Question 390
A migration project wants to lower the probability of data loss by rehearsing backup recovery before cutover. Which result BEST demonstrates that the project-management response met the stated need?
Explanation
Correct Answer
The selected treatment is documented, funded when required, and the remaining exposure is accepted by an authorized owner. This is an observable measure of the intended outcome, not just evidence that a meeting or configuration occurred. Negative risk strategies have different effects: mitigation reduces likelihood or impact, transfer reallocates consequences, avoidance eliminates exposure, and acceptance retains it. Situation: A migration project wants to lower the probability of data loss by rehearsing backup recovery before cutover.
Incorrect Answers
A deliberately vulnerable dependency stops the release before production and its remediation is traceable to a team owner. That outcome tests DevSecOps security in delivery; it is not proof of this particular requirement. The more specific validation is: The selected treatment is documented, funded when required, and the remaining exposure is accepted by an authorized owner. Situation: A migration project wants to lower the probability of data loss by rehearsing backup recovery before cutover.
High-priority exposures have review dates, justified response owners, and contingency triggers rather than being treated as current defects. That outcome tests Qualitative risk probability and impact; it is not proof of this particular requirement. The more specific validation is: The selected treatment is documented, funded when required, and the remaining exposure is accepted by an authorized owner. Situation: A migration project wants to lower the probability of data loss by rehearsing backup recovery before cutover.
Only approved extensions appear in the work plan, while rejected or deferred requests remain visible but uncommitted. That outcome tests Scope creep and baseline integrity; it is not proof of this particular requirement. The more specific validation is: The selected treatment is documented, funded when required, and the remaining exposure is accepted by an authorized owner. Situation: A migration project wants to lower the probability of data loss by rehearsing backup recovery before cutover.


