Free CompTIA PK0-005 Übungsprüfungen - Seite 12 von 12

Question #111

A company is implementing a new radar system from July to September. The project manager knows these months are the peak hurricane season for this region.

Which of the following should the project manager develop to mitigate the risk to the project?

A . Data plan
B . Contingency plan
C . Rollback plan
D . Recovery plan

Lösung einblenden Lösung ausblenden

Question #112

A PM is working on the preliminary scope statement and identifies that this project has the same approach as another project that was completed last year.

Which of the following actions would the PM most likely perform?

A . Call the previous PM for advice on risks and issues.
B . Ask the project sponsor to provide previous final project report results.
C . Complete the project charter using the other PM’s subject matter expertise.
D . Use existing artifacts and accommodate based on the current project success criteria.

Lösung einblenden Lösung ausblenden

Question #113

A project manager is beginning a new project that will include a high number of complex deliverables.

Which of the following is the best to use to track deliverables that are yet to be completed?

A . Resource management system
B . Issue log
C . Ticketing system
D . Backlog

Lösung einblenden Lösung ausblenden

Question #114

A client provides a project plan to the assigned project manager and suggests that the project manager and team just need to execute the plan.

Upon further investigation, the document contains:

• Purpose

• Scope of work

• Location of work

• Period of performance

• Deliverables schedule

• Applicable standards

• Acceptance criteria

• Special requirements

• Payment schedule

Which of the following documents did the client provide to the project manager?

A . RFP
B . WBS
C . SLA
D . SOW

Lösung einblenden Lösung ausblenden

Question #115

Project stakeholders have asked the team to use Scrum to run a software implementation project.

Which of the following is most likely to take place during a Scrum ceremony?

A . Reviewing project blockers
B . Defining roles and responsibilities
C . Establishing a project schedule
D . Determining a project budget

Lösung einblenden Lösung ausblenden

Question #116

Which of the following items must be protected as Pll? (Select TWO).

A . Job title
B . Home address
C . Work phone number
D . Time zone
E . Date of birth
F . Blood type

Lösung einblenden Lösung ausblenden

Question #117

Which of the following should be the PRIMARY basis for establishing metrics that measure the effectiveness of an information security program?

A . Residual risk
B . Regulatory requirements
C . Risk tolerance
D . Control objectives

Lösung einblenden Lösung ausblenden

Richtige Antwort: D
D

Explanation:

Control objectives are the desired outcomes or goals of implementing security controls to mitigate risks and protect information assets. Control objectives should be the primary basis for establishing metrics that measure the effectiveness of an information security program, as they align with the business objectives, requirements, and expectations of the organization and its stakeholders. Metrics based on control objectives can help to evaluate the performance, efficiency, and maturity of the security program, and to identify gaps, issues, and areas for improvement.

The other options are not correct because:

Residual risk is the remaining risk after applying security controls. Residual risk is not a basis for establishing metrics, but rather a result of measuring the effectiveness of security controls. Residual risk should be monitored and reported, but it does not define the desired outcomes or goals of the security program.

Regulatory requirements are the external standards, laws, and regulations that the organization must comply with to avoid legal or financial penalties. Regulatory requirements are not a basis for establishing metrics, but rather a constraint or a driver for the security program. Metrics based on regulatory requirements can help to demonstrate compliance, but they may not reflect the actual effectiveness or efficiency of the security program.

Risk tolerance is the level of risk that the organization is willing to accept or bear. Risk tolerance is not a basis for establishing metrics, but rather a factor or an input for the security program. Metrics based on risk tolerance can help to prioritize and allocate resources, but they may not measure the actual outcomes or goals of the security program.

Reference = Key Performance Indicators for Security Governance, Part 1; 14 Cybersecurity Metrics + KPIs You Must Track in 2023; KPIs in Information Security: The 10 Most Important Security Metrics; Why metrics are crucial to proving cybersecurity programs’ value; Implementing and Maintaining Security Program Metrics

Question #118

To gather requirements from stakeholders, the project manager sits down with them and allows them to discuss freely.

Which a following technique is the project manager utilizing?

A . Process moving
B . Brainstorming
C . Interview
D . Focus group

Lösung einblenden Lösung ausblenden