Certified Governance Risk and Compliance (CGRC) Practice Exam 2026 – All-in-One Guide to Master Your Certification!

The correct answer is that risk distributions within the project schedule are least likely to be updated in the risk register following a quantitative risk analysis. During quantitative risk analysis, the focus is primarily on measuring risks through numerical methods, which culminates into probabilities and impacts associated with various risks.

While the other aspects — such as the probability of meeting cost and time objectives, probabilistic analysis results, and trends observed during quantitative risk assessment — are directly influenced by the findings of the analysis and are typically documented or updated to reflect the latest insights, the risk distributions within the project schedule are established parameters that typically need not change drastically based on the analysis. Distributions are derived from earlier assumptions and data regarding performance and risk impacts rather than from the recent analysis outcomes, which tend to alter broader, overall risk perceptions rather than fine-tuned distributions already established.

In essence, updates to the risk register are concerned more with the assessments of risk impacts and likelihood rather than the reconfiguration of pre-existing distributions which are a snapshot of known project parameters rather than a dynamic element influenced by ongoing analysis.