cert
cert-1
cert-2

Pass CompTIA PK0-005 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
PK0-005 Exam - Verified By Experts
PK0-005 Premium Bundle
$29.98

PK0-005 Premium Bundle

$79.99
$109.97
  • Premium File 628 Questions & Answers. Last update: Nov 02, 2026
  • Training Course 159 Video Lectures
  • Study Guide 682 Pages
 
$109.97
$79.99
accept 46 downloads in last 7 days
block-screenshots
Purchase CompTIA PK0-005 Exam Training Products Individually
CompTIA PK0-005 Premium File
Premium File 628 Q&A
$76.99$69.99
CompTIA PK0-005 Video Training Course
Training Course 159 Lectures
$21.99 $19.99
CompTIA PK0-005 PDF Study Guide
Study Guide 682 Pages
$21.99 $19.99
CompTIA PK0-005 Practice Test 35

Question 340

A contact center project monitors average ticket handling time and needs evidence of sustained instability. Which result BEST demonstrates that the project-management response met the stated need?

  1. Interactive decisions occur with the necessary participants while routine updates remain searchable and accessible after the meeting.
  2. The plotted metric identifies a special-cause variation requiring investigation without treating every small fluctuation as a defect.
  3. Future threats retain planned responses while occurring problems receive immediate ownership and tracked resolution.
  4. The trend distinguishes genuine delivery progress from scope changes and forecasts completion using observed capacity.

Explanation

Correct Answer

B:

The plotted metric identifies a special-cause variation requiring investigation without treating every small fluctuation as a defect. This is an observable measure of the intended outcome, not just evidence that a meeting or configuration occurred. Control charts assess process stability against statistical control limits; specification thresholds and control limits are not automatically identical. Situation: A contact center project monitors average ticket handling time and needs evidence of sustained instability.

Incorrect Answers

A:

Interactive decisions occur with the necessary participants while routine updates remain searchable and accessible after the meeting. That outcome tests Meeting channels and asynchronous project updates; it is not proof of this particular requirement. The more specific validation is: The plotted metric identifies a special-cause variation requiring investigation without treating every small fluctuation as a defect. Situation: A contact center project monitors average ticket handling time and needs evidence of sustained instability.

C:

Future threats retain planned responses while occurring problems receive immediate ownership and tracked resolution. That outcome tests Risk register versus issue log; it is not proof of this particular requirement. The more specific validation is: The plotted metric identifies a special-cause variation requiring investigation without treating every small fluctuation as a defect. Situation: A contact center project monitors average ticket handling time and needs evidence of sustained instability.

D:

The trend distinguishes genuine delivery progress from scope changes and forecasts completion using observed capacity. That outcome tests Agile burnup burndown and velocity interpretation; it is not proof of this particular requirement. The more specific validation is: The plotted metric identifies a special-cause variation requiring investigation without treating every small fluctuation as a defect. Situation: A contact center project monitors average ticket handling time and needs evidence of sustained instability.

Question 341

A city has detailed server specifications and wants standardized quotes from qualified suppliers. Which TWO complementary steps provide the best response AND its necessary supporting assessment? Select TWO.

  1. Executives get decision-ready summaries, contributors get actionable technical updates, and missed communications are escalated appropriately.
  2. Inspect procurement maturity, defined specifications, evaluation criteria, supplier qualifications, and intended response format.
  3. Use market inquiry, solution proposal, or price quotation documents according to whether the buyer needs information, approaches, or comparable pricing.
  4. Inspect incident timeline, reproducing conditions, logs, workaround limitations, related change requests, and recurrence data.
  5. Select an appropriate contract type according to requirement stability and allocation of scope and cost risk, with clear acceptance terms.

Explanation

Correct Answers

B:

Inspect procurement maturity, defined specifications, evaluation criteria, supplier qualifications, and intended response format. This checks the relevant condition before the team intervenes. An RFI gathers market capabilities, an RFP seeks proposed solutions, and an RFQ compares prices for clearly specified goods or services. The controlled response is: Use market inquiry, solution proposal, or price quotation documents according to whether the buyer needs information, approaches, or comparable pricing. It complements the associated implementation step. Situation: A city has detailed server specifications and wants standardized quotes from qualified suppliers.

C:

Use market inquiry, solution proposal, or price quotation documents according to whether the buyer needs information, approaches, or comparable pricing. This targets the specific project decision. An RFI gathers market capabilities, an RFP seeks proposed solutions, and an RFQ compares prices for clearly specified goods or services. Before committing, assess: Inspect procurement maturity, defined specifications, evaluation criteria, supplier qualifications, and intended response format. It complements the associated assessment evidence. Situation: A city has detailed server specifications and wants standardized quotes from qualified suppliers.

Incorrect Answers

A:

Executives get decision-ready summaries, contributors get actionable technical updates, and missed communications are escalated appropriately. This is useful for Stakeholder communication plan tailoring but is not one of the complementary steps for this case. The appropriate paired decision combines: Use market inquiry, solution proposal, or price quotation documents according to whether the buyer needs information, approaches, or comparable pricing. and Inspect procurement maturity, defined specifications, evaluation criteria, supplier qualifications, and intended response format. Situation: A city has detailed server specifications and wants standardized quotes from qualified suppliers.

D:

Inspect incident timeline, reproducing conditions, logs, workaround limitations, related change requests, and recurrence data. This is useful for Root cause analysis and safe workaround but is not one of the complementary steps for this case. The appropriate paired decision combines: Use market inquiry, solution proposal, or price quotation documents according to whether the buyer needs information, approaches, or comparable pricing. and Inspect procurement maturity, defined specifications, evaluation criteria, supplier qualifications, and intended response format. Situation: A city has detailed server specifications and wants standardized quotes from qualified suppliers.

E:

Select an appropriate contract type according to requirement stability and allocation of scope and cost risk, with clear acceptance terms. This is useful for Fixed-price versus time-and-material contracts but is not one of the complementary steps for this case. The appropriate paired decision combines: Use market inquiry, solution proposal, or price quotation documents according to whether the buyer needs information, approaches, or comparable pricing. and Inspect procurement maturity, defined specifications, evaluation criteria, supplier qualifications, and intended response format. Situation: A city has detailed server specifications and wants standardized quotes from qualified suppliers.

Question 342

A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update. Which project-management response BEST addresses the stated need?

  1. Protect project locations and removable storage with approved access, custody, disposal and visitor controls.
  2. Apply appropriate multifactor authentication and task-scoped permissions to project systems that contain sensitive data.
  3. Check project decisions against organizational ethics, regulatory obligations, mission, and published brand commitments before approving execution.
  4. Define lawful retention, secure disposal, confidentiality and audit obligations before approving changes to records processing.

Explanation

Correct Answer

A:

Protect project locations and removable storage with approved access, custody, disposal and visitor controls. This targets the specific project decision. Physical security remains necessary even for cloud projects; an unlocked device or uncontrolled removable drive can bypass digital safeguards. Before committing, assess: Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.

Incorrect Answers

B:

Apply appropriate multifactor authentication and task-scoped permissions to project systems that contain sensitive data. That response is associated with Multifactor authentication and least privilege and does not directly settle this case. Its relevant principle is: MFA reduces reliance on a password alone; least privilege separately limits what a successfully authenticated identity may do. The stated case instead calls for: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.

C:

Check project decisions against organizational ethics, regulatory obligations, mission, and published brand commitments before approving execution. That response is associated with Governance standards and brand alignment and does not directly settle this case. Its relevant principle is: Governance connects project choices to legal duties and organizational values; a technically feasible shortcut can still be unacceptable. The stated case instead calls for: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.

D:

Define lawful retention, secure disposal, confidentiality and audit obligations before approving changes to records processing. That response is associated with Retention and confidentiality compliance controls and does not directly settle this case. Its relevant principle is: Compliance involves meeting specific legal and contractual obligations; collecting sensitive data indefinitely is not automatically safer. The stated case instead calls for: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.

Question 343

A project closes without reconciling final maintenance invoices or recording warranty contacts. Before acting, which evidence should the project team examine FIRST to assess the stated need?

  1. Inspect organizational groups, decision rights, business concerns, communication needs, and stakeholder influence.
  2. Inspect completed purchase orders, warranties, unpaid invoices, administrative credentials, and open contractual claims.
  3. Inspect support readiness, training materials, release checklist, outage communication, acceptance and recovery procedures.
  4. Inspect incident and change histories, financial reconciliation, feedback, decision logs, and archival policy.

Explanation

Correct Answer

B:

Inspect completed purchase orders, warranties, unpaid invoices, administrative credentials, and open contractual claims. This checks the relevant condition before the team intervenes. Contract closure checks legal and financial obligations as well as technical delivery; temporary vendor access should not persist after authorization ends. The controlled response is: Reconcile vendor obligations and invoices, close procurement items, remove temporary access, and release project resources safely. Situation: A project closes without reconciling final maintenance invoices or recording warranty contacts.

Incorrect Answers

A:

Inspect organizational groups, decision rights, business concerns, communication needs, and stakeholder influence. That evidence would investigate Stakeholder analysis and engagement, not the main uncertainty in this situation. To decide the current case, examine: Inspect completed purchase orders, warranties, unpaid invoices, administrative credentials, and open contractual claims. Situation: A project closes without reconciling final maintenance invoices or recording warranty contacts.

C:

Inspect support readiness, training materials, release checklist, outage communication, acceptance and recovery procedures. That evidence would investigate Release transition and operational handoff, not the main uncertainty in this situation. To decide the current case, examine: Inspect completed purchase orders, warranties, unpaid invoices, administrative credentials, and open contractual claims. Situation: A project closes without reconciling final maintenance invoices or recording warranty contacts.

D:

Inspect incident and change histories, financial reconciliation, feedback, decision logs, and archival policy. That evidence would investigate Lessons learned and archive preservation, not the main uncertainty in this situation. To decide the current case, examine: Inspect completed purchase orders, warranties, unpaid invoices, administrative credentials, and open contractual claims. Situation: A project closes without reconciling final maintenance invoices or recording warranty contacts.

Question 344

A production triage team constantly reorders defect tickets and finds that two-week sprint commitments become obsolete daily. Which result BEST demonstrates that the project-management response met the stated need?

  1. Incoming tasks move through visible states without overloaded in-progress columns and flow time becomes more predictable.
  2. Executives get decision-ready summaries, contributors get actionable technical updates, and missed communications are escalated appropriately.
  3. A status report correctly identifies schedule or cost underperformance and proposes a proportionate corrective response.
  4. A deliberately vulnerable dependency stops the release before production and its remediation is traceable to a team owner.

Explanation

Correct Answer

A:

Incoming tasks move through visible states without overloaded in-progress columns and flow time becomes more predictable. This is an observable measure of the intended outcome, not just evidence that a meeting or configuration occurred. Kanban optimizes continuous flow and work-in-progress, whereas Scrum ordinarily organizes work around timeboxed sprint goals and events. Situation: A production triage team constantly reorders defect tickets and finds that two-week sprint commitments become obsolete daily.

Incorrect Answers

B:

Executives get decision-ready summaries, contributors get actionable technical updates, and missed communications are escalated appropriately. That outcome tests Stakeholder communication plan tailoring; it is not proof of this particular requirement. The more specific validation is: Incoming tasks move through visible states without overloaded in-progress columns and flow time becomes more predictable. Situation: A production triage team constantly reorders defect tickets and finds that two-week sprint commitments become obsolete daily.

C:

A status report correctly identifies schedule or cost underperformance and proposes a proportionate corrective response. That outcome tests Schedule and cost variance measurement; it is not proof of this particular requirement. The more specific validation is: Incoming tasks move through visible states without overloaded in-progress columns and flow time becomes more predictable. Situation: A production triage team constantly reorders defect tickets and finds that two-week sprint commitments become obsolete daily.

D:

A deliberately vulnerable dependency stops the release before production and its remediation is traceable to a team owner. That outcome tests DevSecOps security in delivery; it is not proof of this particular requirement. The more specific validation is: Incoming tasks move through visible states without overloaded in-progress columns and flow time becomes more predictable. Situation: A production triage team constantly reorders defect tickets and finds that two-week sprint commitments become obsolete daily.

Question 345

A medical appointment platform sends booking updates into a central reporting warehouse with inconsistent patient keys. Which TWO complementary steps provide the best response AND its necessary supporting assessment? Select TWO.

  1. Inspect document retention rules, legal holds, disclosure agreements, disposal methods, and contractual audit rights.
  2. Match cloud service models to who manages applications, operating systems, platforms and underlying infrastructure for an IT project.
  3. Inspect source and target schemas, API contracts, record identifiers, data ownership, and reconciliation requirements.
  4. Identify system-of-record ownership, interface mappings and data flow between enterprise applications before planning integration.
  5. Approved users must complete the required second factor and cannot perform administrative actions outside assigned duties.

Explanation

Correct Answers

C:

Inspect source and target schemas, API contracts, record identifiers, data ownership, and reconciliation requirements. This checks the relevant condition before the team intervenes. ERP coordinates enterprise processes and CRM manages customer relationships; interfaces need controlled mapping rather than assuming identical data semantics. The controlled response is: Identify system-of-record ownership, interface mappings and data flow between enterprise applications before planning integration. It complements the associated implementation step. Situation: A medical appointment platform sends booking updates into a central reporting warehouse with inconsistent patient keys.

D:

Identify system-of-record ownership, interface mappings and data flow between enterprise applications before planning integration. This targets the specific project decision. ERP coordinates enterprise processes and CRM manages customer relationships; interfaces need controlled mapping rather than assuming identical data semantics. Before committing, assess: Inspect source and target schemas, API contracts, record identifiers, data ownership, and reconciliation requirements. It complements the associated assessment evidence. Situation: A medical appointment platform sends booking updates into a central reporting warehouse with inconsistent patient keys.

Incorrect Answers

A:

Inspect document retention rules, legal holds, disclosure agreements, disposal methods, and contractual audit rights. This is useful for Retention and confidentiality compliance controls but is not one of the complementary steps for this case. The appropriate paired decision combines: Identify system-of-record ownership, interface mappings and data flow between enterprise applications before planning integration. and Inspect source and target schemas, API contracts, record identifiers, data ownership, and reconciliation requirements. Situation: A medical appointment platform sends booking updates into a central reporting warehouse with inconsistent patient keys.

B:

Match cloud service models to who manages applications, operating systems, platforms and underlying infrastructure for an IT project. This is useful for SaaS PaaS and IaaS cloud responsibility but is not one of the complementary steps for this case. The appropriate paired decision combines: Identify system-of-record ownership, interface mappings and data flow between enterprise applications before planning integration. and Inspect source and target schemas, API contracts, record identifiers, data ownership, and reconciliation requirements. Situation: A medical appointment platform sends booking updates into a central reporting warehouse with inconsistent patient keys.

E:

Approved users must complete the required second factor and cannot perform administrative actions outside assigned duties. This is useful for Multifactor authentication and least privilege but is not one of the complementary steps for this case. The appropriate paired decision combines: Identify system-of-record ownership, interface mappings and data flow between enterprise applications before planning integration. and Inspect source and target schemas, API contracts, record identifiers, data ownership, and reconciliation requirements. Situation: A medical appointment platform sends booking updates into a central reporting warehouse with inconsistent patient keys.

Question 346

A retail application release is scheduled without a rollback path for failed payment processing. Before acting, which evidence should the project team examine FIRST to assess the stated need?

  1. Inspect support readiness, training materials, release checklist, outage communication, acceptance and recovery procedures.
  2. Inspect labor effort estimates, hardware procurement, licensing renewals, contingency assumptions, and funding authority.
  3. Inspect original acceptance criteria, test results, product owner or sponsor authority, and open defect dispositions.
  4. Review competing demands, stakeholder interests, deadline authority, negotiated alternatives, and escalation rules.

Explanation

Correct Answer

A:

Inspect support readiness, training materials, release checklist, outage communication, acceptance and recovery procedures. This checks the relevant condition before the team intervenes. Transition planning bridges delivery and routine operations; a technically successful deployment without support readiness can still fail adoption. The controlled response is: Plan operational training, support ownership, go-live validation, monitoring and rollback before scheduling release to production. Situation: A retail application release is scheduled without a rollback path for failed payment processing.

Incorrect Answers

B:

Inspect labor effort estimates, hardware procurement, licensing renewals, contingency assumptions, and funding authority. That evidence would investigate Budget baseline and funding allocation, not the main uncertainty in this situation. To decide the current case, examine: Inspect support readiness, training materials, release checklist, outage communication, acceptance and recovery procedures. Situation: A retail application release is scheduled without a rollback path for failed payment processing.

C:

Inspect original acceptance criteria, test results, product owner or sponsor authority, and open defect dispositions. That evidence would investigate Final deliverable acceptance and sponsor signoff, not the main uncertainty in this situation. To decide the current case, examine: Inspect support readiness, training materials, release checklist, outage communication, acceptance and recovery procedures. Situation: A retail application release is scheduled without a rollback path for failed payment processing.

D:

Review competing demands, stakeholder interests, deadline authority, negotiated alternatives, and escalation rules. That evidence would investigate Collaborative conflict resolution, not the main uncertainty in this situation. To decide the current case, examine: Inspect support readiness, training materials, release checklist, outage communication, acceptance and recovery procedures. Situation: A retail application release is scheduled without a rollback path for failed payment processing.

Question 347

A software vendor adds custom reports during user workshops although the contract explicitly excludes them. Which result BEST demonstrates that the project-management response met the stated need?

  1. Vendors return comparable requested responses and the award can be justified against stated evaluation criteria.
  2. The proper authority approves, rejects, or defers the request and the log and project plan reflect the same decision.
  3. The opportunity has a deliberate owner and a documented response that increases or secures benefit without mislabeling it as a threat.
  4. Only approved extensions appear in the work plan, while rejected or deferred requests remain visible but uncommitted.

Explanation

Correct Answer

D:

Only approved extensions appear in the work plan, while rejected or deferred requests remain visible but uncommitted. This is an observable measure of the intended outcome, not just evidence that a meeting or configuration occurred. Scope creep is uncontrolled growth of work; a legitimate scope change requires assessment and authorized baseline updates. Situation: A software vendor adds custom reports during user workshops although the contract explicitly excludes them.

Incorrect Answers

A:

Vendors return comparable requested responses and the award can be justified against stated evaluation criteria. That outcome tests RFI RFP and RFQ procurement documents; it is not proof of this particular requirement. The more specific validation is: Only approved extensions appear in the work plan, while rejected or deferred requests remain visible but uncommitted. Situation: A software vendor adds custom reports during user workshops although the contract explicitly excludes them.

B:

The proper authority approves, rejects, or defers the request and the log and project plan reflect the same decision. That outcome tests Change control board decision authority; it is not proof of this particular requirement. The more specific validation is: Only approved extensions appear in the work plan, while rejected or deferred requests remain visible but uncommitted. Situation: A software vendor adds custom reports during user workshops although the contract explicitly excludes them.

C:

The opportunity has a deliberate owner and a documented response that increases or secures benefit without mislabeling it as a threat. That outcome tests Positive risk opportunity strategies; it is not proof of this particular requirement. The more specific validation is: Only approved extensions appear in the work plan, while rejected or deferred requests remain visible but uncommitted. Situation: A software vendor adds custom reports during user workshops although the contract explicitly excludes them.

Question 348

A charity seeks funding to automate donor reconciliation but has not quantified staff time saved or onboarding expense. Before acting, which evidence should the project team examine FIRST to assess the stated need?

  1. Inspect current operating costs, implementation estimate, measurable benefits, payback assumptions, and business objective.
  2. Review acceptance criteria, regulatory quality requirements, test environments, test coverage, and defect escalation thresholds.
  3. Inspect completed purchase orders, warranties, unpaid invoices, administrative credentials, and open contractual claims.
  4. Inspect approved-vendor records, current statement of work, contract expiration, procurement limits, and supplier capabilities.

Explanation

Correct Answer

A:

Inspect current operating costs, implementation estimate, measurable benefits, payback assumptions, and business objective. This checks the relevant condition before the team intervenes. A business case justifies an investment using expected value and alternatives; ROI compares net benefit with cost and is sensitive to assumptions. The controlled response is: Build a business case comparing expected measurable benefits to total project cost and state the decision assumptions before seeking funding. Situation: A charity seeks funding to automate donor reconciliation but has not quantified staff time saved or onboarding expense.

Incorrect Answers

B:

Review acceptance criteria, regulatory quality requirements, test environments, test coverage, and defect escalation thresholds. That evidence would investigate Quality assurance plan and test entry criteria, not the main uncertainty in this situation. To decide the current case, examine: Inspect current operating costs, implementation estimate, measurable benefits, payback assumptions, and business objective. Situation: A charity seeks funding to automate donor reconciliation but has not quantified staff time saved or onboarding expense.

C:

Inspect completed purchase orders, warranties, unpaid invoices, administrative credentials, and open contractual claims. That evidence would investigate Vendor contract closeout and resource release, not the main uncertainty in this situation. To decide the current case, examine: Inspect current operating costs, implementation estimate, measurable benefits, payback assumptions, and business objective. Situation: A charity seeks funding to automate donor reconciliation but has not quantified staff time saved or onboarding expense.

D:

Inspect approved-vendor records, current statement of work, contract expiration, procurement limits, and supplier capabilities. That evidence would investigate Vendor eligibility and existing contracts, not the main uncertainty in this situation. To decide the current case, examine: Inspect current operating costs, implementation estimate, measurable benefits, payback assumptions, and business objective. Situation: A charity seeks funding to automate donor reconciliation but has not quantified staff time saved or onboarding expense.

Question 349

Two program leads need a documented decision on competing access to the only available security reviewer. Before acting, which evidence should the project team examine FIRST to assess the stated need?

  1. Inspect possible benefit, likelihood, prerequisites, investment required, external partners, and upside ownership.
  2. Inspect reporting lines, resource calendar, matrix authority, other project commitments, and escalation paths.
  3. Inspect current priorities, acceptance criteria, team velocity, dependencies, and historical size of completed work.
  4. Inspect team agreements, sources of disagreement, escalation history, feedback, and clarity of responsibilities.

Explanation

Correct Answer

B:

Inspect reporting lines, resource calendar, matrix authority, other project commitments, and escalation paths. This checks the relevant condition before the team intervenes. In a matrix organization resources report to functional managers while supporting projects; the project manager cannot assume exclusive ownership. The controlled response is: Negotiate shared specialist allocation with functional managers, document capacity commitments, and escalate competing priorities. Situation: Two program leads need a documented decision on competing access to the only available security reviewer.

Incorrect Answers

A:

Inspect possible benefit, likelihood, prerequisites, investment required, external partners, and upside ownership. That evidence would investigate Positive risk opportunity strategies, not the main uncertainty in this situation. To decide the current case, examine: Inspect reporting lines, resource calendar, matrix authority, other project commitments, and escalation paths. Situation: Two program leads need a documented decision on competing access to the only available security reviewer.

C:

Inspect current priorities, acceptance criteria, team velocity, dependencies, and historical size of completed work. That evidence would investigate Sprint estimation and backlog prioritization, not the main uncertainty in this situation. To decide the current case, examine: Inspect reporting lines, resource calendar, matrix authority, other project commitments, and escalation paths. Situation: Two program leads need a documented decision on competing access to the only available security reviewer.

D:

Inspect team agreements, sources of disagreement, escalation history, feedback, and clarity of responsibilities. That evidence would investigate Team stages and constructive conflict, not the main uncertainty in this situation. To decide the current case, examine: Inspect reporting lines, resource calendar, matrix authority, other project commitments, and escalation paths. Situation: Two program leads need a documented decision on competing access to the only available security reviewer.

Question 350

A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update. Which TWO complementary steps provide the best response AND its necessary supporting assessment? Select TWO.

  1. Classify project records by sensitivity and restrict access to people with a genuine business need rather than making all collaboration files public.
  2. Inspect maintenance approval, affected services, backup or restore readiness, customer communication, and validation checks.
  3. Protect project locations and removable storage with approved access, custody, disposal and visitor controls.
  4. Sensitive records are handled only for approved purposes, with restricted access and recorded controls appropriate to their classification.
  5. Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices.

Explanation

Correct Answers

C:

Protect project locations and removable storage with approved access, custody, disposal and visitor controls. This targets the specific project decision. Physical security remains necessary even for cloud projects; an unlocked device or uncontrolled removable drive can bypass digital safeguards. Before committing, assess: Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. It complements the associated assessment evidence. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.

E:

Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. This checks the relevant condition before the team intervenes. Physical security remains necessary even for cloud projects; an unlocked device or uncontrolled removable drive can bypass digital safeguards. The controlled response is: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. It complements the associated implementation step. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.

Incorrect Answers

A:

Classify project records by sensitivity and restrict access to people with a genuine business need rather than making all collaboration files public. This is useful for Data classification and need-to-know permissions but is not one of the complementary steps for this case. The appropriate paired decision combines: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. and Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.

B:

Inspect maintenance approval, affected services, backup or restore readiness, customer communication, and validation checks. This is useful for Infrastructure maintenance window and rollback but is not one of the complementary steps for this case. The appropriate paired decision combines: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. and Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.

D:

Sensitive records are handled only for approved purposes, with restricted access and recorded controls appropriate to their classification. This is useful for Personally identifiable information and health data but is not one of the complementary steps for this case. The appropriate paired decision combines: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. and Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.

CompTIA Project+ (PK0-005) Practice Tests