Question 890
A contractor photographs confidential racks during a site visit without receiving visitor authorization. Which project-management response BEST addresses the stated need?
Explanation
Correct Answer
Protect project locations and removable storage with approved access, custody, disposal and visitor controls. This targets the specific project decision. Physical security remains necessary even for cloud projects; an unlocked device or uncontrolled removable drive can bypass digital safeguards. Before committing, assess: Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. Situation: A contractor photographs confidential racks during a site visit without receiving visitor authorization.
Incorrect Answers
Match cloud service models to who manages applications, operating systems, platforms and underlying infrastructure for an IT project. That response is associated with SaaS PaaS and IaaS cloud responsibility and does not directly settle this case. Its relevant principle is: IaaS exposes infrastructure management, PaaS abstracts more platform maintenance, and SaaS provides a complete application with continuing customer identity and data duties. The stated case instead calls for: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. Situation: A contractor photographs confidential racks during a site visit without receiving visitor authorization.
Assess environmental, accessibility and community impacts of project options and include proportional mitigation in the business case. That response is associated with Environmental and social project impact and does not directly settle this case. Its relevant principle is: ESG evaluation considers environmental and social consequences alongside governance duties, not solely the cheapest technical design. The stated case instead calls for: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. Situation: A contractor photographs confidential racks during a site visit without receiving visitor authorization.
Apply appropriate multifactor authentication and task-scoped permissions to project systems that contain sensitive data. That response is associated with Multifactor authentication and least privilege and does not directly settle this case. Its relevant principle is: MFA reduces reliance on a password alone; least privilege separately limits what a successfully authenticated identity may do. The stated case instead calls for: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. Situation: A contractor photographs confidential racks during a site visit without receiving visitor authorization.


