CFA Program — Risk Management

Question 1

A risk budgeting process within a multi-strategy investment platform primarily involves:

• A) Allocating capital and/or risk (e.g., volatility or VaR contribution) across strategies or managers according to a predetermined total risk tolerance and each strategy's expected risk-adjusted contribution
• B) Allocating capital with no reference to risk at all
• C) Guaranteeing each strategy an identical dollar allocation regardless of risk
• D) Eliminating the need to monitor risk after initial allocation

Question 2

A portfolio manager uses a currency overlay program to manage foreign exchange exposure separately from the underlying asset allocation decisions. This structure primarily allows the manager to:

• A) Manage currency risk (hedging ratios, tactical currency views) independently of the underlying security selection and asset allocation decisions
• B) Eliminate the underlying asset allocation decision entirely
• C) Avoid any need to consider currency risk
• D) Guarantee that currency exposure will always add positive return

Question 3

A hedge fund manager uses stress testing and scenario analysis in addition to VaR. This is primarily done to address the limitation that VaR:

• A) Is always too conservative an estimate of risk
• B) Typically relies on historical data and standard statistical assumptions that may not capture extreme, unprecedented, or structurally different future events
• C) Cannot be calculated for any portfolio containing derivatives
• D) Automatically incorporates all possible future scenarios

Question 4

A firm implementing an enterprise risk management (ERM) framework, as opposed to managing risks in individual business-unit silos, primarily aims to:

• A) Manage each business unit's risks entirely independently with no aggregation
• B) Take a holistic, organization-wide view of risk, recognizing that risks can be correlated across business units and that aggregate risk exposure may differ from the simple sum of siloed risks
• C) Eliminate all risk from the organization entirely
• D) Focus exclusively on financial market risk, ignoring operational risk

Question 5

Conditional VaR (CVaR), also known as expected shortfall, differs from standard VaR in that CVaR:

• A) Only measures the probability of a loss occurring, not its magnitude
• B) Measures the expected magnitude of loss given that the loss has exceeded the VaR threshold, providing information about the severity of tail losses that VaR alone does not capture
• C) Is always numerically smaller than VaR at the same confidence level
• D) Cannot be estimated for any portfolio

Question 6

A risk manager constructs a Value at Risk (VaR) estimate for a portfolio at a 95% confidence level over a one-month horizon. This VaR estimate is best interpreted as:

• A) The maximum possible loss the portfolio could ever experience
• B) The loss level that is expected to be exceeded only 5% of the time over the one-month horizon, given the assumptions underlying the model
• C) The average expected return of the portfolio over the horizon
• D) A guarantee that losses will never exceed the VaR estimate

Question 7

A risk manager at an asset management firm is establishing an enterprise risk governance framework and considers the appropriate role of the board of directors versus senior management in risk oversight. Which of the following best describes the board's typical role?

• A) Risk governance is solely the responsibility of a single individual with no board or senior management involvement.
• B) The board's role in risk governance is identical to that of front-line portfolio managers.
• C) Setting the overall risk appetite and tolerance for the organization and overseeing that appropriate risk management processes exist, while senior management is responsible for the day-to-day implementation and execution of risk management within that framework.
• D) The board is responsible for day-to-day risk management execution, while senior management sets overall risk appetite.

Question 8

A risk manager evaluating counterparty risk in a portfolio's over-the-counter (OTC) derivatives positions considers the use of collateral (margin) agreements and netting arrangements with each counterparty. Which of the following best describes how netting arrangements reduce counterparty risk?

• A) Netting increases the total counterparty exposure by combining all transactions into a larger gross amount.
• B) They allow offsetting exposures across multiple transactions with the same counterparty to be combined into a single net exposure amount, rather than each transaction's exposure being considered in isolation, reducing the total amount at risk if the counterparty defaults.
• C) Netting arrangements eliminate counterparty risk entirely, making collateral agreements unnecessary.
• D) Netting arrangements apply only to exchange-traded derivatives, never to OTC derivatives.

Question 9

A derivatives overlay manager uses exchange-traded put options on a broad equity index to hedge a portion of downside risk in a large equity portfolio, rather than reducing the underlying equity allocation directly. Which of the following is a valid rationale for this approach?

• A) Put option overlays eliminate the cost of hedging entirely, unlike reducing the underlying allocation.
• B) This approach can only be used for portfolios with no existing equity exposure.
• C) It allows the portfolio to retain full upside participation in the equity market (beyond the cost of the option premium) while still providing a defined level of downside protection, an asymmetric payoff profile that simply reducing the equity allocation would not replicate.
• D) Purchasing put options provides identical payoff characteristics to simply selling a portion of the underlying equity holdings.

Question 10

A multi-asset portfolio's risk budget is allocated across several strategies using a risk parity-inspired framework, where each strategy's target risk contribution is set based on the portfolio manager's conviction in that strategy's expected risk-adjusted return. Which of the following best describes a key benefit of this risk-budgeting approach compared to simple dollar-based capital allocation?

• A) Risk budgeting eliminates the need for any ongoing monitoring of realized portfolio risk after initial allocation.
• B) Dollar-based capital allocation and risk-based allocation always produce identical portfolio risk profiles.
• C) Risk budgeting is only applicable to portfolios containing a single asset class.
• D) It more directly manages the portfolio's actual risk exposure by accounting for the fact that different strategies can have very different volatilities, so an equal dollar allocation could result in a small number of high-volatility strategies dominating total portfolio risk.

Question 11

A firm's risk management function uses both historical simulation and Monte Carlo simulation to estimate portfolio VaR. Which of the following is a key limitation specific to the historical simulation approach?

• A) It relies entirely on a specific historical sample period, so it cannot generate loss scenarios that did not occur within that particular historical window, potentially understating risk if future conditions differ meaningfully from history.
• B) Historical simulation always overstates portfolio risk relative to Monte Carlo simulation in every case.
• C) Historical simulation cannot be applied to any portfolio containing more than a single security.
• D) Historical simulation requires no historical return data of any kind to implement.

Question 12

A portfolio risk manager compares Value at Risk (VaR) and Conditional Value at Risk (CVaR, also called Expected Shortfall) as risk measures for a portfolio with a meaningfully non-normal (fat-tailed) return distribution. Which of the following best describes a key advantage of CVaR over standard VaR in this context?

• A) CVaR cannot be calculated for portfolios with non-normal return distributions.
• B) CVaR captures the expected magnitude of losses beyond the VaR threshold, providing information about the severity of tail losses that VaR alone (which only identifies a threshold loss level) does not directly convey.
• C) CVaR and VaR provide mathematically identical information in all cases, with CVaR simply being an alternative name for the same calculation.
• D) VaR always provides a more conservative (larger) loss estimate than CVaR for the same confidence level.

Question 13

A firm's risk management team is assessing "liquidity risk" specific to a fund's ability to meet potential redemption requests, distinguishing between the liquidity of the fund's underlying assets and the liquidity terms offered to the fund's own investors (such as redemption frequency and notice periods). Which of the following would most likely create a liquidity mismatch risk for a fund?

• A) Liquidity mismatch risk is a concern only for open-end mutual funds, never for any other fund structure.
• B) A fund offering daily investor redemptions while holding a meaningful allocation to underlying assets that would take considerably longer than a single day to sell at fair value without significant price impact.
• C) A fund offering daily investor redemptions while holding only highly liquid, exchange-traded securities that can be sold quickly at fair value.
• D) A private equity fund with multi-year lock-up periods for investors, holding illiquid private investments with a similarly long expected holding period.

Question 14

A private wealth advisor incorporates a client-specific "risk management" review into the broader financial planning process, distinct from the investment portfolio's own market risk. Which of the following best describes a key non-investment risk this review should address for a high-net-worth client?

• A) Liability insurance considerations are relevant only for institutional clients, never for individual private wealth clients.
• B) A client's net worth has no relationship to the appropriate level of liability insurance coverage.
• C) Adequacy of liability (umbrella) insurance coverage relative to the client's net worth and potential litigation exposure, since a significant uninsured liability claim could threaten a substantial portion of the client's overall wealth regardless of the investment portfolio's performance.
• D) The review should address only the investment portfolio's market risk, with no consideration of other risk categories.

Question 15

A pension fund's risk management framework incorporates a formal "risk budget" that allocates an overall acceptable level of tracking error or active risk across its various asset classes and active managers. Which of the following best describes the primary benefit of this approach compared to managing risk only at the level of each individual manager in isolation?

• A) A formal risk budget applies only to a fund's passive investments, never to actively managed allocations.
• B) It ensures that the fund's aggregate active risk across all managers and asset classes remains within an overall acceptable level, accounting for potential correlations or offsetting positions between managers, rather than allowing risk to accumulate unintentionally when each manager is evaluated only individually.
• C) A risk budget eliminates the need to consider correlations or interactions between different managers' active positions.
• D) Managing risk only at the individual manager level always produces an identical result to managing risk at the total fund level.

Question 16

A firm's risk management team is evaluating the use of "risk factor" decomposition to better understand the sources of a multi-asset portfolio's overall volatility, beyond a simple asset-class-level breakdown. Which of the following is a key insight this type of analysis can reveal that a simple asset-class breakdown might miss?

• A) A portfolio that appears well-diversified across multiple asset classes at face value may still have concentrated exposure to a small number of common underlying risk factors (such as overall economic growth sensitivity or interest rate sensitivity) shared across those asset classes, resulting in less true diversification than the asset-class breakdown alone would suggest.
• B) Risk factor decomposition always produces results identical to a simple asset-class-level breakdown, providing no additional insight.
• C) This type of analysis is only applicable to single-asset-class portfolios, never to multi-asset portfolios.
• D) A portfolio diversified across many asset classes can never have concentrated exposure to a common underlying risk factor.

Question 17

A firm's enterprise risk management function distinguishes between "risk management" (identifying, measuring, and managing/mitigating risks) and "risk governance" (the overall structure, policies, and oversight processes ensuring risk management is conducted appropriately). Which of the following best illustrates a risk governance failure, as distinct from a pure risk management/measurement failure?

• A) A firm's VaR model produces an inaccurate risk estimate due to a flawed statistical assumption embedded in the calculation methodology.
• B) A firm fails to collect sufficient historical data to accurately calibrate its risk models.
• C) A firm's risk management team lacks the specific technical expertise needed to build a sophisticated risk model.
• D) A firm's risk management team correctly identifies and reports a significant emerging risk to senior management, but senior management and the board fail to act on the report or allocate resources to address it in a timely manner.

Question 18

A risk manager evaluating a hedge fund's use of leverage considers both gross leverage (total long plus total short notional exposure divided by capital) and net leverage (long minus short notional exposure divided by capital). Which of the following scenarios illustrates a fund with high gross leverage but low net leverage?

• A) High gross leverage and low net leverage are mathematically impossible to achieve simultaneously in any portfolio structure.
• B) A fund with no positions of any kind, resulting in both zero gross and zero net leverage.
• C) A market-neutral long-short equity fund with a large long book and an approximately equally large offsetting short book, resulting in substantial gross exposure but minimal net directional market exposure.
• D) A fund holding only long equity positions with no short positions and moderate overall leverage.

Question 19

An enterprise risk management (ERM) framework integrates risk management by:

• A) Focusing exclusively on financial risk (market, credit, liquidity)
• B) Viewing all organizational risks holistically and aligning risk appetite with strategic objectives
• C) Delegating risk decisions entirely to front-line business units
• D) Using VaR as the sole metric for all risk categories

Question 20

Which of the following is a key limitation of using historical simulation for VaR estimation?

• A) It requires assumption of a specific return distribution
• B) It assumes the historical period is representative of future risk, potentially missing unprecedented events
• C) It is computationally more complex than Monte Carlo simulation
• D) It cannot incorporate fat tails in the return distribution

Question 21

Expected shortfall (CVaR) is a more complete tail risk measure than VaR because:

• A) CVaR is always lower than VaR
• B) CVaR captures the average loss in the tail beyond the VaR threshold
• C) CVaR can be computed without distributional assumptions
• D) CVaR penalizes portfolios with positive skewness

Question 22

A portfolio's 1-day VaR at 99% confidence is $2M. The correct interpretation is:

• A) The maximum loss over any one day is $2M
• B) There is a 1% probability of losing more than $2M in a single day under normal market conditions
• C) The expected loss on the worst 1% of trading days is $2M
• D) The portfolio will lose exactly $2M on 1% of trading days

Question 23

A portfolio manager uses derivatives to reduce portfolio beta from 1.2 to 0.8 using equity futures. The notional adjustment required per $100M portfolio (futures multiplier $250, index at 4,000) is to:

• A) Buy futures to add long exposure
• B) Short futures contracts to reduce beta
• C) Buy put options to achieve the same effect
• D) Use variance swaps to reduce volatility exposure

Question 24

Stress testing a portfolio differs from VaR analysis primarily because stress testing:

• A) Uses probability-weighted scenarios for statistical precision
• B) Examines extreme but plausible scenarios that may lie outside the VaR distribution
• C) Produces a single number summarizing total portfolio risk
• D) Is backward-looking while VaR is entirely forward-looking

Question 25

An institution's risk management framework distinguishes between "market risk" and "credit risk." Market risk primarily refers to:

• A) The risk associated with a firm's internal operational processes and systems.
• B) The risk of losses due to changes in market prices or rates, such as interest rates, equity prices, currency rates, or commodity prices.
• C) The risk that a counterparty will fail to meet its contractual obligations.
• D) The risk that a firm will be unable to meet short-term cash obligations.

Question 26

An option's "vega" measures the sensitivity of the option's price to changes in:

• A) The strike price of the option.
• B) The number of days since the option was purchased.
• C) The dividend yield of the underlying asset exclusively, with no relationship to volatility.
• D) The implied volatility of the underlying asset.

Question 27

A firm uses "delta hedging" to manage the risk of an options position, but must periodically rebalance the hedge because the option's delta changes as the underlying asset price and time to expiration change. The rate of change of delta itself, with respect to the underlying price, is measured by:

• A) Gamma
• B) Vega
• C) Theta
• D) Rho

Question 28

A risk manager compares a portfolio's Value at Risk (VaR) to its Conditional Value at Risk (CVaR, also called Expected Shortfall) at the same confidence level. CVaR is generally considered a more informative risk measure than VaR because CVaR:

• A) Estimates the expected (average) magnitude of loss given that the loss exceeds the VaR threshold, providing information about the severity of tail losses that VaR alone does not capture.
• B) Is always numerically smaller than VaR at the same confidence level.
• C) Ignores the tail of the loss distribution entirely.
• D) Cannot be calculated for any portfolio containing derivatives.

Question 29

A risk manager uses historical simulation to estimate a portfolio's VaR. A key limitation of this approach is that:

• A) Historical simulation requires no historical data of any kind.
• B) Historical simulation always produces identical results to a parametric (variance-covariance) VaR approach.
• C) Historical simulation cannot be used for any portfolio containing equities.
• D) It assumes that the historical period used is representative of future risk, which may not hold if market conditions or the portfolio's composition change meaningfully going forward.

Question 30

A risk manager conducts "stress testing" on a portfolio by applying a specific, historically observed extreme market scenario (such as the 2008 financial crisis) to the current portfolio's holdings. This differs from a standard VaR calculation primarily because stress testing:

• A) Requires no consideration of any specific market scenario whatsoever.
• B) Is only applicable to portfolios containing no equity securities.
• C) Focuses on evaluating the portfolio's potential loss under a specific, often historically or hypothetically extreme scenario, rather than providing a probability-based estimate across the full range of likely outcomes.
• D) Always produces a smaller estimated loss than a standard VaR calculation.

Question 31

A portfolio's benchmark-relative tracking error is 5% annually, and the portfolio's active return relative to the benchmark averaged 1.5% annually over the same period. Assuming active returns are approximately normally distributed with a mean of 1.5% and a standard deviation equal to the tracking error, the approximate probability that the portfolio's active return in a given year falls below 0% (underperforms the benchmark) is most closely associated with which of the following statements?

• A) A z-score of approximately -0.30 for the zero-return threshold (since zero active return sits 1.5%/5% = 0.30 standard deviations below the 1.5% mean), implying the portfolio underperforms the benchmark in a meaningfully less than half, but still substantial, proportion of years under this assumed distribution.
• B) A z-score of exactly 0, implying the portfolio has an equal (50%) probability of outperforming or underperforming the benchmark in any given year, regardless of its positive average active return.
• C) The probability of underperformance is zero in every year, since the average active return is positive.
• D) Tracking error and average active return have no mathematical relationship to the probability of underperforming the benchmark in a given year.

Question 32

A bank's enterprise risk management framework establishes a formal "three lines of defense" model: business units that own and manage risk directly (first line), independent risk management and compliance functions (second line), and internal audit (third line). Which of the following best describes the primary role of the second line of defense in this model?

• A) The second line of defense is responsible for directly executing all client-facing business transactions, identical in function to the first line.
• B) The second line of defense provides independent oversight, risk policy-setting, and monitoring of the first line's risk-taking activities, distinct from both the first line's direct risk ownership and the third line's independent assurance function of auditing the overall framework's effectiveness.
• C) The second line of defense's sole function is to provide retrospective, periodic audits of the first and third lines, a role that actually belongs to the third line, not the second, under this framework.
• D) The three lines of defense model assigns identical responsibilities to all three lines, with no meaningful functional distinction between them.

Question 33

A risk manager is evaluating the use of extreme value theory (EVT) to model the tail of a portfolio's loss distribution, rather than relying solely on a standard VaR approach that assumes returns follow a normal (or other standard, thin-tailed) distribution across the entire range of outcomes. Which of the following best describes the primary motivation for applying EVT specifically to the tail of the distribution?

• A) EVT is motivated by the recognition that the statistical behavior of extreme, rare tail losses can differ meaningfully from the behavior implied by a distribution (such as the normal distribution) fitted to the bulk of more typical, central observations, so directly and separately modeling the tail itself can provide a more accurate estimate of extreme loss risk than extrapolating a standard central distribution's assumptions into the tail.
• B) EVT and standard VaR modeling approaches make mathematically identical assumptions about the entire return distribution, including its tails, making the distinction between the two approaches purely nominal.
• C) EVT is used exclusively to model the most typical, central, average-case portfolio outcomes, with no specific focus on or advantage in modeling rare, extreme tail losses.
• D) EVT requires no historical loss data of any kind, relying instead purely on an analyst's subjective, unquantified judgment about the shape of the tail.

Question 34

A firm's model validation team is backtesting a 1-day, 99% confidence VaR model over the most recent 250 trading days by counting the number of days on which the actual portfolio loss exceeded the model's predicted VaR (an "exception"). The model recorded 9 exceptions over this 250-day period. Which of the following is the most appropriate interpretation of this backtesting result?

• A) At a 99% confidence level, roughly 2 to 3 exceptions would be expected over a 250-day period (250 x 1%); observing 9 exceptions is well above this expected number, raising a meaningful concern that the model may be systematically underestimating the portfolio's true risk and warranting further investigation or recalibration.
• B) Observing any number of exceptions at all over a 250-day period definitively proves the VaR model is fundamentally broken and must be discarded immediately without further analysis.
• C) A 99% confidence VaR model should, by construction, never generate any exceptions whatsoever over any backtesting period, making even a single exception grounds for immediate rejection.
• D) Nine exceptions over 250 days is entirely consistent with, and expected under, a properly calibrated 99% confidence VaR model, requiring no further investigation of any kind.

Question 35

Two portfolios, X and Y, each have an annualized standard deviation of returns of 12%. Portfolio X generated an annualized return of 9% over the period, while the risk-free rate averaged 2%. Portfolio Y generated an annualized return of 7% over the same period, with the same 2% risk-free rate. The difference between Portfolio X's Sharpe ratio and Portfolio Y's Sharpe ratio is closest to:

• A) 0.17
• B) 0.58
• C) 0.42
• D) 0.25

Question 36

A $50 million portfolio has an estimated annualized return volatility (standard deviation) of 16%. Assuming returns are approximately normally distributed with an expected annual return of 0%, the portfolio's 1-year VaR at a 95% confidence level (using a z-value of 1.65) is closest to:

• A) $8.0 million
• B) $13.2 million
• C) $4.0 million
• D) $16.0 million