Question 240
A government contractor cannot send confidential project records to an unapproved external SaaS provider. Which TWO complementary steps provide the best response AND its necessary supporting assessment? Select TWO.
Explanation
Correct Answers
Evaluate hosted and locally managed project tools against connectivity, support, access, data residency, and maintenance requirements. This targets the specific project decision. Hosted software shifts some infrastructure operations to the provider, while local deployment offers different control and maintenance burdens. Before committing, assess: Inspect security policy, offline access needs, vendor support, backup responsibilities, subscription terms, and integration constraints. It complements the associated assessment evidence. Situation: A government contractor cannot send confidential project records to an unapproved external SaaS provider.
Inspect security policy, offline access needs, vendor support, backup responsibilities, subscription terms, and integration constraints. This checks the relevant condition before the team intervenes. Hosted software shifts some infrastructure operations to the provider, while local deployment offers different control and maintenance burdens. The controlled response is: Evaluate hosted and locally managed project tools against connectivity, support, access, data residency, and maintenance requirements. It complements the associated implementation step. Situation: A government contractor cannot send confidential project records to an unapproved external SaaS provider.
Incorrect Answers
Use a ticketing system with status, ownership, priority, resolution history, and escalation tracking for operational and project defects. This is useful for Ticketing and case management workflow but is not one of the complementary steps for this case. The appropriate paired decision combines: Evaluate hosted and locally managed project tools against connectivity, support, access, data residency, and maintenance requirements. and Inspect security policy, offline access needs, vendor support, backup responsibilities, subscription terms, and integration constraints. Situation: A government contractor cannot send confidential project records to an unapproved external SaaS provider.
The trend distinguishes genuine delivery progress from scope changes and forecasts completion using observed capacity. This is useful for Agile burnup burndown and velocity interpretation but is not one of the complementary steps for this case. The appropriate paired decision combines: Evaluate hosted and locally managed project tools against connectivity, support, access, data residency, and maintenance requirements. and Inspect security policy, offline access needs, vendor support, backup responsibilities, subscription terms, and integration constraints. Situation: A government contractor cannot send confidential project records to an unapproved external SaaS provider.
Inspect whether the event has already occurred, current impact, likelihood, resolution status, and register update history. This is useful for Risk register versus issue log but is not one of the complementary steps for this case. The appropriate paired decision combines: Evaluate hosted and locally managed project tools against connectivity, support, access, data residency, and maintenance requirements. and Inspect security policy, offline access needs, vendor support, backup responsibilities, subscription terms, and integration constraints. Situation: A government contractor cannot send confidential project records to an unapproved external SaaS provider.


