Amazon
Avaya
Checkpoint
Cisco®
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL®
Juniper
Microsoft
Okta
Palo Alto Networks
Salesforce
All Vendors
  1. Home
  2. CIPS
  3. L5M2

CIPS L5M2 Exam (page: 1)
CIPS Managing Supply Chain Risk
Updated on: 25-Dec-2025

Viewing Page 1 of 25
L5M2 PDF 120 Questions

Which of the following statements are true about risk management? Select TWO.

  1. the goal of risk management is to reduce risks to 0
  2. risk management is a continuous process
  3. risk management is an activity that is conducted by a business once a year
  4. risk management can help companies ensure the smooth and successful running of purchase and supply operations
  5. risk management is the process by which all risks are either treated or transferred

Answer(s): B,D

Explanation:

The correct responses are 2 and 4: risk management is a continual process and helps companies ensure the smooth and successful running of P+S. These are direct quotes from p.3 of the study guide. The other answers are wrong- if risk management is a continuous process it's not something that is done once a year- so this option is automatically discounted. Option 1 is also wrong as you can never reduce all risks to 0, and option 5 is also wrong- risks can be treated and transferred, but they can also be tolerated and terminated.



A company with a large risk appetite would do which of the following?

  1. take all risks
  2. take risks where it feels it will win more than it loses
  3. take few, well calculated risks
  4. avoid taking risks

Answer(s): B

Explanation:

2 is the correct answer. Risk appetite is the level of risk that an individual or organisation is comfortable taking (p.4). Having a large risk appetite does not mean that you want to take every risk (as that would be irresponsible), rather, a large risk appetite means you're more likely to gamble and take calculated risks, even though they might not pay off. A small risk appetite would describe options 3 and 4 - taking few risks, or none at all.



Chloe is a procurement manager at Ruby Company. She has been asked to join a cross-functional team to review the company's risk appetite, potential risks within the supply chain and brainstorm mitigating actions. Chloe has suggested that the cross-functional team should first draw up a list of potential supply chain risks and potential strategies to overcome the risks. Is Chloe correct?

  1. yes- the first thing the team should look at are the risks and categorise these by topic
  2. yes- the team should focus on creating a risk register and strategies for mitigating risks as quickly as possible
  3. no- the team should review the company's risk appetite before creating a risk register
  4. no- Chloe should first speak with suppliers before drawing up the list of potential supply chain risks

Answer(s): C

Explanation:

The correct answer is 3 'no- the team should review the company's risk appetite before creating a risk register'. This questions tests to see if you understand what risk appetite is and when this should be reviewed. Risk appetite is the first stage in developing any plan as it will influence the next stages. For example if the company has a large risk appetite, this would affect how they would classify risks and what mitigating actions they would take. Risk appetite is explained in chapter 1.1 (p.4) but it also comes up in Learning Outcome 3



John is a mid-level manager and has created a risk / reward matrix about four potential opportunities at his company White Ducky Limited. He will present his research to a board meeting next week. He has categorised the four opportunities as the following.
Which of these opportunities should John recommend the board 'consider'? Select TWO.

  1. low risk / high reward
  2. high risk/ high reward
  3. low risk/ low reward
  4. high risk/ low reward

Answer(s): B,C

Explanation:

High risk/ high reward, and low risk/ low reward are the options that should be CONSIDERED. This is according to the risk/ reward matrix on p. 6. Items that are low risk/ high reward should be PROGRESSED and items which are high risk / low reward should be AVOIDED.



Company DDD has recently seen a drop in share price and has high levels of Work-in-Progress (WIP) due to late supplier deliveries.
Which of the following is the type of risk the business facing?

  1. financial
  2. logistical
  3. opportunity
  4. reputation

Answer(s): A

Explanation:

This is a financial risk. A drop in share prices is a huge financial risk for a company. Having lots of items as WIP is also a financial risk as this signifies that a lot of money is tied up in stock being held on site. Types of risk are very popular exam questions for this module- for a full list of these and s see p.11



Viewing Page 1 of 25



Share your comments for CIPS L5M2 exam with other users:

John 9/16/2023 9:37:00 PM

q6 exam topic: terramearth, c: correct answer: copy 1petabyte to encrypted usb device ???
GERMANY


SAM 12/4/2023 12:56:00 AM

explained answers
INDIA


Andy 12/26/2023 9:35:00 PM

plan to take theaws certified developer - associate dva-c02 in the next few weeks
SINGAPORE


siva 5/17/2023 12:32:00 AM

very helpfull
Anonymous


mouna 9/27/2023 8:53:00 AM

good questions
Anonymous


Bhavya 9/12/2023 7:18:00 AM

help to practice csa exam
Anonymous


Malik 9/28/2023 1:09:00 PM

nice tip and well documented
Anonymous


rodrigo 6/22/2023 7:55:00 AM

i need the exam
Anonymous


Dan 6/29/2023 1:53:00 PM

please upload
Anonymous


Ale M 11/22/2023 6:38:00 PM

prepping for fsc exam
AUSTRALIA


ahmad hassan 9/6/2023 3:26:00 AM

pd1 with great experience
Anonymous


Žarko 9/5/2023 3:35:00 AM

@t it seems like azure service bus message quesues could be the best solution
UNITED KINGDOM


Shiji 10/15/2023 1:08:00 PM

helpful to check your understanding.
INDIA


Da Costa 8/27/2023 11:43:00 AM

question 128 the answer should be static not auto
Anonymous


bot 7/26/2023 6:45:00 PM

more comments here
UNITED STATES


Kaleemullah 12/31/2023 1:35:00 AM

great support to appear for exams
Anonymous


Bsmaind 8/20/2023 9:26:00 AM

useful dumps
Anonymous


Blessious Phiri 8/13/2023 8:37:00 AM

making progress
Anonymous


Nabla 9/17/2023 10:20:00 AM

q31 answer should be d i think
FRANCE


vladputin 7/20/2023 5:00:00 AM

is this real?
UNITED STATES


Nick W 9/29/2023 7:32:00 AM

q10: c and f are also true. q11: this is outdated. you no longer need ownership on a pipe to operate it
Anonymous


Naveed 8/28/2023 2:48:00 AM

good questions with simple explanation
UNITED STATES


cert 9/24/2023 4:53:00 PM

admin guide (windows) respond to malicious causality chains. when the cortex xdr agent identifies a remote network connection that attempts to perform malicious activity—such as encrypting endpoint files—the agent can automatically block the ip address to close all existing communication and block new connections from this ip address to the endpoint. when cortex xdrblocks an ip address per endpoint, that address remains blocked throughout all agent profiles and policies, including any host-firewall policy rules. you can view the list of all blocked ip addresses per endpoint from the action center, as well as unblock them to re-enable communication as appropriate. this module is supported with cortex xdr agent 7.3.0 and later. select the action mode to take when the cortex xdr agent detects remote malicious causality chains: enabled (default)—terminate connection and block ip address of the remote connection. disabled—do not block remote ip addresses. to allow specific and known s
Anonymous


Yves 8/29/2023 8:46:00 PM

very inciting
Anonymous


Miguel 10/16/2023 11:18:00 AM

question 5, it seems a instead of d, because: - care plan = case - patient = person account - product = product2;
SPAIN


Byset 9/25/2023 12:49:00 AM

it look like real one
Anonymous


Debabrata Das 8/28/2023 8:42:00 AM

i am taking oracle fcc certification test next two days, pls share question dumps
Anonymous


nITA KALE 8/22/2023 1:57:00 AM

i need dumps
Anonymous


CV 9/9/2023 1:54:00 PM

its time to comptia sec+
GREECE


SkepticReader 8/1/2023 8:51:00 AM

question 35 has an answer for a different question. i believe the answer is "a" because it shut off the firewall. "0" in registry data means that its false (aka off).
UNITED STATES


Nabin 10/16/2023 4:58:00 AM

helpful content
MALAYSIA


Blessious Phiri 8/15/2023 3:19:00 PM

oracle 19c is complex db
Anonymous


Sreenivas 10/24/2023 12:59:00 AM

helpful for practice
Anonymous


Liz 9/11/2022 11:27:00 PM

support team is fast and deeply knowledgeable. i appreciate that a lot.
UNITED STATES