Free Practice Questions for CompTIA PK0-005 Exam

The data type most directly associated with compliance controls for websites is credit card (payment card) data. Payment card information is regulated by strict industry security requirements (commonly aligned with PCI DSS) and is a prime example of sensitive data that must be protected through confidentiality, access controls, encryption, logging, and secure handling procedures. PCI DSS is specifically focused on securing payment card data.

CompTIA Project+ includes compliance and privacy considerations and information security concepts that impact projects, including data confidentiality and data security, as well as awareness of applicable privacy regulations and organizational compliance concerns. When a designer confirms “controls are in place,” the primary intent is that regulated/sensitive data is protected by those controls.

The distractors are less fitting: mission statements are public-facing strategic content; trademarks relate to intellectual property/branding; and site certificates are security assets used to enable encrypted communication, but they are not the same as the customer data type being protected for compliance. The question is asking which data type would be protected by compliance controls—credit card data is the clearest, most regulated choice.

The project manager has taken a risk mitigation approach by buying the item from another vendor who can supply it immediately. Risk mitigation is a strategy that involves reducing the probability and/or impact of a negative risk to an acceptable level. By purchasing the item from another vendor, the project manager has reduced the impact of the delay on the project schedule, even though it may have increased the project cost. Risk mitigation is different from risk transfer, which involves shifting the responsibility or burden of a risk to a third party, usually through a contract or insurance. Risk acceptance is a strategy that involves acknowledging the risk and being prepared to deal with its consequences. Risk sharing is a strategy that involves allocating some or all of the ownership of a risk to another party who is willing to take on that risk, usually for some form of incentive or reward. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 7: Risk Management1; CompTIA Project+ Certification Study Guide, 3rd Edition, Chapter 7: Risk Management2

To validate that a project has been successfully completed. The intent and purpose of a project closeout report is to validate that a project has been successfully completed and to summarize the goals, objectives, and outcomes of the project, as well as the lessons learned and the feedback from stakeholders. A project closeout report is a document that is submitted at the end of a project to officially conclude it and release the resources and contracts involved. It is useful for evaluating the project’s success and improving the performance of future projects12

A closure meeting involving the project team and stakeholders is the most appropriate method to finalize the handoff of deliverables. This meeting ensures that all parties acknowledge the completion of project objectives and agree on the transition of deliverables.

Per the CompTIA Project+ PK0-005 exam objectives, under Domain 2.5: Explain the importance of activities performed during the closing phase, conducting a closure meeting is essential for formal acceptance and documentation of project completion.