CompTIA Project+ Practice Tests, Chapter #4 questions #106-158

For a sustainable-driven company, which of the following is not an area to be evaluated when planning the procurement activities of a proiect?

• Suppliers' past performance or reputation

• 1. Unique local requirements of the supplier or project site

• 1. Focus on lowest bidder to control costs

• The sustainable goals of the provider

Answer explanation

While viewed in a silo, a focus on lowest-cost bidder alone could be detrimental to as buyer's vision, mission statement, and values.

However, it is important to realize there still may be a business driver to focus on keeping costs low to stay on budget. Low costs are not a unique sustainability factor

Risk management focuses on identifying all the positive and negative events that might impact the success of a project or activity.

Which of the following would be considered a nontechnical risk?

• Project budget is lacking to complete the project.

• Local regulations require 30 percent of the project team to live within the country.

• 1. The speed to market of the product will determine the market winner.

• 1. The time to complete the project is insufficient for the requirements requested.

Answer explanation

Time, budget, and scope are all technical issues related to project management.

Awareness of applicable regulations and standards would be an environmental, social, and governance risk factor, or not technical to the core project itself.

WigitCom has a project to open a store in a new country in which it has never done business before.

This new country has laws called the consumer bill of rights, which outline a company's responsibility to collecting private data as well as a consumer's ability to see and/or restrict the collection of this data.

Which ESG factor would influence WigitCom's project activities?

• Project impact to the local and global environment

• 1. Awareness of appliable regulations and standards

• 1. Awareness of company vision, mission statements, and values

• Project impact to company brand value

Answer explanation

1. Organizations and their project teams must be alert to the interests of the broader stakeholder community.

3. In this instance, the regulations and standards of the new country will absolutely inform how the business will conduct business in-country.

5. Moreover, in an era of global technology companies, one country's laws may force the entire company to adhere to their expectations such as in the cases of personally identifiable information collection.

In May 2018, Europe enacted the GDPR with widespread implications to privacy and the treatment of data.

What does GDPR stand for?

• Greater Data Privacy and Remediation

• General Data Protection Regulation

• Greater Discovery for Protecting Remote Access

• General Data Privacy Regulation

Answer explanation

1. While the GDPR acronym may not be on the test, it was one of the first major privacy laws and it informs how data is treated today.

3. Knowing about the GDPR and its components can help you prepare for the exam and prepare you for when you are a project manager in the real world.

The Payment Card Industry Data Security Standards (PCI DSS) address the handling and management of payment card data.

This act covers all aspects of payment card data handling, including acquiring, transmitting, storing, and processing these data.

What is the PCI DSS an example of?

• Industry-specific compliance

• Personally identifiable information

• Regulatory impacts

• Country-specific privacy stipulation

Answer explanation

Financial services worldwide need to make sure they are PCI-DSS compliant to protect payment card handling and sort out vulnerabilities.

The Sarbanes-Oxley Act is a 2002 U.S. law and was enacted to protect against fraudulent financial transactions by corporations.

Sarbanes-Oxley would be an example of which compliance consideration?

• 1. Industry-specific compliance

• Protected health information

• Country-specific compliance regulation

• National security information

Answer explanation

1. This question provides an example of a country-specific compliance situation.

3. Being aware of this and similar laws will help provide context to questions on the exam.

5. More-over, it will help you prepare for real-world project management situations you might face.

Deploying a new information system into production while failing to safeguard security and privacy would have all of these inherent risks EXCEPT:

• Disclosure of information

• 1. Unauthorized access to systems and information

• Failing a project gate review

• Breach of legal requirements

Answer explanation

1. Disclosure of information, unauthorized access to systems and information, and legal breaches would all be risks that failing to properly design and deploy information systems would have.

All of the following are used in an Agile approach to project management EXCEPT:

• Burndown charts

• WBS

• Continuous requirements gathering

• Sprint planning

Answer explanation

1. The work breakdown structure is characteristic of a more deliberate, up-front requirements gathering where many of the requirements are identified early in the project.

Which information security concept addresses where and how your data is stored?

• Digital security

• Physical security

• 1. Network and system security

• Application security

Answer explanation

1. Physical security guides all parameters regarding where and how your data is stored. In addition to organization and project requirements, remember that different states and countries have very specific laws governing data security.

Sam has been assigned to work remotely in the United States on a project in South America.
Why might Sam have to take additional precautions to store data beyond his company's ordinary data practices?

• 1. To enhance the brand value to the company brought on by the project

• To protect national security information since data is flowing internationally

• To align to local security laws governing where and how to store data

• 1. To take advantage of a new data warehouse being constructed

Answer explanation

1. Operating in a different state or country than the project or product team members are accustomed to can mean your data storage practices do not align with the needs or legal considerations of your customer.