Free Practice Questions for CompTIA PK0-005 Exam

The system is lacking proper access controls if a third-party vendor was able to see secured project information in a recently implemented system that resulted in a fine for the organization. Access controls are security mechanisms that regulate who or what can view, use, or modify data or resources in a system or network. Access controls typically involve authentication and authorization processes that verify the identity and permissions of users or devices before granting them access. Access controls can help to protect data confidentiality, integrity, and availability and prevent unauthorized access, misuse, or theft12

Option C shows a graph that most likely represents the observed relationship in this scenario. The graph shows a learning curve, which is a graphical representation of the relationship between a learner’s performance on a task and the number of attempts or time required to complete the task. The learning curve theory proposes that a learner’s efficiency in a task improves over time the more the learner performs the task. In this case, the IT intern was able to complete more set-ups in less time as they gained more experience and proficiency over the two-week rotation12

When a project manager achieves a compromise, it often means that stakeholders may not be entirely satisfied with the outcome. However, compromise is sometimes necessary to balance differing needs, consistent with CompTIA Project+ principles on stakeholder management and negotiation.

The first priority for a PM inheriting a project midstream is to access and review the existing project artifacts—the documented “source of truth” that shows what was approved, what has changed, current status, and remaining work. CompTIA Project+ emphasizes maintaining project documentation and artifacts, and it explicitly includes “Review existing artifacts” as a key activity as a PM gets oriented to the project context.

By reviewing artifacts (charter, scope baseline/WBS or backlog, schedule, budget, risk register, issue log, change control log, stakeholder list, communication plan, testing/quality plans, and current reports), the PM can quickly understand: current phase, constraints, commitments, open risks/issues, and what decisions have already been made. That enables accurate next actions and prevents contradictory communication or rework.

A brainstorming session (B) is not the best “first” step without understanding current constraints and decisions. A kickoff meeting (C) is typically for initiation; mid-project, the PM may run a transition meeting later, but only after reviewing the facts. Establishing communication channels (D) is important, but you can’t communicate effectively until you know the baseline status and existing governance approach—information found in the artifacts.

For distributed teams, the most effective collaboration choices are a wiki knowledge base (B) and real-time, multiauthoring editing software (E). A wiki provides an asynchronous, searchable “single source of truth” for decisions, requirements, policies, and how-to guidance—critical when time zones make live coordination difficult. Real-time multiauthoring tools enable multiple people to co-edit documents simultaneously, reducing version conflicts and speeding convergence on shared outputs (plans, specs, release notes, retrospectives). CompTIA Project+ references collaboration tooling and knowledge management practices (e.g., knowledge bases/content management) as part of effective communication and documentation across teams. ()

Real-time surveys/polling can help gather quick feedback but is not a primary collaboration backbone. Spreadsheets can be collaborative, but they are not as broadly enabling for knowledge capture and joint authoring across varied artifact types. “Meetings/face-to-face” is explicitly difficult across regions and time zones and is not scalable as the primary method. Charting/diagramming is useful, but without a shared knowledge base and co-authoring workspace it’s incomplete.

So, to best enable cross-region collaboration, choose wiki knowledge base and real-time multiauthoring editing software. ()

Encryption is the process of transforming data into an unreadable format that can only be accessed by authorized parties who have the decryption key. Encryption is the best approach for the project manager to keep the PII confidential, as it protects the data from unauthorized access during storage and transmission12.

Home address and date of birth must be protected as personally identifiable information (PII). PII is any information that can be used to identify, contact, or locate an individual person, either alone or in combination with other sources. PII can include information such as name, email address, phone number, social security number, passport number, driver’s license number, bank account number, credit card number, biometric data, medical records, etc. PII must be protected from unauthorized access, use, disclosure, modification, or destruction to prevent identity theft, fraud, or other malicious activities that may harm the individual’s privacy or security.

First name, last name, and address are Personally Identifiable Information (PII) because they can identify (directly or when combined with other data) a specific individual. CompTIA Project+ includes compliance/privacy and information handling considerations relevant to projects, and knowing common sensitive data categories is part of applying appropriate controls.

The other options don’t fit: PCI refers to payment card information standards/data (e.g., card numbers, CVV) rather than general identity details. PHI is Protected Health Information, tied to healthcare/medical data and regulated in healthcare contexts. CMS typically refers to a content management system, which is a technology platform, not a data classification category.

Correctly identifying data as PII matters because it drives project requirements for security and privacy: access control (need-to-know/least privilege), encryption in transit/at rest, retention rules, logging, and potentially regulatory obligations depending on jurisdiction. As the PM coordinates database design decisions with stakeholders, labeling these fields as PII ensures the team applies the correct controls and avoids accidental exposure—like overly broad access or insecure storage—throughout development, testing, and production deployment.

Multiple undefined tasks would favor using the agile methodology to manage an upcoming project. Agile methodology is a project management framework that breaks projects down into several dynamic phases, commonly known as sprints. Agile methodology is an iterative and adaptive approach that allows teams to respond to changing requirements and customer feedback quickly and effectively. Agile methodology is suitable for projects that have multiple undefined tasks, as it enables teams to prioritize and deliver the most valuable features first, and refine and improve them over time based on user input and testing12