CompTIA PK0-005 CompTIA Project+ Certification (2025) Exam Practice Test

The number of items in the backlog can be determined by looking at the “Commitment” column for each sprint in the provided chart. For Sprint 5, there is a commitment of completing 23 items, which is the highest among all sprints. This indicates that there are at least 23 items in the backlog to be worked on. This is consistent with the concept of agile project management, which allows for changes and additions to the project scope based on customer feedback and changing requirements. References = CompTIA Project+ PK0-005 Certification Study Guide, Chapter 14: Agile Project Management, page 321. CompTIA Project+ Cert Guide: Exam PK0-005, Chapter 9: Agile Project Management, page 287

A project manager did not release the resources. A project manager not releasing the resources could most likely be the cause of this issue where several employees’ allocations from the past month appear to be 200% even though they are only assigned to a particular project. Releasing resources is a process of freeing up or reallocating any human or material resources that were used for a project after its completion or closure. Releasing resources can help to update the resource availability and utilization records and avoid any conflicts or errors in resource allocation or reporting.

Language barriers can significantly impact communication within a project team, especially when team members lack a common understanding of technical terminology and jargon. This can lead to misunderstandings, errors, and inefficiencies. Effective communication is critical for project success, and addressing language barriers is essential for ensuring that all team members are aligned and informed.

According to the CompTIA Project+ PK0-005 exam objectives, under Domain 1.8: Compare and contrast communication management concepts, recognizing and mitigating communication challenges, including language barriers, is vital for effective project management.

The project manager should hold sessions to understand user challenges and track system usage and report user activity. These steps will help the project manager to identify the root causes of the adoption issues and monitor the progress of the system utilization. They will also help to communicate with the sales organization and provide feedback and support12

If the current team lacks the necessary skills for quality assurance, the project manager should reassess the resource pool to identify whether existing team members can be trained or if additional resources with the required expertise are needed. This assessment helps in making informed decisions about resource allocation, training needs, or recruitment, ensuring that the project maintains its quality standards.

Per the CompTIA Project+ PK0-005 exam objectives, under Domain 2.3: Given a scenario, perform resource management activities, evaluating and managing resources is crucial for addressing skill gaps and maintaining project quality.

IaaS (Infrastructure as a Service) provides virtualized computing resources, such as storage and servers, necessary for hosting a development environment. According to CompTIA Project+, IaaS is ideal for environments requiring infrastructure control without hardware management.

Scope creep is most likely happening when a key stakeholder recommends to a senior developer that a new feature be added that is not part of the current requirement documentation. Scope creep is a term that refers to the uncontrolled expansion or change of a project’s scope beyond its original boundaries or objectives. Scope creep can happen due to various reasons, such as changing customer demands, unclear or incomplete requirements, poor communication, lack of change control, or stakeholder interference. Scope creep can have negative impacts on a project, such as delays, cost overruns, quality issues, or reduced customer satisfaction12

Identifying business needs and product descriptions is a crucial first step in project initiation, as it defines the project's purpose and scope. This step is in line with CompTIA Project+ practices for understanding and documenting project requirements.

Home address and date of birth must be protected as personally identifiable information (PII). PII is any information that can be used to identify, contact, or locate an individual person, either alone or in combination with other sources. PII can include information such as name, email address, phone number, social security number, passport number, driver’s license number, bank account number, credit card number, biometric data, medical records, etc. PII must be protected from unauthorized access, use, disclosure, modification, or destruction to prevent identity theft, fraud, or other malicious activities that may harm the individual’s privacy or security.

A decision tree helps in evaluating various choices and their potential outcomes, making it suitable for comparing vendors based on costs and risks. This aligns with CompTIA Project+ methodologies for decision-making tools and analysis.

Smoothing is a conflict resolution technique that involves minimizing or ignoring the differences between the parties and focusing on the common interests or goals1. It is often used when the conflict is not very important or when there is a need to maintain harmony and relationships2. By using smoothing, the project manager can reduce the tension and stress caused by the disagreement and encourage the team members to cooperate and work together. Smoothing is different from compromising, which involves finding a middle ground or a trade-off that partially satisfies both parties; forcing, which involves imposing one’s own solution or decision on the other party; and collaborating, which involves finding a win-win solution that fully satisfies both parties3. References = CompTIA Project+ PK0-005 Certification Study Guide, Chapter 10: Executing Projects Part 1, page 297; A Quick Guide to Resource Smoothing: Definition, Benefits, and Process, Conflict Resolution Techniques section; Resource Smoothing: How To Use In Project Management | Hive, Smoothing section.

A milestone chart is a tool that shows the key events or deliverables of a project along a timeline12. A milestone chart is useful for tracking the progress of a project that has technical tasks and requires a SME’s knowledge, because it can provide a high-level overview of the project status, without getting into the details of each task or activity34. A milestone chart can help the PM and the project lead communicate the project achievements, challenges, and expectations to the stakeholders, and also identify any potential risks or delays that may affect the project completion56. A milestone chart is better than the other options because:

A Gantt chart is a tool that shows the tasks, dependencies, durations, and resources of a project along a timeline7. A Gantt chart is more detailed and complex than a milestone chart, and may not be suitable for providing high-level updates to the stakeholders8.

A project organization chart is a tool that shows the roles, responsibilities, and reporting relationships of the project team members and other stakeholders9. A project organization chart is not a tool for tracking project data, but rather for defining the project structure and authority10.

A Program Evaluation Review Technique (PERT) chart is a tool that shows the tasks, dependencies, and critical path of a project along a network diagram. A PERT chart is more focused on the sequence and timing of the project tasks, and may not capture the key milestones or deliverables of the project.

References = CompTIA Project+ Certification Study Guide, CompTIA Project+ Certification Exam Objectives, What is a Milestone Chart?1, How to Create a Milestone Chart in Excel in 3 Steps2, Milestone Chart: The Easiest Way to Track Project Milestones3, How to Use Milestones in Project Management4, What is a Gantt Chart?5, Gantt Chart vs Milestone Chart: What’s the Difference?6, What is a Project Organization Chart?7, How to Create a Project Organization Chart8, What is a PERT Chart?9, PERT Chart vs Gantt Chart: What’s the Difference?10

A project schedule is an artifact that shows the sequence, duration, and dependencies of the project activities, as well as the resources assigned to each activity. A project schedule helps the project team understand what needs to be done, who needs to complete the tasks, and when the tasks need to be completed. A project schedule can also help monitor and control the project progress and performance1.

A Request for Proposal (RFP) is a document issued by an organization to solicit proposals from potential vendors for a specific solution or service. It outlines the organization's requirements and criteria for evaluation, allowing vendors to propose how they would meet those needs. An RFP is appropriate when the company seeks detailed proposals for a solution to its specific needs.

According to the CompTIA Project+ PK0-005 exam objectives, under Domain 3.4: Explain important project procurement and vendor selection concepts, understanding the use of RFPs is essential for effective procurement management.

A contingency plan is a risk mitigation strategy that involves preparing alternative courses of action in case the original plan fails or encounters unexpected problems. A contingency plan can help reduce the impact of negative risks and ensure the project continuity and success. In this case, the project manager should develop a contingency plan to mitigate the risk of hurricanes affecting the implementation of the new radar system. For example, the contingency plan could include backup resources, alternative locations, emergency procedures, and communication channels in case of a hurricane. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 7: Risk Management1; CompTIA Project+ Certification Study Guide, 3rd Edition, Chapter 7: Risk Management

Forcing is a conflict resolution technique where the project manager makes a decision unilaterally, without seeking consensus. According to CompTIA Project+, forcing may be used when time is critical, and decisions need to be made promptly.

According to PRINCE2, a project management methodology, the process of initiating a project includes creating the project plan, which is a high-level plan that covers the whole project scope, schedule, budget, quality, and risks. The project plan is based on the project brief, the business case, and the product descriptions. The project plan is used to obtain the authorization from the project board to initiate and execute the project. The project plan is also refined and updated throughout the project life cycle as more information becomes available.

The other processes are not directly involved in creating the project plan. Starting up a project is a pre-project process that ensures the project is viable and worthwhile, and produces the project brief and the initiation stage plan. Managing product delivery is a process that coordinates the delivery of products from the team managers to the project manager, and ensures that the work conforms to the quality criteria and the project plan. Directing a project is a process that enables the project board to oversee and control the project, and make key decisions and approvals. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 5: Project Scope Management1; CompTIA Project+ Certification Study Guide, 3rd Edition, Chapter 5: Project Scope Management2; PRINCE2 Processes - 7 Processes Of PRINCE2 Explained3; Initiating a Project Process – This process is the procedure which defines the product quality, Project Product, project timeline, costs, the commitment of resources, risk analysis, and assembles the Project Initiation Documentation (PID)4

Before releasing an enhancement into production, conducting a risk assessment is crucial to identify potential issues that could affect system availability. This proactive approach helps in planning mitigation strategies to prevent downtime and ensure a smooth deployment.

According to the CompTIA Project+ PK0-005 exam objectives, under Domain 1.4: Given a scenario, perform risk management activities, risk assessment is a key activity to anticipate and address potential problems that could impact project success.

A Sprint Review involves reviewing the completed backlog items and presenting the work to stakeholders. This aligns with CompTIA Project+ agile practices, where a Sprint Review focuses on completed tasks and feedback.

The project sponsor is the person who provides the authority, funding, and support for the project. The project sponsor can also help to influence and engage the key stakeholders who are essential for the success of the project. If several stakeholders have declined the invitation for the kickoff meeting, which is an important event to establish the vision, scope, and expectations of the project, the project manager should escalate this issue to the project sponsor and seek their assistance to ensure the participation of the stakeholders1, p. 47

Stress testing is a type of performance testing that evaluates how a system behaves under extreme load conditions, such as high volume of data, concurrent users, or transactions12. Stress testing can help to identify the system’s breaking point, bottlenecks, and resource limitations, and to ensure that the system can recover from failures and maintain its functionality34. In this case, the team performed stress testing to validate that system performance will not be impacted by migrating all data to a single system following the merger of two companies. This implies that the team simulated a high amount of data transfer and processing, and measured the system’s response time, throughput, availability, and reliability under such load. Stress testing is better than the other options because:

Regression testing is a type of functional testing that verifies that a system’s existing features and functionality are not affected by a change or an update56. Regression testing does not focus on system performance or load conditions, but rather on system correctness and quality.

Smoke testing is a type of functional testing that checks the basic functionality and stability of a system before performing more detailed and comprehensive testing78. Smoke testing does not measure system performance or load conditions, but rather ensures that the system is ready for further testing.

Automation testing is a technique of using software tools or scripts to execute test cases and compare the actual results with the expected results910. Automation testing is not a specific type of testing, but rather a way of performing testing. Automation testing can be applied to various types of testing, including stress testing, regression testing, and smoke testing.

References = CompTIA Project+ Certification Study Guide, CompTIA Project+ Certification Exam Objectives, What is Stress Testing?1, Stress Testing: A Complete Guide2, What is Regression Testing?3, Regression Testing: A Complete Guide4, What is Smoke Testing?5, Smoke Testing: A Complete Guide6, What is Automation Testing?7, Automation Testing: A Complete Guide8

When implementing an IT infrastructure change that takes risks into consideration, the project manager should develop a rollback plan. A rollback plan is a contingency plan that outlines the steps that need to be taken in case the change does not work as expected. It includes a plan to roll back the changes and restore the system to its previous state. References: CompTIA Project+ Study Guide Section 3.3.

The project manager should develop a rollback plan when implementing an IT infrastructure change that takes risks into consideration. A rollback plan is a contingency plan that describes how to revert back to the previous state of the system in case of a failure or disruption during the change implementation. A rollback plan can help to minimize the impact of the change on the system performance and availability and ensure business continuity and data integrity.

During the closing phase, a project manager should conduct lessons learned sessions, release resources, and remove access. These actions align with CompTIA Project+ standards for project closure, focusing on finalizing project deliverables, releasing resources, and documenting insights.

This answer is based on the understanding that outsourcing is a form of procurement, which is one of the knowledge areas in project management. Procurement involves acquiring goods and services from external sources to support the project objectives. According to the CompTIA Project+ Study Guide1, procurement activities occur mainly in the planning phase of the project, where the project manager identifies the project needs, defines the scope of work, evaluates the potential vendors, and prepares the procurement documents. The other options are not correct because:

Initiating is the phase where the project manager defines the project purpose, objectives, and deliverables, and obtains the project charter and stakeholder approval. Initiating does not involve procurement activities, although it may involve some preliminary research on the feasibility and availability of external resources.

Controlling is the phase where the project manager monitors and measures the project performance, compares it with the baseline, and implements corrective actions if needed. Controlling does involve some procurement activities, such as reviewing the vendor deliverables, managing the changes, and resolving the issues, but these are not the main tasks of procurement.

Executing is the phase where the project manager leads and directs the project team and other resources to complete the project work according to the plan. Executing does involve some procurement activities, such as selecting the vendor, signing the contract, and managing the relationship, but these are not the main tasks of procurement. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 8: Planning Projects, Part 4 (Procurement and Communication), pages 243-260; CompTIA Project+ Certification Exam Objectives, Domain 2: Project Planning, Objective 2.5: Given a scenario, plan procurement for a project.

A finish-to-start relationship is a type of logical dependency between two tasks, in which the first task must be completed before the second task can start. In this scenario, the document containing information about how the new system will interact with other systems within the organization is a prerequisite for the configuration of the system in development. Therefore, the document writing task must finish before the configuration task can start, which is a finish-to-start relationship. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 6: Schedule Management1; CompTIA Project+ Certification Study Guide, 3rd Edition, Chapter 6: Schedule Management2

Personally identifiable information (PII) is any data that can be used to identify, contact, or locate a specific individual, either alone or combined with other sources. PII includes information such as name, address, phone number, email address, social security number, etc. Patient names are examples of PII, and therefore the data that contains them should be masked or anonymized to protect the privacy and security of the patients. Confidential information, protected health information, and security clearance are not types of data, but rather categories or levels of data sensitivity that may require different degrees of protection or access control. References = CompTIA Project+ Study Guide, Chapter 3: Project Planning, Section 3.4: Data Privacy and Security, p. 121; Patient Data: Types, Uses & Hospital Patient Databases; What is Patient Data and Why Is It Important?; Chapter 1 - Registrar Playbook

Time and materials contracts are flexible and beneficial when the project scope has many unknowns. They allow costs to be adjusted based on actual time and resources used, which is consistent with CompTIA Project+ recommendations for projects with uncertain requirements.

The most important responsibility of an asset owner when introducing a new information asset is information classification. This process involves determining the level of sensitivity and the appropriate handling of the asset. Classification helps in applying the right security controls and access permissions, ensuring that the asset is protected according to its value and sensitivity.

References = CompTIA Project+ Certification Study Guide (PK0-005)

This is the correct order of the stages of team development according to Tuckman’s model123. The forming stage is where team members first meet and get acquainted. The storming stage is where team members experience conflicts and disagreements. The norming stage is where team members resolve their differences and establish norms and rules. The performing stage is where team members work together effectively and efficiently. The adjourning stage is where team members complete the project and celebrate their achievements. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 6: Project Team Management, p. 197; The 5 Stages of Team Development (Including Examples) | Upwork; The 5 Stages of Team Development - Teamwork; Using the Stages of Team Development | MIT Human Resources

A proposal is a detailed document submitted by vendors outlining how they will meet project requirements. It helps in assessing vendor solutions and suitability, consistent with CompTIA Project+ procurement and vendor management practices.

According to What is Logging as a Service (LaaS)? - LogicMonitor, LaaS is a cloud-based log management platform that simplifies the management of infrastructure and application logs. LaaS offers a central location where you can store, analyze and visualize the content of all your logs. It works by ingesting logs from different sources, such as web servers, IoT devices, database servers and more. It then provides actionable output by organizing and restructuring the information within these logs. Therefore, storage and networking are primary features provided by a standard LaaS solution, as they enable the collection and transmission of logs from various sources to a centralized platform. Encryption, user interface, access, and database are not primary features of LaaS, as they are either optional or secondary aspects of the service.

The project manager should inform the project sponsor about the issue and seek their guidance and support. The project sponsor is the person who provides the resources and authority for the project, and who can help resolve any conflicts or problems that may arise. The project manager should not withdraw the offer, ignore the lawsuit, or use a third-party company without consulting the project sponsor first, as these actions may have legal, ethical, or financial implications for the project and the organization12.

Avoiding is a conflict resolution technique that involves postponing or withdrawing from a conflict situation. The project manager is using this technique by taking a break and continuing the meeting on another day, hoping that the conflict will resolve itself or become less important over time. This technique may be appropriate when the conflict is trivial, the potential damage is greater than the benefits, or more information is needed before making a decision. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 10: Executing and Closing Projects, page 287; [CompTIA Project+ Certification Exam Objectives], Domain 3: Project Execution, Objective 3.2: Given a scenario, apply appropriate conflict resolution techniques.

The project manager should use a change control log to document the effects of the hurricane delay on the project. A change control log is a tool that records and tracks any changes that occur during the project lifecycle. It usually includes information such as change ID, description, impact, status, approval, and resolution. A change control log can help to monitor and manage the changes that affect the project scope, schedule, cost, quality, or resources and ensure that they are aligned with the project objectives and stakeholder expectations.

Infrastructure as a service (IaaS) is a cloud model that provides on-demand access to cloud-hosted physical and virtual servers, storage, and networking resources. IaaS customers can provision, configure, and use these resources as they would use on-premises hardware, but without the hassle of purchasing, installing, managing, and maintaining them. The cloud service provider owns, manages, and maintains the hardware and computing resources in its own data centers, and charges the customers based on their usage. IaaS is suitable for customers who need flexibility, scalability, and control over their IT infrastructure, and who want to avoid the high costs and complexity of owning and operating their own hardware. The other options are not correct because:

Software as a service (SaaS) is a cloud model that provides on-demand access to ready-to-use, cloud-hosted application software. SaaS customers do not need to install, update, or maintain the software, as the cloud service provider handles all the technical aspects. SaaS is suitable for customers who need to access common applications, such as email, office productivity, or customer relationship management, without worrying about the underlying infrastructure or platform.

Data as a service (DaaS) is a cloud model that provides on-demand access to cloud-hosted data sources, such as databases, data warehouses, or data lakes. DaaS customers can query, analyze, and visualize the data, as well as integrate it with other applications or services, using APIs or web interfaces. DaaS is suitable for customers who need to leverage data from various sources, such as social media, IoT devices, or third-party providers, without having to store, manage, or process the data themselves.

Platform as a service (PaaS) is a cloud model that provides on-demand access to a complete, ready-to-use, cloud-hosted platform for developing, running, maintaining, and managing applications. PaaS customers can use the platform’s tools, frameworks, libraries, and services to create and deploy applications, without having to worry about the underlying infrastructure or software. PaaS is suitable for customers who need to develop, test, and deploy applications quickly and efficiently, and who want to take advantage of the cloud’s scalability, reliability, and security features. References = IaaS vs. PaaS vs. SaaS; AWS Fundamentals: Understanding Compute, Storage, Database, Networking & Security; What are the different types of cloud computing?; What is Cloud Storage and How to Use It

If a project manager continues to receive project-related work after the project has been released into production, it suggests that the project closure phase was not completed properly. The project closure phase involves several activities, including ensuring that all project deliverables are accepted, documenting the lessons learned, releasing project resources, and formally closing the project. If these activities are not completed, the project can remain ‘open’ in a sense, leading to continued work and inquiries.

References = The answer is based on standard project management practices and the importance of the project closure phase as described in project management literature. For detailed information, please refer to the CompTIA Project+ Study Guide and other official CompTIA resources. Specific references to the closure phase can be found in the CompTIA Project+ PK0-005 Cert Guide1 and the CompTIA Project+ Certification Exam Objectives2.

To keep the client informed about project needs and budget compliance, the project manager should send a weekly status report by email. This report provides a structured and documented update on project progress, budget status, and any actions required from the client.

According to the CompTIA Project+ PK0-005 exam objectives, under Domain 1.8: Compare and contrast communication management concepts, regular status reporting is a key component of effective communication management. It ensures that stakeholders are kept informed and engaged throughout the project lifecycle.

The statement of work (SOW) would be the next document that a project manager should update once the need to procure goods and/or services is identified. A SOW is a document that defines the scope, deliverables, schedule, and terms and conditions of a project or contract. A SOW typically includes information such as purpose, scope of work, location of work, period of performance, deliverables schedule, applicable standards, acceptance criteria, special requirements, and payment schedule. A SOW can help to establish a common understanding and agreement between the client and the service provider on what needs to be done and how it will be done.

Zero-based budgeting involves starting from a “zero base” and justifying each expense without reference to previous budgets. This budgeting method promotes financial discipline and aligns with CompTIA Project+ guidelines on budget control and justification.

For teams distributed across different regions, effective collaboration tools are essential. A wiki knowledge base allows team members to access and contribute to shared information asynchronously, while real-time, multi-authoring editing software enables simultaneous collaboration on documents.

The CompTIA Project+ PK0-005 exam objectives, under Domain 3.1: Given a scenario, use the appropriate tools throughout the project life cycle, highlight the importance of collaboration tools:

"Collaboration tools: Real-time, multi-authoring editing software; Wiki knowledge base."

CompTIA Project+ PK0-005 Exam Objectives

These tools facilitate seamless collaboration, knowledge sharing, and document management among geographically dispersed team members.

The project manager should address the issue of damage to the monitor first because it has the highest percentage (40%) among the issues observed. This means that it is the most frequent and severe issue that affects the quality and functionality of the refurbished desktops. Addressing this issue first can help to improve customer satisfaction, reduce rework, and avoid waste1

Submit a change request to the change control board. The project manager should submit a change request to the change control board (CCB) if they realize that the project will not be completed on time due to resource constraints. A change request is a formal proposal to modify any aspect of the project, such as scope, schedule, cost, quality, or resources. A change request must be submitted to the CCB, which is a group of stakeholders who are authorized to review and approve changes. Submitting a change request can help to document the impact of the resource constraints on the project and seek approval for any corrective actions or preventive actions12

An intellectual property (IP) breach occurs when proprietary information, such as software, designs, or trade secrets, is used without authorization. In this scenario, a service provider reusing developed software for another customer constitutes an IP breach, as the software is typically owned by the company that commissioned its development.

The CompTIA Project+ PK0-005 exam objectives, under Domain 3.4: Explain the importance of project compliance, emphasize the significance of protecting intellectual property and ensuring that all project outputs are used in accordance with contractual agreements and legal standards.

Updating the issue log is the first step in documenting the problem and determining its impact on the project. This aligns with CompTIA Project+ guidelines, which emphasize the importance of tracking issues as they arise.

Confronting, also known as problem-solving or collaborating, is a method of conflict resolution that involves addressing the root cause of the conflict and finding a mutually beneficial solution that satisfies both parties. Confronting is the most effective method when the stakes are high and the relationship is important, as it can lead to increased trust, respect, and cooperation. Confronting requires open communication, active listening, empathy, and creativity from both parties. Confronting is the best method to use in this scenario, as it can help the stakeholders overcome their personal animosity, focus on their common goals, and work together to complete their tasks on time12. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 7: Project Stakeholder Management, p. 246; What is Conflict Resolution, and How Does It Work?

The scenario indicates a breakdown in communication between the project team and the project sponsor. The sponsor was unaware of the issues and could not provide guidance on the next steps, highlighting a deficiency in the project's communication processes.

According to the CompTIA Project+ PK0-005 exam objectives, under Domain 1.8: Compare and contrast communication management concepts, it is essential to:

Develop communication platforms/modalities

Manage project communication

Control project communication

One of the key aspects of controlling project communication is:

Revising the communication plan

The communication plan outlines how information is disseminated among stakeholders, including the frequency, methods, and responsible parties. If a sponsor is uninformed about project issues, it suggests that the communication plan is either inadequate or not being followed correctly.

The CompTIA Project+ PK0-005 Certification Study Guide further elaborates on this by stating that:

The communication plan should be reviewed and updated regularly to ensure effective information flow among stakeholders.

In this case, revising the communication plan would address the communication gaps, ensuring that the sponsor and other stakeholders receive timely and accurate information about project issues and developments.

Phishing is a scenario where someone claiming to be from a legitimate organization sends an email or other message to a target person asking for sensitive information or access to a system or account. Phishing is a type of cyberattack that aims to trick the target into revealing personal or financial data or installing malware on their device. Phishing can compromise the security and privacy of the target and expose them to identity theft, fraud, or other malicious activities.

A defect log tracks and details all bugs and issues identified in a project. This log is essential for quality control and continuous improvement, as recommended by CompTIA Project+ guidelines on project monitoring and control.

According to Four agile ceremonies, demystified, one of the Scrum ceremonies is the daily stand-up, which is a short meeting to discuss progress and identify blockers. Blockers are any issues or impediments that prevent the team from completing their tasks or achieving their goals. Reviewing project blockers during the daily stand-up helps the team to resolve them quickly, collaborate effectively, and stay on track1. The other options are not likely to take place during a Scrum ceremony, as they are either part of the initial project planning or outside the scope of Scrum.

Closing contracts involves finalizing any remaining contractual obligations and formally closing out the relationship with the vendor. CompTIA Project+ emphasizes this as part of the project closure phase to ensure all legal and financial aspects are complete.

A capital expense is the cost of acquiring or making improvements to fixed assets that have a useful life of more than one year1. A building purchase is an example of a capital expense, as it is a long-term investment that increases the value of the company’s assets2. Building lease, maintenance, and insurance are not capital expenses, as they are recurring or short-term costs that do not increase the value of the company’s assets3.

Corporate values compliance is a consideration when determining a project’s ESG factors, because it reflects how a project aligns with the ethical standards and social responsibility of the organization. Corporate values compliance can help to enhance the reputation, trust, and loyalty of the organization among its stakeholders, as well as to avoid legal or regulatory issues that may arise from violating the values. Corporate values compliance can also influence the project scope, objectives, deliverables, and stakeholders, as well as the project management methodology, processes, and practices.

The other options are not directly related to ESG factors. Project management methodology is the approach or framework that guides how a project is planned, executed, monitored, and controlled. IT infrastructure security is the protection of the hardware, software, network, and data components of a project from unauthorized access, use, modification, or destruction. Proper accounting practices are the rules and standards that govern how financial transactions and statements are recorded, reported, and audited for a project. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 5: Project Scope Management1; CompTIA Project+ Certification Study Guide, 3rd Edition, Chapter 5: Project Scope Management2; What Is Environmental, Social, and Governance (ESG) Investing

A Gap Analysis is a method used to compare the current performance or state of a product with its desired future state. It helps identify the "gaps" between the two states and determine necessary actions to bridge those gaps.

Per the CompTIA Project+ PK0-005 exam objectives, under Domain 2.5: Explain the importance of activities performed during the closing phase, conducting evaluations like gap analyses is vital for assessing project outcomes and planning improvements.

Enterprise resource planning (ERP) software is a type of software that integrates various business functions and processes, such as accounting, finance, inventory, sales, purchasing, human resources, and more. ERP software helps businesses store, organize, and manage information related to business transactions, such as invoices, payments, orders, receipts, and reports. ERP software also provides real-time data analysis, reporting, and forecasting capabilities12.

Assess the impact of the request and create a change request. The project manager should assess the impact of the request and create a change request in response to the stakeholder asking to add mobile device functionality to a project that is on track to be completed under budget and ahead of schedule. A change request is a document that formally proposes and records a modification or addition to some aspect of a project, such as scope, schedule, cost, quality, or resources. A change request can help to communicate and justify the need and rationale for the change and its implications on the project objectives and deliverables. A change request also helps to initiate the change control process, which involves reviewing, approving, implementing, and monitoring the change12

the brand of a project should deliver the message about its value and goals, and a proper brand helps the project get the necessary support and increases loyalty. The project that promotes new initiatives to expand its benefit to other communities is the one that best represents the project impact to a company’s brand value, as it shows the company’s vision, cause, and reputation.

Data security involves classifying information based on sensitivity and ensuring that it is protected accordingly. This approach is key in project management to protect sensitive data, as emphasized by CompTIA Project+.

The closing phase is when the project manager and the team finalize the project, deliver the outcomes to the customer, obtain formal acceptance, conduct lessons learned, and hand over the project to the operations team. Identifying the baseline go-live date, the operational training, and the handoff procedures are part of the closing activities that ensure a smooth transition and closure of the project. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 14: Closing Projects, p. 333-334.

Part 1:

Change Control Process:

Consult the RACI matrix.

Define new requirements and record changes.

Assess the schedule, risk, and cost.

Perform a demonstration.

Obtain a sign off.

Update and test the deliverable.

Make an announcement on the company portal.

The change control process is a sequence of steps that helps to manage and document any changes or modifications to a project scope, schedule, cost, quality, or resources. The change control process typically involves the following steps:

Consult the RACI matrix. A RACI matrix is a tool that defines and clarifies the roles and responsibilities of each team member for each task or activity in a project. RACI stands for responsible, accountable, consulted, and informed. Consulting the RACI matrix can help to identify who needs to be involved or informed about the change request and how to communicate with them.

Define new requirements and record changes. The new requirements and changes are the details of what needs to be modified or added to the project deliverables or objectives based on the customer feedback or request. Defining and recording the new requirements and changes can help to communicate and justify the need and rationale for the change and its implications on the project scope and quality.

Assess the schedule, risk, and cost. The schedule, risk, and cost are the aspects of the project that may be affected by the change request. Assessing the schedule, risk, and cost can help to determine the impact and feasibility of the change and identify any possible alternatives or corrective actions to minimize or avoid its negative effects.

Perform a demonstration. A demonstration is a presentation or show of how the modified or updated deliverable works or meets the customer expectations or requirements. Performing a demonstration can help to validate and verify that the change request has been implemented correctly and effectively and to obtain feedback or approval from the customer or stakeholders.

Obtain a sign off. A sign off is a formal acceptance and approval of the change request and its deliverables from the customer or stakeholders. Obtaining a sign off can help to confirm that the change request has been completed successfully and satisfactorily and to close the change control process.

Update and test the deliverable. The deliverable is the product or service that is produced or provided by the project. Updating and testing the deliverable can help to ensure that it meets the quality standards and criteria and that it works as expected after implementing the change request.

Make an announcement on the company portal. The company portal is a platform or channel that allows internal communication and collaboration among employees within an organization. Making an announcement on the company portal can help to inform and update other team members or departments about the change request and its outcomes and to share any lessons learned or best practices from the change control process.

Part2:

Risk register: A risk register is a document that identifies, analyzes, and records the potential risks or uncertainties that may affect a project. Updating the risk register can help to capture any new or modified risks that may arise from the change request and to plan and implement appropriate risk responses.

Schedule: A schedule is a document that shows the planned start and end dates, durations, dependencies, and progress of each task or activity in a project. Updating the schedule can help to reflect any changes or adjustments to the project timeline or milestones that may result from the change request and to monitor and control the project performance and delivery.

Statement of work: A statement of work (SOW) is a document that defines the scope, deliverables, schedule, and terms and conditions of a project or contract. Updating the SOW can help to document any changes or additions to the project scope or deliverables that may be requested or agreed upon by the customer or stakeholders and to ensure alignment and agreement on what needs to be done and how it will be done.

Change log: A change log is a document that tracks and records any changes or modifications that are made to the project scope, schedule, cost, quality, or resources during a project. Updating the change log can help to document the change request, approval, implementation, and impact of each change and ensure traceability and transparency.

A control chart is a graphical tool that displays the variation of a process over time and compares it to predetermined control limits. It can be used to determine whether a sample product is within an acceptable range by checking if the sample values fall within the upper and lower control limits, which indicate the expected variation of the process. If the sample values are outside the control limits or show a non-random pattern, it indicates that the process is out of control and there may be some assignable causes of variation that need to be investigated and corrected. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 8: Quality Management1; CompTIA Project+ Certification Study Guide, 3rd Edition, Chapter 8: Quality Management2

Before starting a new project that involves personal data, the project manager should first understand the relevant privacy regulations that apply to the data subjects, the data controllers, and the data processors. These regulations may vary depending on the location, industry, and nature of the data. For example, GDPR applies to any project that processes the personal data of individuals in the European Union, regardless of where the project is based or executed. Understanding the applicable privacy regulations will help the project manager to identify the legal obligations, risks, and compliance requirements for the project data. References = CompTIA Project+ Study Guide, Chapter 3: Project Planning, Section 3.4: Data Privacy and Security, p. 121-122; A Project Management Approach to Data Protection Compliance; 10 Data Protection Considerations Before Starting a New Project; Project Teams Must Manage Risk and New Requirements to Ensure Data Privacy

The first step in planning maintenance windows is to understand the organization's production cycle. This knowledge ensures that maintenance activities are scheduled during periods that minimize impact on operations.

According to the CompTIA Project+ PK0-005 exam objectives, under Domain 2.4: Explain the importance of change control and maintenance, understanding operational cycles is essential for effective maintenance planning.

 The project manager should make an impact assessment after being informed that the delivery of required IT equipment will be delayed. An impact assessment is a process of analyzing and evaluating how a change or an issue may affect the scope, schedule, cost, quality, or risks of a project. An impact assessment can help to determine the severity and implications of the delay on the project objectives and deliverables and identify any possible alternatives or corrective actions to minimize or avoid its negative effects.

Meeting with the team to emphasize the importance of following change management procedures is the best approach to prevent future unauthorized changes. CompTIA Project+ highlights the importance of adhering to formal change control processes to ensure project alignment and accountability.

Escalating to the Change Control Board (CCB) is necessary when a change request impacts the project’s timeline or budget. The CCB reviews and approves changes, ensuring that they align with project objectives. CompTIA Project+ highlights the role of the CCB in change management processes.

Assigning a scribe allows the project manager to focus on hosting and facilitating the meeting effectively without being distracted by note-taking. This approach is consistent with best practices in meeting management and aligns with CompTIA Project+ guidelines, which emphasize the importance of efficient meeting roles and responsibilities.

Quantitative KPIs are measurable and based on numerical data. The statement about task completion time being 25% faster is quantitative, as it involves specific data that can be measured and tracked, as recommended by CompTIA Project+ for project performance evaluation.

Multifactor authentication (MFA) is a security method that requires users to provide two or more pieces of evidence to verify their identity before accessing a system. MFA can use different types of factors, such as something the user knows (e.g., password, PIN, security question), something the user has (e.g., token, smart card, mobile device), or something the user is (e.g., fingerprint, face, voice). MFA provides a layered approach to logging in to systems that contain an organization’s most valuable intellectual property, as it makes it harder for unauthorized users to gain access by compromising one factor alone. MFA can also prevent phishing, brute force, and credential theft attacks12. References = CompTIA Project+ PK0-005 Certification Study Guide,

The waterfall methodology is a project management framework that follows a linear and sequential process, where each stage of the project must be completed before moving on to the next one. The stages of the waterfall model are initiation, planning, execution, and closure, as described in the question12.

A real-time survey is a tool that allows the project manager to collect feedback from the project team members in an interactive and timely manner. A real-time survey can measure the level of engagement, satisfaction, motivation, and performance of the team members, as well as identify any issues, challenges, or opportunities for improvement. A real-time survey can also increase the participation and collaboration of the team members, as they can see the results and comments of their peers instantly. A real-time survey is more effective than a meeting chat, an email, or a whiteboard, as it can reach a larger and more diverse audience, provide more structured and quantitative data, and avoid distractions and interruptions. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 10: Project Closure, p. 367; The 9 best online survey apps in 2023 | Zapier

A business case provides justification for undertaking a project, programme or portfolio. It evaluates the benefit, cost and risk of alternative options and provides a rationale for the preferred solution. A business case is essential for demonstrating the value of the project and securing the approval and funding from the governance. A business case is different from a scope statement, which defines the project boundaries and deliverables; a sponsor request, which initiates the project idea and seeks support; and a project charter, which authorizes the project and assigns the project manager. References = CompTIA Project+ PK0-005 Certification Study Guide, Chapter 3: Initiating Projects; What is business case? | APM

Presentation, application, and data processing. Presentation, application, and data processing are the three logical and physical computing tiers that make up a three-tier architecture. A three-tier architecture is a type of software architecture that separates an application into three layers or tiers that run on different servers or machines. Each tier performs a specific function or role and communicates with other tiers through well-defined interfaces. The presentation tier is the user interface and communication layer of the application, where the end user interacts with the application. The application tier is the logic or middle tier of the application, where data is processed using business rules. The data processing tier is the data or back-end tier of the application, where data is stored and managed12

A Preliminary Scope Statement outlines the initial project objectives, high-level requirements, and milestones. It serves as a foundational document during the initiation phase and is refined as the project progresses.

As per the CompTIA Project+ PK0-005 exam objectives, under Domain 1.1: Compare and contrast different project management roles and responsibilities, developing a preliminary scope statement is a key activity in defining the project's direction and scope.

Regression testing is a type of testing that is done on an existing system to ensure that the previous functionality still works after a change has been made. Regression testing is a process of retesting or verifying that a software system or application still performs as expected after it has been modified or updated with new features, bug fixes, patches, etc. Regression testing can help to detect any errors or defects that may have been introduced by the change and ensure that no functionality has been broken or degraded.

A weak matrix organizational structure is one where the project manager has low authority and the functional manager has high authority. The project manager is considered to be a coordinator or an escalator, and the team members are primarily loyal to their functional units. This can cause issues with team motivation, communication, and performance1

The project manager should have considered environmental, social, and governance (ESG) factors during initial planning to prevent the situation of receiving a penalty for disposing of some computers improperly. ESG factors are criteria that measure the sustainability and ethical impact of an organization’s activities. They include aspects such as environmental protection, social responsibility, human rights, diversity, and corporate governance. Considering ESG factors can help to reduce risks, improve reputation, and enhance performance of an organization12

The project manager should develop a rollback plan next after determining the appropriate maintenance window in the operational infrastructure change process. A rollback plan is a contingency plan that describes how to revert to the previous state of the system or infrastructure in case of a failure or disruption during the change implementation. A rollback plan can help to minimize the impact and risk of the change and ensure business continuity and stability.

The project manager should use the project management plan to document the input from the stakeholders on the minimum viable product that would be acceptable for the project. The project management plan is a document that describes how the project will be executed, monitored, controlled, and closed. It usually includes information such as scope statement, work breakdown structure (WBS), schedule baseline, cost baseline, quality plan, risk plan, communication plan, stakeholder plan, and change management plan. The project management plan can help to define and communicate the project requirements, deliverables, assumptions, constraints, and expectations to all stakeholders involved in the project.

The project management plan would be used to document the input obtained from stakeholders during the meeting to review the requirements and agree on the minimum viable product. The project management plan is a comprehensive document that outlines the approach, scope, schedule, budget, quality, resources, and communication for a project. The document is updated throughout the project lifecycle and serves as a guide for project execution, monitoring, and control. References: CompTIA Project+ Study Guide, Chapter 3: Project Integration Management, Objective 3.3: Identify the components of the project management plan.

Agile is a project management methodology that emphasizes customer collaboration, feedback, and adaptation throughout the project life cycle. Agile teams work in short iterations, called sprints, and deliver working increments of the product or service to the customer for review and approval. Agile teams can also respond to changing requirements and priorities by adjusting the scope, schedule, or quality of the project12. Waterfall, on the other hand, is a project management methodology that follows a linear and sequential process, where each phase of the project must be completed before moving on to the next one. Waterfall teams work with a fixed scope, schedule, and quality, and deliver the final product or service to the customer at the end of the project. Waterfall teams have less customer involvement and flexibility during the project development34.

This answer is based on the best practice of stakeholder management, which is to identify and document the communication preferences of each stakeholder or stakeholder group12. The project manager should update the stakeholder register with the information gathered from the stakeholder analysis, which includes the preferred communication channel for each stakeholder3. The preferred reported communication channel reflects the majority preference of the stakeholders, as well as the minority preference of the face-to-face communicators. The project manager should use this information to plan and execute effective communication throughout the project life cycle4. References = CompTIA Project+ Certification Study Guide5, CompTIA Project+ Certification Exam Objectives6, Stakeholder Register in Project Management1, What is a Stakeholder Register?2, How to Develop a Stakeholder Register3

Informal communication is a type of communication that is casual, spontaneous, and unstructured. It does not follow any predefined rules, protocols, or formats. Examples of informal communication include email, phone calls, conversations in the hallway, and impromptu meetings12. The sponsor is using informal communication to communicate with the team, as these methods are convenient, flexible, and personal. However, informal communication may also have some drawbacks, such as lack of documentation, inconsistency, and potential for misunderstanding3. Therefore, the sponsor should also use formal communication when necessary, such as for official reports, contracts, and presentations4.

Identifying the root cause analysis. Identifying the root cause analysis is a quality assurance tool that can help to find and eliminate the underlying causes of quality problems or defects. Root cause analysis is a systematic process of asking why a problem occurred and tracing it back to its source. Root cause analysis can help to prevent recurrence of the same or similar problems, improve quality performance, and reduce costs and risks12

Data discovery is the process of finding and analyzing data across an organization’s data sources, such as databases, files, cloud services, and applications12. Data discovery can assist with data classification, which is the process of assigning labels and categories to data based on its sensitivity, value, and risk34. By showing where specific data is stored, data discovery can help to:

Identify the location and scope of sensitive data, such as personal, financial, or health information, that may require special protection or compliance measures56.

Evaluate the data quality, accuracy, and relevance for different purposes and users78.

Optimize the data storage, access, and governance policies and practices910.

References = CompTIA Project+ Certification Study Guide, CompTIA Project+ Certification Exam Objectives, What is Data Discovery and Classification?1, Data Discovery and Classification: Working Hand in Hand2, Why Data Discovery and Classification are Important3, Data Discovery & Classification4, Data Discovery and Classification: The First Step to Data Security5, Data Discovery and Classification: A Key Component of Data Protection6, Data Discovery and Classification: The Foundation of Data Quality7, Data Discovery and Classification: The Key to Data Governance8, Data Discovery and Classification: The Essential Step to Data Optimization9, Data Discovery and Classification: The Best Practice for Data Management10

Customer relationship management (CRM) software would be the best to use to store information related to business transactions. CRM software is a type of software that helps businesses manage their interactions and relationships with current and potential customers. CRM software can store and organize information such as customer contact details, purchase history, preferences, feedback, complaints, etc. CRM software can help businesses improve customer service, satisfaction, loyalty, retention, and revenue1

Establishing a cadence means setting a consistent schedule for iterations, enhancing predictability and efficiency in agile environments. This aligns with CompTIA Project+ recommendations for establishing a rhythm in project cycles.

The Pareto chart should be used to identify the most important causes of issues during a quality analysis review. The Pareto chart is a graphical representation of the frequency and impact of different causes, helping to identify the most common and impactful causes. References: CompTIA Project+ Study Guide Section 3.3.3

Releasing the project resources is the process of formally ending the involvement of the project team members and other resources in the project. It also involves updating the resource availability and performance records, and providing feedback and recognition to the resources. Releasing the project resources is an important part of the project closure phase, and it helps to avoid unnecessary costs and conflicts. If the project manager neglects to release the project resources, the team members may still charge time to the project and be unable to work on new projects12.

The RACI (Responsible, Accountable, Consulted, Informed) matrix is used to document which resources are responsible for which tasks. The RACI matrix is a tool that helps to clarify roles and responsibilities on a project. It assigns a level of responsibility to each resource involved in the project. References: CompTIA Project+ Study Guide Section 3.4.

The project manager should use a RACI matrix to document which resources are responsible for which tasks. A RACI matrix is a type of responsibility assignment matrix (RAM) that plots the roles and responsibilities of resources on a project team. RACI stands for Responsible, Accountable, Consulted, and Informed. A RACI matrix can help to clarify who does what on a project, avoid confusion and duplication of work, and improve communication and collaboration among team members.

The critical path is the sequence of tasks that determines the minimum project duration. It is the longest path through the network diagram and has the least amount of slack or float. Based on the provided network diagram, the critical path is A-C-G-K-M, which has the longest total duration when adding up the individual task durations. References = The concept of the critical path is covered in the CompTIA Project+ Certification Study Guide1. For more detailed information on how to calculate and identify the critical path in project management, you can refer to the study guide and other project management resources2.

A change log is a document that records and tracks the changes that are made to the project scope, schedule, budget, or quality. It helps the project manager to monitor and control the project performance and ensure that the changes are aligned with the project objectives and stakeholders’ expectations. A change log can also include information such as the change description, impact, status, approval, and date. A change log is the best source for the PM to use to confirm the assertion that the functionality request was rejected during the planning phase, as it would show the details and reasons for the rejection12.

A Finish-to-Start dependency implies that a subsequent activity cannot start until a previous one finishes. In this scenario, the manufacturing process (subsequent activity) cannot begin until the critical raw materials (previous activity) have been delivered. This type of dependency is the most common in project schedules and is likely being affected by the global shipping slowdown, causing delays in the start of the project's production run.

The project manager should notify the functional manager that resources are released after completing a project successfully in a functional organization. A functional organization is a type of organizational structure where employees are grouped by their functions or specialties, such as finance, marketing, or engineering. In a functional organization, the functional manager has more authority and control over the resources than the project manager. Therefore, the project manager should inform the functional manager when the resources are no longer needed for the project and can be reassigned to other tasks or projects.

The program manager should first obtain details from the owner of the project that is causing the delay, such as the root cause, the impact, the mitigation plan, and the revised timeline. This will help the program manager to assess the situation, communicate with the stakeholders, and adjust the program schedule accordingly. Updating the critical path, applying contingency reserves, and reestimating epic user stories are possible actions that the program manager may take after obtaining the details, depending on the severity and duration of the delay. However, they are not the immediate next steps, as they require more information and analysis. References = CompTIA Project+ Study Guide: Exam PK0-005, Third Edition, Chapter 10: Executing the Project, page 2431; Dealing with delays - Project Management Institute2

Operational security is the process of identifying, protecting, and controlling sensitive information and activities from unauthorized access or disclosure. Operational security includes background screenings for personnel who need to access classified or restricted information or resources, as well as implementing policies and procedures to prevent leaks, breaches, or espionage. Operational security is essential for government projects that involve national security, defense, intelligence, or law enforcement.

Operational security is different from data security, which is the process of safeguarding data from unauthorized access, use, modification, or destruction. Data security includes encryption, authentication, authorization, backup, and recovery of data. Operational security is also different from physical security, which is the process of securing physical assets, such as equipment, data, or personnel, from unauthorized access or damage. Physical security includes locks, alarms, cameras, guards, and fences. Operational security is also different from digital security, which is the process of protecting digital devices, networks, and systems from cyberattacks, malware, or hacking. Digital security includes firewalls, antivirus, VPN, and passwords. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 9: Security Management1; CompTIA Project+ Certification Study Guide, 3rd Edition, Chapter 9: Security Management2; What is Operational Security (OPSEC)?3

A task board is a visual tool that displays team progress for stand-up meetings. A task board usually consists of columns that represent different stages or statuses of tasks, such as to do, in progress, done, or blocked. Each task is represented by a card or sticky note that can be moved across the columns as the task progresses. A task board can help to facilitate communication, collaboration, and transparency among team members and stakeholders. It can also help to track and manage work flow, prioritize tasks, identify bottlenecks, and resolve issues3

The project manager should have prepared acceptable communication channels to avoid the situation of a stakeholder not replying to emails due to intermittent Internet service. Acceptable communication channels are methods or modes of communication that are agreed upon by all parties involved in a project. They may include aspects such as email, phone call, text message, video conference, instant message, or face-to-face meeting. Acceptable communication channels can help to ensure that messages are delivered and received effectively and efficiently and that communication preferences and limitations are respected.

In project management, understanding the difference between the current state and the desired future state is essential for identifying gaps and planning improvements. The current state refers to the organization's existing conditions, processes, or performance levels. The desired future state represents the target conditions or performance levels the organization aims to achieve through the project. This comparison is fundamental in conducting a gap analysis, which helps in planning the necessary steps to transition from the current to the desired state.

According to the CompTIA Project+ PK0-005 exam objectives, under Domain 1.3: Given a scenario, apply the change control process throughout the project life cycle, understanding the current and desired states is crucial for effective change management and project planning.

Agile is a methodology that emphasizes iterative and incremental development, customer collaboration, and responsiveness to change. Agile is suitable for developing a minimum viable product (MVP), which is a version of a product with just enough features to be usable by early customers who can then provide feedback for future product development. Agile allows the project sponsor to deliver an MVP quickly and test it with real users, and then adapt the product based on the feedback and changing requirements. Agile also reduces the risk of wasting time and resources on a product that does not meet the customer’s needs or expectations123. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 2: Project Methodologies, p. 55; What is a Minimum Viable Product (MVP)? | Agile Alliance; Minimum Viable Product (MVP): What is it & Why it Matters - Atlassian

The rules of engagement are the guidelines and expectations that define the relationship between the contractor and the company. They may include topics such as communication, confidentiality, access, security, performance, and compliance. The project manager should reinforce the rules of engagement with the contractor to ensure that they understand and respect the boundaries and protocols of the company. This will help to avoid any potential conflicts, misunderstandings, or breaches of contract. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 7: Project Stakeholder Management, p. 239; Contractor Rules of Engagement - Cox Enterprises, p. 1; Legal Considerations for Engaging Contractors | LegalVision

Control objectives are the desired outcomes or goals of implementing security controls to mitigate risks and protect information assets. Control objectives should be the primary basis for establishing metrics that measure the effectiveness of an information security program, as they align with the business objectives, requirements, and expectations of the organization and its stakeholders. Metrics based on control objectives can help to evaluate the performance, efficiency, and maturity of the security program, and to identify gaps, issues, and areas for improvement. The other options are not correct because:

Residual risk is the remaining risk after applying security controls. Residual risk is not a basis for establishing metrics, but rather a result of measuring the effectiveness of security controls. Residual risk should be monitored and reported, but it does not define the desired outcomes or goals of the security program.

Regulatory requirements are the external standards, laws, and regulations that the organization must comply with to avoid legal or financial penalties. Regulatory requirements are not a basis for establishing metrics, but rather a constraint or a driver for the security program. Metrics based on regulatory requirements can help to demonstrate compliance, but they may not reflect the actual effectiveness or efficiency of the security program.

Risk tolerance is the level of risk that the organization is willing to accept or bear. Risk tolerance is not a basis for establishing metrics, but rather a factor or an input for the security program. Metrics based on risk tolerance can help to prioritize and allocate resources, but they may not measure the actual outcomes or goals of the security program. References = Key Performance Indicators for Security Governance, Part 1; 14 Cybersecurity Metrics + KPIs You Must Track in 2023; KPIs in Information Security: The 10 Most Important Security Metrics; Why metrics are crucial to proving cybersecurity programs’ value; Implementing and Maintaining Security Program Metrics

A focus group is a technique that involves bringing together a group of stakeholders and facilitating a discussion to elicit their opinions, needs, and expectations about the project. This technique can help to gather requirements from stakeholders in an interactive and collaborative way1, p. 67