Actuarial Examinations · CFE 101

SOA Enterprise Risk Management Examination Practice Test

Enterprise risk management examines how an organization identifies, assesses, and responds to risks across business activities. Practice topics include risk capacity, risk appetite and limits, legal and regulatory uncertainty, model assumptions, insurance, and decisions that balance potential returns against exposures. These concepts connect risk analysis to organization-wide choices rather than treating each risk in isolation.

Exam overview

Exam providerSociety of Actuaries
Exam codeCFE 101
CategoryActuarial Examinations

About the SOA Enterprise Risk Management Examination Exam

Enterprise-level analysis considers how risks interact across units and how potential losses affect the organization’s ability to meet its objectives. Relevant skills include interpreting loss measures such as a one-year loss threshold at a stated probability, distinguishing risk limits from early-warning indicators, and assessing the implications of uncertainty in models and regulatory developments. Risk decisions also require weighing upside and exposure: a profitable activity may still exceed loss capacity, while a new service may create both revenue and compliance risk. For defined-benefit plans, asset declines alongside rising obligation values signal worsening funded status. Practitioners use these analyses to prioritize monitoring, escalate emerging exposures, evaluate risk transfer through insurance, and communicate assumptions and uncertainty to decision-makers.

Sample Practice Questions

Review a selection from this exam's published US Practice Tests practice bank.

Question 1

An organization is deciding whether to continue a business activity after a new risk assessment. The activity is profitable, but its risk could exceed the organization’s capacity to absorb losses. Which consideration is most important for an enterprise-level decision?

  1. AWhether the activity’s risk-return profile is consistent with organizational objectives and resources
  2. BWhether the activity has the highest revenue among all units
  3. CWhether the risk can be excluded from management reports
  4. DWhether the activity has operated without a loss in the last quarter
Show answerCorrect answer: A

Enterprise-level decisions consider both the potential contribution to objectives and whether the organization has the resources and willingness to bear the associated risk. Revenue alone or a short loss-free period does not establish that the activity is appropriate.

Question 2

A company sells products in a jurisdiction where a court may interpret a contract term differently from the company’s expectations. Which risk category most directly captures the possibility of an adverse outcome from that interpretation?

  1. ALegal risk
  2. BMarket risk
  3. CDemographic risk
  4. DBasis risk
Show answerCorrect answer: A

Legal risk includes adverse consequences arising from laws, regulations, contracts, or their interpretation and enforceability. The uncertainty described concerns how a contract term may be interpreted.

Question 3

A company’s risk committee receives a report on a new regulation that may affect several business units. The effects are uncertain, and the regulation is still being interpreted. What is the most useful immediate response?

  1. AAssign responsibility to monitor developments and evaluate potential impacts across affected units
  2. BAssume there is no exposure until a penalty is imposed
  3. CRecord the issue once and prohibit updates until the next annual review
  4. DAsk each unit to make unrelated assumptions without coordinating
Show answerCorrect answer: A

Assigning monitoring responsibility and evaluating impacts across affected units supports timely, coordinated responses to evolving regulatory uncertainty. Waiting for a penalty or using uncoordinated assumptions can leave the organization unprepared.

Question 4

A company’s risk model uses a simplifying assumption that makes calculations tractable. The assumption is not expected to hold exactly in practice. What is the best way to treat this assumption in decision-making?

  1. ADocument it, assess its materiality, and examine how results change under plausible alternatives.
  2. BIgnore it because simplifying assumptions cannot affect decisions.
  3. CReplace every assumption with a worst-case value, regardless of relevance.
  4. DTreat model output as exact once the calculation has been independently reproduced.
Show answerCorrect answer: A

Models simplify reality, so important assumptions should be transparent and their effects assessed. Sensitivity analysis or alternative scenarios can show whether a decision is robust to plausible changes in assumptions.

Question 5

A risk team estimates that a portfolio may lose $12 million or more over the next year with probability 1%. What does this statement most directly represent?

  1. AA point estimate of the portfolio's expected annual loss
  2. BA tail-loss probability statement at a specified loss threshold
  3. CA guarantee that losses will not exceed $12 million
  4. DThe portfolio's average loss conditional on a loss occurring
Show answerCorrect answer: B

The statement specifies a loss threshold and the probability of reaching or exceeding it, describing a tail probability. It does not give the average loss, a guarantee, or necessarily a conditional tail expectation.

Question 6

A company considers launching a new service that may create both additional revenue and new regulatory exposure. How should an enterprise risk perspective treat this decision?

  1. AAssess the potential benefits and risks together in light of objectives and available controls.
  2. BReject the service because any new exposure is unacceptable.
  3. CEvaluate only the expected revenue because the risk is uncertain.
  4. DTreat regulatory exposure as irrelevant until a penalty occurs.
Show answerCorrect answer: A

Enterprise risk management considers uncertainty in relation to objectives, including both potential upside and downside. A balanced assessment can inform whether the opportunity is suitable and what controls or monitoring are needed.

Question 7

A firm has a defined risk limit. A risk indicator is approaching that limit, but has not yet breached it. What is the main purpose of an early-warning threshold set below the limit?

  1. ATo signal that management may need to investigate or act before the formal limit is breached.
  2. BTo redefine the firm’s risk capacity automatically.
  3. CTo prove that losses will occur once the threshold is reached.
  4. DTo replace the need for escalation procedures.
Show answerCorrect answer: A

An early-warning threshold provides time to understand a developing exposure and take action before reaching a formal limit. It is an indicator for attention, not a guarantee of loss, an automatic change to capacity, or a substitute for escalation arrangements.

How to use this practice test

The free practice session draws up to 20 random questions from the published bank of 50. Use the scenarios to test how you classify exposures, interpret risk measures, and connect analysis to enterprise decisions. Results appear after the session, helping you identify concepts to revisit.

Preparation tips

  • For each scenario, separate risk appetite, risk capacity, formal limits, and early-warning thresholds; explain what action each implies.
  • Practice interpreting probability statements about losses, including the time horizon, loss amount, and probability level.
  • Compare risk responses such as retaining, reducing, avoiding, and transferring exposure, and identify what insurance does and does not cover.
  • When evaluating a model, state how its simplifying assumptions could affect estimates and decisions if actual conditions differ.
  • For pension-related scenarios, track asset values and obligation values separately before assessing the effect on funded status.
Official sourceOfficial exam page ↗