Do the exams really test the "universal" risk concepts or really ask for specific author's version of risk concepts? For example, should we just understand the general risk category instead of remembering how Jorion defining legal risk as financial risk as most likely a financial risk (instead of reputational, strategic and technology)?