FRM Part 1 Exam October 30, 2026 · 17 min read 2026 Blueprint Verified

Free FRM Foundations of Risk Management Practice Questions (2026)

10-year Price Waterhouse alumnus · Founder of VoraPrep · Former CPA (1987–2024) · with the VoraPrep Editorial Team

Fact-Checked Against Primary Authorities: Global Association of Risk Professionals (GARP) FRM Study Guide ↗

Key Takeaways

Overconfidence is the primary reason candidates underperform on this "qualitative" section; you must treat its 20% weight with respect.
You will be tested on your ability to differentiate between similar-sounding concepts under pressure, such as moral hazard versus adverse selection.
The GARP Code of Conduct is tested through scenarios, requiring you to identify the specific principle being violated, not just recite the list.
While mostly conceptual, this section includes foundational quantitative concepts like the Capital Asset Pricing Model that you must be able to calculate flawlessly.
A common exam trap is misidentifying the roles within the "three lines of defense" model, particularly the placement of the risk management function versus internal audit.
Understanding historical risk management failures provides critical context for why modern risk frameworks exist and is a frequent source of exam questions.

The easiest section of the FRM Part I exam is the one most likely to fail you. Foundations of Risk Management feels qualitative, almost like a warm-up, so candidates skim the material and bank their study hours for the quantitative sections. This is the single biggest strategic error you can make, and the exam writers at GARP count on it.

Quick answer

The best way to practice for the FRM Foundations of Risk Management section is to work through exam-style questions that test judgment, not just memorization. This section is worth 20% of your score and requires applying concepts like the GARP Code of Conduct and risk governance models to realistic scenarios, alongside mastering foundational calculations like CAPM.

Key facts

Section name: Foundations of Risk Management (Book 1)
Exam: Financial Risk Manager (FRM) Part I
Blueprint weight: 20% (Approx. 20 questions out of 100)
Key topics: Risk management frameworks, GARP Code of Conduct, historical risk failures (e.g., Barings, LTCM), portfolio theory, CAPM, and foundational statistics.
Official body: Global Association of Risk Professionals (GARP)
Exam format: 100 multiple-choice questions (4-hour single session for Part I)

GARP reported that the May 2023 FRM Part I pass rate was 47% (GARP), underscoring that even foundational knowledge is tested rigorously.

What Makes These Practice Questions Different?

These 10 questions are not a simple knowledge check. They are designed to mirror the scenarios and traps you will face on exam day. They are calibrated to the difficulty of the actual FRM exam and are fully aligned with the 2026 GARP curriculum for Foundations of Risk Management.

Free 5-Min Diagnostic

Studying for FRM Part 1? Benchmark your score in 5 minutes.

Get an instant weak-spot assessment and a custom 12-week study plan PDF generated for your exam window.

Take Free Diagnostic →Explore Course & Free Trial

This isn't about memorizing definitions. It's about applying them.

The questions cover key areas of the syllabus, including:

The GARP Code of Conduct
Risk governance and the "three lines of defense"
Enterprise Risk Management (ERM)
The relationship between risk and reward (CAPM)
Portfolio management theory and historical failures

As you work through them, pay close attention to the explanations. The goal isn't just to get the right answer, but to understand precisely why the wrong answers are tempting distractors. This is how you learn to think like the examiner. For a broader set of questions covering all four Part I domains, you can try VoraPrep's free FRM practice questions.

10 Exam-Style FRM Foundations Practice Questions

Set aside 20-25 minutes, turn off distractions, and answer these questions as if you were in the exam.

Question 1

An FRM charterholder is working as a portfolio manager for a large asset management firm. He discovers a flaw in the firm's proprietary risk model that slightly understates the portfolio's tail risk. He reports this to his immediate supervisor, who tells him to "keep it quiet for now" as the firm is in the middle of a major capital-raising campaign. Which GARP Code of Conduct standard is the charterholder most at risk of violating if he follows his supervisor's instructions?

A. Professionalism

B. Conflicts of Interest

C. Confidentiality

D. Fundamental Responsibilities

Answer: D) Fundamental Responsibilities Explanation: This is a classic exam-day scenario. The core issue is the potential to mislead investors and clients by knowingly using a flawed risk model. This directly violates the standard of Fundamental Responsibilities, which requires FRM holders to "take appropriate action to ensure that their employer's risk management practices are sound."

Why A is tempting but wrong: Professionalism covers acting with integrity and competence. While related, "Fundamental Responsibilities" is more specific to the duty to act when risk management practices themselves are compromised. The examiner is testing your knowledge of the specific standards.
Why B and C are wrong: There is no clear conflict of interest described (the manager isn't benefiting personally), and the issue isn't about disclosing confidential information but rather about failing to act on a known deficiency.

Question 2

In a "three lines of defense" model for risk governance, which of the following functions is correctly placed?

A. The sales team is part of the second line of defense.

B. The internal audit department is part of the third line of defense.

C. The risk management function is part of the first line of defense.

D. The board of directors is part of the second line of defense.

Answer: B) The internal audit department is part of the third line of defense. Explanation: The third line of defense provides independent assurance, and this role is filled by internal audit. They report functionally to the board's audit committee to maintain their independence from the first two lines.

Why A is a trap: The sales team is a business-operating unit. They "own" the risk they take on. Therefore, they are always in the first line of defense.
Why C is wrong: The risk management function is a core part of the second line of defense. They provide oversight, set frameworks, and challenge the first line. Placing them in the first line would eliminate their oversight role.
Why D is wrong: The board of directors and senior management are above the three lines, providing overall direction and oversight for the entire framework.

Question 3

An insurance company begins offering a new flood insurance policy in a coastal area with no requirement for homeowners to provide an independent elevation survey. The company finds that a disproportionately high number of applicants are from homes in low-lying, high-risk zones. This is a classic example of:

A. Moral Hazard

B. Adverse Selection

C. Systemic Risk

D. Agency Problem

Answer: B) Adverse Selection Explanation: Adverse selection occurs before a transaction takes place. It's a problem of hidden information, where one party has more information than the other. Here, the homeowners know they are at high risk for flooding, and they are the most likely to seek out the insurance policy. The insurer has an "adverse selection" of customers.

Exam trap: The most common wrong answer is A) Moral Hazard. The exam will frequently test your ability to distinguish between these two. Moral hazard happens after the transaction. It's a problem of hidden action. For example, if a homeowner, after buying flood insurance, decides not to buy sandbags before a storm because they know they are covered, that is moral hazard.

Here is a quick reference table to lock in the difference:

Feature	Adverse Selection	Moral Hazard
When it occurs	Before the transaction	After the transaction
Root cause	Hidden information	Hidden action
Example	High-risk drivers are most likely to buy auto insurance.	An insured driver drives more recklessly.

Question 4

A risk analyst is calculating the expected return for a stock. The stock has a beta of 1.2. The risk-free rate is 3%, and the expected return on the market portfolio is 8%. What is the stock's expected return according to the Capital Asset Pricing Model (CAPM)?

A. 9.6%

B. 9.0%

C. 12.6%

D. 6.0%

Answer: B) 9.0% Explanation: This is a direct application of the CAPM formula. You need to be able to execute this calculation quickly and accurately on exam day.

Formula: Expected Return = Risk-Free Rate + Beta × (Market Return − Risk-Free Rate)

Worked example:

Step 1: Calculate the Market Risk Premium

The market risk premium is the difference between the market return and the risk-free rate. Market Risk Premium = 8% − 3% = 5%

Step 2: Calculate the Stock's Risk Premium

This is the market risk premium multiplied by the stock's beta. Stock's Risk Premium = 1.2 × 5% = 6%

Step 3: Add the Risk-Free Rate

The final expected return is the stock's risk premium added to the risk-free rate. Expected Return = 3% + 6% = 9.0%

Exam trap: The most common mistake is to multiply the beta by the full market return instead of the market risk premium. This would lead to answer C (3% + 1.2 × 8% = 12.6%). The examiner includes this distractor specifically to catch candidates who are in a hurry.

Question 5

Which of the following statements best describes the role of a Chief Risk Officer (CRO) within an effective Enterprise Risk Management (ERM) framework?

A. The CRO is primarily responsible for setting the firm's risk appetite.

B. The CRO is responsible for owning and managing all key risks across the firm.

C. The CRO is responsible for designing and implementing the risk management framework and reporting on risk exposures.

D. The CRO is responsible for providing independent assurance on the effectiveness of risk controls.

Answer: C) The CRO is responsible for designing and implementing the risk management framework and reporting on risk exposures. Explanation: The CRO's role is to be the architect and overseer of the risk framework. They build the tools, processes, and reporting structures that allow the business to manage risk effectively. They do not "own" the risks themselves.

Why A is wrong: The board of directors, in consultation with senior management, is ultimately responsible for setting the firm's risk appetite. The CRO provides input and analysis, but the board sets the tone from the top.
Why B is wrong: The business units (the first line of defense) own and manage their risks. The CRO and the risk function (the second line) provide oversight and challenge.
Why D is wrong: This describes the role of internal audit (the third line of defense). Confusing the roles of the second and third lines is a frequent error.

Question 6

According to the Basel Committee on Banking Supervision's principles for effective risk data aggregation and risk reporting (BCBS 239), the principle of "Accuracy" requires that:

A. Risk data is available in a timely manner to meet reporting deadlines.

B. Risk data is aggregated on a largely automated basis to minimize manual errors.

C. Risk data is sufficiently comprehensive to cover all material risk areas.

D. Risk reports accurately reflect risk and are reconciled with source data.

Answer: D) Risk reports accurately reflect risk and are reconciled with source data. Explanation: The "Accuracy" principle specifically states that risk management reports should be accurate and precise, and this is achieved through reconciliation with data sources.

Why A is wrong: This describes the principle of "Timeliness."
Why B is wrong: This relates to the principle of "Adaptability" and the infrastructure needed to support aggregation, but it is not the definition of accuracy.
Why C is wrong: This describes the principle of "Comprehensiveness." The exam will often present definitions of other principles as distractors to test if you have done more than just memorize the list of titles.

Question 7

An investor holds a well-diversified portfolio. Which of the following risks is the investor most likely trying to mitigate through diversification?

A. Systemic Risk

B. Market Risk

C. Unsystematic Risk

D. Interest Rate Risk

Answer: C) Unsystematic Risk Explanation: Unsystematic risk, also known as specific risk or idiosyncratic risk, is the risk inherent to a specific company or industry (e.g., a factory strike, a failed clinical trial). Diversification across different stocks and industries can significantly reduce this type of risk.

Why A and B are wrong: Systemic risk and market risk are types of systematic risk, which affects the entire market (e.g., a recession, a major political event). This risk cannot be eliminated through diversification. Your portfolio beta measures your exposure to this market risk.
Why D is wrong: Interest rate risk is a type of systematic risk. While some strategies can hedge it, it cannot be diversified away simply by adding more stocks to a portfolio.

Question 8

The board of directors of a manufacturing company is concerned that its CEO is prioritizing short-term revenue growth to maximize his annual bonus, even if it means taking on excessive long-term operational risks. This situation is a primary example of:

A. A principal-agent problem

B. A conflict of interest

C. A violation of the GARP Code of Conduct

D. All of the above

Answer: D) All of the above Explanation: This scenario neatly ties together several key concepts from the curriculum.

It is a principal-agent problem because the agent (the CEO) has incentives (the bonus) that are not perfectly aligned with the long-term interests of the principals (the shareholders, represented by the board).
It is a conflict of interest because the CEO's personal financial interests are in conflict with his duty to the company and its shareholders.
It is a potential violation of the GARP Code of Conduct (specifically, the standards of Professionalism and Conflicts of Interest) if the CEO is an FRM charterholder. The examiner wants you to see the interconnectedness of these ideas.

Question 9

Which of the following best defines a firm's "risk appetite"?

A. The specific metrics and thresholds used to monitor risk-taking activities, such as VaR limits.

B. The maximum amount of loss the firm is willing to incur from a specific risk before action is taken.

C. The aggregate amount and types of risk the firm is willing to accept in pursuit of its strategic objectives.

D. The firm's total available capital to absorb unexpected losses.

Answer: C) The aggregate amount and types of risk the firm is willing to accept in pursuit of its strategic objectives. Explanation: Risk appetite is a high-level statement from the board that guides the firm's overall approach to risk-taking. It's about the what and how much risk to take to achieve business goals.

Why A and B are wrong: These describe "risk tolerance" or "risk limits." These are the specific, granular metrics used to implement the broader risk appetite. A common exam question will ask you to distinguish between the high-level appetite and the lower-level tolerance.
Why D is wrong: This describes risk capacity, which is the maximum amount of risk the firm can take. Risk appetite should always be less than or equal to risk capacity.

Question 10

Which of the following is considered a primary benefit of implementing a successful Enterprise Risk Management (ERM) program?

A. It guarantees the achievement of all strategic objectives.

B. It eliminates all downside risks faced by the organization.

C. It allows for a more informed view of the risk-reward tradeoff in strategic decision-making.

D. It reduces the cost of regulatory compliance to zero.

Answer: C) It allows for a more informed view of the risk-reward tradeoff in strategic decision-making. Explanation: ERM is not about eliminating risk. It's about understanding, managing, and making intelligent decisions in the face of risk. A key benefit is that it provides a holistic view of the organization's risk profile, enabling the board and management to make better strategic choices.

Why A, B, and D are wrong: These are all absolute statements that are too strong. ERM cannot guarantee success, eliminate all risks, or reduce compliance costs to zero. Be very skeptical of answers with words like "guarantees," "eliminates," or "all" on the FRM exam.

✨ Free Interactive Calculator

Calculate Your FRM Part 1 Score & Study Hours by Domain

Adjust your practice scores across official FRM Part 1 blueprint domains to predict your pass probability and generate a domain-weighted study schedule.

Open FRM Part 1 Score Calculator →

What Does Your Score Mean (And What's Next)?

Count up your correct answers. How did you do?

8-10 Correct: Excellent. You have a strong grasp of the foundational concepts and, more importantly, the ability to apply them in exam-like scenarios. You're good at spotting the traps. Your next step should be to use an adaptive question bank, like VoraPrep's, to target any minor weak spots and increase your speed.
5-7 Correct: You're on the right track, but there are some gaps. You likely understood the question but fell for one of the common distractors, especially on topics like adverse selection vs. moral hazard or the roles of the CRO. Re-read the explanations for the questions you missed. The key is to understand the logic of the trap. A good next step is to review our FRM Foundations of Risk Management Cheat Sheet (2026) to solidify these core distinctions.
0-4 Correct: This score is a wake-up call. It suggests you may have skimmed the material or focused only on memorizing definitions without understanding their application. Don't panic. This is the easiest section to fix. Your job now is to go back to the source material and build your understanding from the ground up, focusing on the "why" behind each concept.

Regardless of your score, the next step is the same.

Practice more questions.

Exposure to hundreds of questions is what separates candidates who pass from those who fail. You need to see the material framed in every way the examiners can imagine. To understand the exam's difficulty, it's worth reading our guide on FRM Pass Rates (2026 Historical Benchmark Data).

How Can You Master the FRM Foundations Section?

A 10-question quiz is a great start, but it's not enough to get you exam-ready. The full FRM Part I exam has 100 questions, and you need a deep arsenal of practice to feel confident.

This is where a complete course like VoraPrep makes the difference. Many candidates get stuck watching hours of passive video lectures from expensive, outdated providers, which leads to fatigue and poor retention. VoraPrep is built differently for busy professionals who need to study efficiently.

Our complete 6-pillar FRM course includes:

Textbook-Grade Lessons: Interactive lessons with visual explanations that help you learn concepts faster than any video.
1,800+ Adaptive Practice Questions: Our adaptive engine learns your weak areas and serves you more questions on topics you struggle with, like the nuances of the GARP Code of Conduct or BCBS 239.
1:1 Exam Simulators: Take full, timed mock exams that replicate the real test-day experience down to the user interface.
Spaced-Repetition Flashcards: Master key terms and formulas with a system scientifically proven to improve memory retention.
Personalized Study Plan: Get a dynamic calendar that tells you exactly what to study each day to be ready by your exam date.
Vory, Your 24/7 Personal Tutor: Stuck on a question at 2 AM? Ask Vory for a step-by-step explanation without waiting for an email reply.

You can compare our modern, complete course structure against overpriced legacy bundles in our guide to the Best FRM Part 1 Review Courses for 2026.

⚡ Test Yourself: 1 Real FRM Question · Instant Reveal

FRM Part I Domain 4: Valuation and Risk Models (Value at Risk)

A portfolio has a 1-day 99% Value at Risk (VaR) of $2.5 million assuming normally distributed returns with zero mean and constant volatility. Assuming independent and identically distributed (i.i.d.) daily returns, what is the portfolio's 10-day 99% VaR under the square-root-of-time rule?

Best FRM Part 1 Review Courses (2026): An Honest, Objective Comparison, Compare the best FRM Part 1 review courses for 2026: VoraPrep.
FRM Foundations of Risk Management Cheat Sheet (2026): Key Formulas, Rules, and Mnemonics, Master FRM Part I Foundations of Risk Management for 2026.
Free FRM Practice Questions & Question Bank, Stop grinding useless FRM practice questions.
How to Pass the FRM Exam While Working Full Time, Pass the FRM Part I exam while working full-time with this proven 6-week schedule.
FRM Pass Rates (2026 Historical Benchmark Data), The FRM Part I pass rate hovers near 45%.

Official resources and references

GARP FRM Program: The official source for all information regarding the FRM designation.
GARP Study Materials: Official curriculum and study guides from GARP.
Basel Committee on Banking Supervision (BCBS): Primary source for documents like BCBS 239.

Frequently asked questions

How do I pass FRM Foundations of Risk Management?

To pass, you must go beyond memorization and learn to apply concepts to scenarios. Focus on understanding the distinctions between similar terms (e.g., risk appetite vs. tolerance) and the practical application of governance frameworks like the three lines of defense. Consistent practice with exam-style questions is crucial.

Is FRM Part 1 all calculations?

No, it is not. While Quantitative Analysis (Book 2) is heavy on calculations, Foundations of Risk Management (Book 1) is largely conceptual. Financial Markets and Products (Book 3) and Valuation and Risk Models (Book 4) contain a mix of both. You must be prepared for both qualitative and quantitative questions.

How many practice questions should I do for FRM Part 1?

A good target is to complete at least 1,500-2,000 practice questions across all four domains. For the Foundations of Risk Management section, aim for at least 300-400 questions to ensure you have seen the concepts tested in a wide variety of ways.

Where can I find more free FRM MCQ practice?

You can find more free sample questions on the official VoraPrep page for the FRM exam. A free 14-day trial will also give you access to a portion of our full adaptive question bank and lessons.

Ready to Pass Your FRM Exam?

Stop passively reading and start actively learning. With VoraPrep, you get a complete, interactive course that adapts to your needs. Our adaptive question bank, detailed explanations, and 24/7 tutor Vory are everything you need to walk into the exam with confidence.

Visit voraprep.com to get started.

Start Your Free 14-Day Trial at voraprep.com →

About the Author: Rob Pfleghardt

Rob Pfleghardt is the founder of VoraPrep, a comprehensive exam prep platform across 30 professional licensure and certification exams in Accounting & Tax (CPA, EA, CMA, CFE, CPP, CGFM), Securities & Wealth (CFP, SIE, FINRA Series, CFA, FRM), Audit & Cyber (CISA, CIA, CRISC, CISM, CISSP, CCSP, Security+, CIPP/US), HR Leadership (SHRM-CP, PHR), and Federal Regulatory (CBLE). A Virginia Tech graduate in Accounting and Finance, Rob began his career at Price Waterhouse, spending a decade in audit and IT consulting. After holding a CPA license for 37 years (1987–2024) and scaling his own enterprise IT consultancy serving commercial and federal clients, Rob launched VoraPrep to build adaptive training technology and blueprint-aligned curriculum for working professionals.

Connect with Rob on LinkedIn → 🎧 Listen to Free FRM Part 1 Audio Lessons & Transcripts →

Free Diagnostic Assessment

Find your exact FRM Part 1 weak spots in 10 minutes.

Most candidates fail because they study blindly. Take our free 10-question diagnostic to identify your weakest blueprint topics and receive a custom 12-week study plan PDF generated instantly.

Start Free Diagnostic Assessment → Explore Course Curriculum 📄 1-Page Cheat Sheet (PDF)

Keep reading

FRM Part 1 Exam