-bank nexus (doom loop): in the EU, GIIPS crisis (2011-12), sovereign spread widening reduced the value of banks' bond holdings, weakening bank capital, which reduced banks' ability to buy sovereign bonds, further pushing sovereign yields higher. Reform proposals: introduce risk weights for sovereign bonds above concentration thresholds. A: 0% risk weight is a regulatory convention, not economic reality. C: the ECB has intervened but cannot guarantee against losses. D: banks do hold domestic sovereign bonds.
Question 122
What is 'operational risk scenario analysis' in a bank?
Select an option first.
Correct answer: B — A structured process where experts identify potential severe but plausible operational risk events (e.g., major cyber attack, rogue trader, model failure, large mis-selling scandal) and estimate the probability and financial impact — used to supplement internal loss data in capital models and to stress-test operational resilience. Required under Basel AMA and encouraged under Basel SA
Explanation: B is correct. Operational risk scenario analysis: typically facilitated workshops with business and risk experts. Each scenario: probability of occurrence (1-in-10 year, 1-in-100 year), severity (direct costs, regulatory fines, litigation, reputational). Key scenarios: cyber breach (loss of customer data), outsourcing failure (critical vendor collapses), major litigation (mis-selling lawsuit). Scenarios populate the tail of the loss distribution — important where historical data is sparse. A is efficiency analysis. C is root cause analysis.
Question 123
What is the 'risk of model monoculture' in the financial system?
Select an option first.
Correct answer: B — The systemic risk that arises when all major financial institutions use the same risk models, making the same assumptions and taking similar positions — this creates correlated failures when the model's assumptions are violated. If all banks use the same VaR model and it underestimates risk, they all fail to hedge simultaneously, amplifying a crisis
Explanation: B is correct. Model monoculture (systemic model risk): pre-2008, Gaussian copula was near-universally used for CDO pricing. When its assumption (default correlation independence) was violated, all users suffered simultaneously. All banks also used similar VaR models calibrated to the same calm historical period. Diversity in models provides systemic resilience. A is vendor concentration. C is single-model theoretical failure. D is regulatory conservatism.
Question 124
What is 'risk communication' and why is it critical in ERM?
Select an option first.
Correct answer: B — The process of clearly conveying risk information to the appropriate audience (board, management, front line, external stakeholders) using appropriate language, level of detail, and format — critical because: risk decisions require accurate and timely information, poor communication leads to poor decisions, and regulatory bodies expect transparent risk reporting
Explanation: B is correct. Risk communication: different audiences need different messages. Board: high-level risk profile, key changes, emerging risks. Business unit: specific limits and KRI thresholds. External (investors, regulators): annual reports, Pillar 3 disclosures, regulatory returns. A failure of risk communication (e.g., board not informed of large concentration risk) can lead to oversight failures and regulatory action. A is external reporting. C is regulatory disclosure. D is training.
Question 125
What is 'risk taxonomy' in ERM?
Select an option first.
Correct answer: B — A structured, standardised classification of all risk types faced by an organisation — creating a common language for risk identification, measurement, and reporting. Ensures consistency: when 'credit risk' is mentioned in the trading book, banking book, and corporate treasury, it means the same thing and can be aggregated
Explanation: B is correct. Risk taxonomy: without a common risk classification, different parts of an organisation may use the same term to mean different things (e.g., 'liquidity risk' can mean funding liquidity or market liquidity). A standardised taxonomy (often hierarchical: risk category → risk type → risk sub-type) enables consistent reporting, aggregation, and cross-firm comparison. BCBS 239 implicitly requires consistent risk data taxonomy. A is instrument classification. C is a loss database. D is a risk ranking/heat map.
Get the full FRM question bank — free
Drop your email and we'll send you fresh FRM practice questions, fully worked solutions and exam-deadline reminders. No spam — unsubscribe in one click.
Want to save your score and take a full mock exam? Create a free account →
Question 126
What is 'insurance of tail risks' and what limitations exist?
Select an option first.
Correct answer: B — Some tail risks can be transferred to insurance companies (e.g., operational risk events, property damage, D&O liability). However, limitations include: insurance gaps (financial crisis losses are not typically insured), basis risk (insurance payout may not match actual loss), counterparty risk (insurer may default in a systemic event), maximum coverage limits, and exclusions for correlated systemic events
Explanation: B is correct. Insurance as risk transfer: effective for: property (fire, flood), D&O (directors and officers liability), cyber insurance (data breach), business interruption. Limitations: systemic events often excluded (e.g., pandemic exclusions in COVID). Cyber insurance: rapidly evolving, underwriting becoming more restrictive. Capital relief: regulators may give limited Basel capital credit for insurance (AMA only). A is too broad. C: insurance gives partial credit only. D is too narrow.
Question 127
What is 'risk-adjusted pricing' in banking lending?
Select an option first.
Correct answer: B — Setting the interest rate (and other terms) on a loan to adequately compensate for the credit risk, funding cost, operational cost, and required return on economic capital — ensuring that the loan is priced to generate a positive RAROC. Loans priced below their risk-adjusted cost of funds destroy shareholder value
Explanation: B is correct. Risk-adjusted loan pricing: Rate = Funding Cost + Expected Loss (PD × LGD) + Operating Cost + Capital Charge (EC × Hurdle Rate). If a borrower has high credit risk (high PD), the loan must be priced higher. Banks that underestimate credit risk and underprice loans erode capital over time. A is market rate pricing without risk adjustment. C is market segmentation. D is floating rate pricing.
Question 128
What is 'ESG risk integration' in investment management?
Select an option first.
Correct answer: B — Incorporating environmental, social, and governance factors into investment analysis and portfolio construction as additional risk factors — not replacing financial analysis, but enhancing it by identifying: environmental risks (stranded assets, carbon tax exposure), social risks (supply chain controversies, labour practices), and governance risks (board independence, accounting quality)
Explanation: B is correct. ESG integration: the investment team uses ESG data alongside financial data. Example: two companies with similar financials — the one with better ESG management may have lower tail risk (lower litigation, better regulatory positioning, stronger brand). Governance quality often correlates with financial quality (good boards → better long-term decisions). A: ESG supplements, not replaces, financial analysis. C is ESG screening (different approach). D is a specific exclusion.
Question 129
What is 'insurance-linked securities' (ILS) and what role do they play in risk transfer?
Select an option first.
Correct answer: B — Financial instruments (e.g., catastrophe bonds, cat bonds) that allow insurers to transfer catastrophic risk to capital market investors — investors earn high coupon but principal is at risk if a defined catastrophe event occurs (hurricane above a specified intensity, earthquake above a given magnitude)
Explanation: B is correct. ILS/cat bonds: the insurer issues a bond. If a trigger event (parametric: wind speed, magnitude) occurs, the principal is forgiven and used to pay claims. Investors earn premium for bearing uncorrelated catastrophe risk. ILS have near-zero correlation with financial markets. Cat bond market: ~$40B outstanding. Risks: model risk (catastrophe frequency underestimated), basis risk (trigger vs actual loss), and climate change increasing frequency/severity. A is CoCo bond. C is straight insurance corporate bond. D is speculation.
Question 130
What is 'natural hedging' in corporate risk management?
Select an option first.
Correct answer: B — Using the natural offset between revenues and costs in the same currency or commodity — e.g., a company that earns USD revenues and pays USD costs naturally hedges its FX exposure without needing financial instruments. Reduces hedging costs and complexity
Explanation: B is correct. Natural hedging: a UK exporter earning USD revenue and having USD operating costs (e.g., USD oil purchases) is naturally hedged for that portion. A multinational that borrows in the local currency of each subsidiary creates natural liability hedges. More reliable and cheaper than financial hedging. A is a specific instrument type. C is geographic matching. D is a financial option strategy.
Question 131
What is 'margining' under bilateral OTC derivatives and how does it work post-2012 reforms?
Select an option first.
Correct answer: B — Under EMIR (EU) and Dodd-Frank (US), bilateral OTC derivatives counterparties above certain thresholds must post initial margin (upfront against future exposure) and variation margin (daily cash settlement of MTM changes) to reduce counterparty credit risk. This replaced the previous practice of unsecured bilateral OTC trading
Explanation: B is correct. UMR (Uncleared Margin Rules): phases began 2016, completed 2022. Initial Margin (IM): models based on 10-day 99% VaR of the derivative. Variation Margin (VM): daily full MTM cash settlement. The rules dramatically reduced bilateral CCR but created significant liquidity risk (margin calls in stress) as shown in the 2022 LDI crisis and the Archegos collapse. A is the old bilateral uncollateralised approach. C is too narrow. D is wrong.
Question 132
What is 'economic capital allocation' at the business unit level?
Select an option first.
Correct answer: B — Assigning economic capital to each business unit based on its risk contribution — using risk-adjusted return measures (RAROC) to evaluate whether each unit earns returns above the cost of capital, enabling the firm to redirect capital to higher-value activities
Explanation: B is correct. EC allocation: each business unit is allocated EC = UL_unit (unexpected loss contribution). RAROC = (Revenue − EL − Costs) / EC_allocated. Units with RAROC > hurdle: allocate more capital. Units with RAROC < hurdle: reduce capital or reprice. This creates an internal market for risk capital, improving capital efficiency. A is equal-weighting. C is a headcount-based allocation. D ignores risk.
Question 133
What is 'risk appetite framework' (RAF) and how is it structured?
Select an option first.
Correct answer: B — A comprehensive framework connecting: risk appetite (board-level), risk strategy (how much of each risk to take), risk tolerances and limits (operational boundaries), KRIs (early warning metrics), risk reporting (monitoring framework), and escalation and breach response procedures. It ensures risk-taking is intentional and consistent with the firm's strategy
Explanation: B is correct. RAF structure: top-level appetite statement (qualitative + quantitative) → risk type sub-limits (market, credit, operational) → business unit limits → desk/product limits → KRIs with amber/red thresholds → escalation paths. RAF bridges strategy and day-to-day risk management. A is a risk register. C is a regulatory return. D is a policy manual.
Question 134
What is 'reputational risk management' and how do firms manage it proactively?
Select an option first.
Correct answer: B — Identifying activities, behaviours, and decisions that could harm the firm's reputation, and establishing governance to prevent or mitigate reputational damage — through: ethical business standards, clear conduct policies, crisis communication plans, stakeholder engagement, and monitoring of media sentiment
Explanation: B is correct. Reputational risk management: proactive identification of reputational exposures (new products, new geographies, business partner quality). Crisis plans: pre-defined response protocols for different scenarios. Reputational risk is often the second-order consequence of another risk event (e.g., a cyber breach creates direct financial loss AND reputational loss as customers leave). A is communications management. C is rating management. D is disclosure compliance.
Question 135
What is 'DFAST' (Dodd-Frank Act Stress Test) and who must conduct it?
Select an option first.
Correct answer: B — Large US bank holding companies and systemically important financial institutions (SIFIs) with ≥$100B in assets must conduct annual stress tests using scenarios provided by the Federal Reserve — scenarios include baseline, adverse, and severely adverse macro assumptions — to demonstrate adequate capital under stress
Explanation: B is correct. DFAST (Section 165 Dodd-Frank): annual supervisory stress test conducted by the Fed alongside the bank's own internal stress test (CCAR for capital planning). Severely adverse scenario: large GDP decline, significant unemployment rise, equity market crash. Banks that fail must restrict dividends and buybacks, and submit capital remediation plans. A is too broad. C and D are incorrect scope definitions.
Question 136
What is 'SOLVENCY II' and what risk framework does it establish for European insurers?
Select an option first.
Correct answer: B — An EU regulatory framework for insurance companies establishing: three-pillar structure similar to Basel (Pillar 1: quantitative capital requirements based on a Solvency Capital Requirement; Pillar 2: governance and ORSA; Pillar 3: disclosure) — designed to ensure insurers can pay claims with 99.5% confidence over 1 year
Explanation: B is correct. Solvency II (2016): Pillar 1: Solvency Capital Requirement (SCR) — 99.5% VaR over 1 year. Minimum Capital Requirement (MCR): below this, regulator takes control. Pillar 2: ORSA (Own Risk and Solvency Assessment), governance requirements, risk management system. Pillar 3: public Solvency and Financial Condition Report (SFCR), regulatory reporting. A is Basel. C is ECB function. D is a rating methodology.
Question 137
What is 'ORSA' (Own Risk and Solvency Assessment) in insurance?
Select an option first.
Correct answer: B — An internal process required by Solvency II where insurers must assess: all material risks faced, the adequacy of their capital relative to those risks under a variety of scenarios, the quality of their risk management framework, and the sustainability of their business model — submitted to the regulator periodically
Explanation: B is correct. ORSA: the insurance equivalent of banking's ICAAP. Insurers design their own forward-looking assessment, using their own models and scenarios appropriate to their risk profile. Goes beyond the regulatory SCR to include strategic risks, concentration, reputational. Regulators review ORSA as part of SREP. A is external audit. C is regulator-imposed stress test. D is the SCR.
Question 138
What is 'LIBOR transition' risk and what replaced LIBOR?
Select an option first.
Correct answer: B — LIBOR (London Interbank Offered Rate), which was the benchmark rate for hundreds of trillions in financial contracts, was phased out by end-2023 due to manipulation scandals (2012). Replaced by risk-free rates (RFRs): SOFR (US), SONIA (UK), ESTR (EU), TONAR (Japan). These are overnight rates based on actual transactions rather than bank estimates. Transition risk: contract uncertainty, systems changes, valuation model updates, potential value transfer between counterparties
Explanation: B is correct. LIBOR transition: $370T+ in contracts referenced LIBOR. Fallback provisions in contracts specified replacement rates. Main risk: term rates (3-month SOFR) vs overnight rates — credit spread differences required adjustment spreads. Derivatives transitioned via ISDA protocol; loans required bilateral amendments. Residual risk: some legacy contracts still outstanding. A: RFRs are market-determined, not central bank set. C: LIBOR largely ceased by June 2023.
Question 139
What is 'risk-based supervision' and how do financial regulators use it?
Select an option first.
Correct answer: B — A regulatory approach that allocates supervisory resources proportionally to the level of risk posed by each institution — high-risk institutions (complex, systemically important, poor governance) receive more intensive supervision; low-risk institutions receive lighter-touch oversight
Explanation: B is correct. Risk-based supervision (RBS): regulators (ECB, PRA, Fed) assess: systemic importance (size, interconnectedness), business model complexity, governance quality, and risk management capability. G-SIBs: most intensive supervision, frequent on-site examinations, detailed data requests. Community banks: less intensive, risk-focused reviews. Proportionality: regulations scaled to size and complexity. A is uniform regulation. C is self-regulation. D is regulatory arbitrage.
Question 140
What is 'financial stability' and how do macroprudential regulators monitor it?
Select an option first.
Correct answer: B — The condition where the financial system functions smoothly, channelling savings to productive investment and managing risk effectively, even in the face of shocks — monitored via: systemic risk indicators (credit growth, asset price inflation, leverage, interconnectedness), heat maps, and indicators of stress in key markets
Explanation: B is correct. Financial stability monitoring (FSB, ESRB, OFR): systemic risk indicators — credit-to-GDP gap (Basel CCyB trigger), house price growth, interbank market stress, bank leverage ratios. Central banks publish Financial Stability Reports. Macroprudential tools: CCyB (countercyclical capital buffer), LTV caps for mortgages, leverage ratio limits. A is microprudential (firm-level). C is too narrow. D is FX stability.
Question 141
What is 'leverage ratio requirement' in Basel III and how does it differ from risk-based capital ratios?
Select an option first.
Correct answer: B — The leverage ratio (Tier 1 capital / Total Exposure) is a non-risk-based minimum — it treats all assets as equally risky (no risk weights). This provides a backstop to risk-based ratios, preventing banks from gaming risk weights to appear well-capitalised while holding highly risky assets with low modelled risk weights
Explanation: B is correct. Leverage ratio vs risk-based capital: the leverage ratio is blind to risk weights — it counts $1 of cash and $1 of high-yield corporate loan equally. This prevents extreme RWA optimisation. Basel III minimum: 3% for most banks; higher for G-SIBs. Key distinction: risk-based ratios reward safer assets (lower RWA); leverage ratio is neutral to asset risk. A: leverage ratio deliberately ignores risk weights. C: varies by portfolio composition. D: applies to total exposure.
Question 142
What is 'horizon risk' in investment management?
Select an option first.
Correct answer: B — The mismatch between an investment strategy's time horizon and the investor's actual investment horizon — short investment horizons limit ability to hold illiquid assets or ride out short-term volatility. An investor with a 30-year horizon can tolerate more equity risk than one with a 1-year horizon
Explanation: B is correct. Horizon risk: a pension fund with 30+ year liabilities can hold illiquid PE (10-year lock-ups) and equity (which can be volatile short-term). A defined-benefit pension with maturing obligations in 2 years cannot take illiquidity risk. Investment policy should match asset horizons to liability horizons. This is a key principle in ALM and SAA. A is a return risk. C and D are other risk concepts.
Question 143
What is 'XBRL' (eXtensible Business Reporting Language) in financial regulatory reporting?
Select an option first.
Correct answer: B — A standardised digital format for submitting financial and regulatory data to regulators — allows machine-readable, structured data that improves the consistency and comparability of regulatory submissions. Required by SEC for public company filings and increasingly by prudential regulators (EBA for European banks)
Explanation: B is correct. XBRL in regulatory reporting: regulators receive massive amounts of structured data from institutions. XBRL tags each data element with a standardised identifier, enabling automated data validation, cross-firm comparison, and systemic risk monitoring. EBA XBRL taxonomy: used for COREP (capital) and FINREP (financial) reporting. A is programming (Python/R). C is database technology. D is internal reporting.
Question 144
What is the 'net interest margin' (NIM) and why is it important in bank risk management?
Select an option first.
Correct answer: B — Interest income minus interest expense divided by average earning assets — the core profitability measure for banks. NIM is compressed when the yield curve is flat (short and long rates similar), and expanded when the yield curve is steep. Managing NIM is central to banking book ALM
Explanation: B is correct. NIM = (Interest Income − Interest Expense) / Average Earning Assets. A bank with NIM of 3% earns $3 per $100 of assets. Rising interest rates: NIM expands if assets reprice faster than liabilities (typical for commercial banks). Flat or inverted yield curve: NIM compression reduces profitability. SVB (2023): concentrated in long-duration assets funded by short deposits → NIM compressed AND large MTM losses when rates rose. A is a spread concept. C is ROA. D is a credit spread.
Question 145
What is 'deposit insurance' and how does it create 'moral hazard' in banking?
Select an option first.
Correct answer: B — A government guarantee (e.g., FDIC in US guarantees deposits up to $250,000) that protects retail depositors if a bank fails — reduces the risk of bank runs but creates moral hazard: banks may take excessive risks because depositors (protected by insurance) have less incentive to monitor bank risk-taking
Explanation: B is correct. Deposit insurance moral hazard: without insurance, depositors would monitor banks and move funds from risky to safe banks. With insurance, depositors are indifferent to risk → banks can fund risky activities cheaply. Regulatory capital requirements, supervision, and resolution frameworks are needed to offset this. A is interbank clearing. C is loan insurance. D is a reserve requirement.
Question 146
What is 'regulatory capital arbitrage' using securitisation?
Select an option first.
Correct answer: B — Removing assets from the balance sheet via securitisation (e.g., mortgage securitisation) to reduce regulatory capital requirements — pre-Basel II, this was used to retain economic exposure while reducing Pillar 1 capital charges. Basel II/III introduced re-securitisation rules and retention requirements to limit this
Explanation: B is correct. Securitisation arbitrage: banks sold mortgages into SPVs (special purpose vehicles), removing them from balance sheet and reducing capital. However, banks retained first-loss positions and liquidity backstops — economic risk remained but regulatory capital was freed. Basel II/III response: added re-securitisation risk weights (CDO of ABS), liquidity facility capital charges, and risk retention requirements (5% skin in the game). A is tax arbitrage. C is capital structure optimisation. D is RWA reduction via hedging.
Question 147
What is 'systemic importance' and how are G-SIBs identified?
Select an option first.
Correct answer: B — Banks are identified as Global Systemically Important Banks (G-SIBs) based on five dimensions: size (total assets), interconnectedness (interbank exposures), substitutability (market share in key functions), complexity (derivatives, cross-border activities), and global activity (cross-jurisdictional claims)
Explanation: B is correct. G-SIB assessment (FSB/BCBS methodology): 12 indicators across 5 categories. Score above threshold → G-SIB designation → additional capital surcharge (1-3.5% CET1). G-SIB list (2023): JPMorgan, HSBC, Citi, BofA, Goldman Sachs, Morgan Stanley, Wells Fargo, Deutsche Bank, etc. Updated annually. A is only one factor. C: commercial banks qualify. D: assessed by supervisors using reported data.
Question 148
What is 'recovery and resolution planning' (RRP) and what tools does it provide?
Select an option first.
Correct answer: B — A regulatory requirement for banks to develop: (1) Recovery plan — actions management can take to restore viability if seriously stressed (capital raises, asset sales, business restructuring); (2) Resolution plan — how regulators can wind down a failing bank in an orderly manner without taxpayer support using bail-in, bridge bank, or asset separation tools
Explanation: B is correct. RRP (Dodd-Frank, BRRD): recovery tools: asset sales, rights issues, business line sales, cost cuts. Resolution tools (FDIC/SRB): bail-in (write down equity and debt), bridge bank (transfer viable operations to a temporary entity), asset separation (good bank/bad bank split), purchase and assumption (sale to another bank). Goal: preserve critical functions (payments, deposits) without taxpayer money. A is deposit insurance. C is BCP. D is succession planning.
Question 149
What is 'regulatory capital adequacy' for investment firms vs banks?
Select an option first.
Correct answer: B — Different regulatory capital frameworks apply: banks use Basel/CRR (credit risk, market risk, operational risk focused). EU investment firms use IFR/IFD — a bespoke framework using K-factors reflecting specific investment firm risks (K-AUM, K-CMH, K-ASA for client asset risks; K-NPR for trading book market risk; K-CON for concentration) — scaled to the nature and size of the firm's activities
Explanation: B is correct. IFR/IFD (Investment Firm Regulation/Directive, 2021 EU): replaced the previously bank-like capital requirements for investment firms with a tailored approach. K-factors: measure ongoing risks from activities. For large, bank-like investment firms: still use CRR. For smaller: K-factors create proportionate requirements. A is wrong. C is incorrect. D is too narrow.
Question 150
What does the Sharpe ratio measure?
Select an option first.
Correct answer: B — Excess return per unit of total risk, calculated as (portfolio return minus risk-free rate) divided by portfolio standard deviation
Explanation: B is correct. The Sharpe ratio = (Rp − Rf) / σp. It measures how much excess return (above the risk-free rate) is earned per unit of total risk (standard deviation). A higher Sharpe ratio indicates better risk-adjusted performance. A is not a standard ratio. C describes a different concept related to beta. D confuses dividend yield with a risk-adjusted metric.
More free FRM topics
Ten questions in
- The ones you miss are saved as a drill you can repeat
- Your place is kept, on this device and any other
- A streak, if that is the thing that gets you back tomorrow
Every question on this page stays free and open either way.