CompTIA PK0-005 - CompTIA Project+ Certification (2025)

Limiting access to members of the project team is a way to minimize the risk of compromising the project details if a cloud service is used. This means that only authorized and trusted individuals can access, view, modify, or share the project information stored in the cloud. Limiting access can prevent unauthorized access, data leakage, cyberattacks, or espionage from external parties who might want to steal or sabotage the new technology. Limiting access can also reduce the risk of human error, negligence, or misconduct from internal parties who might accidentally or intentionally expose or misuse the project information123. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 4: Project Communications, p. 143; Cloud Security Risks and How to Mitigate Them | Cloud Academy; Cloud Security: How to Secure Your Data in the Cloud | Kaspersky; Cloud Security: Best Practices for Securing Cloud Computing | Cloud Security Alliance

A Sprint Review involves reviewing the completed backlog items and presenting the work to stakeholders. This aligns with CompTIA Project+ agile practices, where a Sprint Review focuses on completed tasks and feedback.

A Gap Analysis is a method used to compare the current performance or state of a product with its desired future state. It helps identify the "gaps" between the two states and determine necessary actions to bridge those gaps.

Per the CompTIA Project+ PK0-005 exam objectives, under Domain 2.5: Explain the importance of activities performed during the closing phase, conducting evaluations like gap analyses is vital for assessing project outcomes and planning improvements.

A rollback plan, also known as a backout plan, is a strategy designed to reverse changes made during a project in case of failure or undesired results1. A rollback plan is a form of risk response that allows the project to restore the previous state and minimize the impact of the issue. A rollback plan is usually created during the planning phase and implemented during the execution or closing phase of the project. The other options are not correct because:

A compliance check is a process that ensures that the project meets the relevant standards, regulations, and requirements. A compliance check is not a risk response, but rather a quality control or assurance activity.

A release plan is a document that outlines the scope, schedule, and resources for delivering a product or service to the customer. A release plan is not a risk response, but rather a communication or scope management tool.

A validation check is a process that verifies that the project deliverables meet the customer’s needs and expectations. A validation check is not a risk response, but rather a quality control or assurance activity. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 10: Executing and Closing Projects, page 314; CompTIA Project+ Certification Exam Objectives, Domain 3: Project Execution, Objective 3.2: Given a scenario, execute and monitor project tasks using traditional methodologies; Backout Plan - DevX

Multifactor authentication (MFA) is a security method that requires users to provide two or more pieces of evidence to verify their identity before accessing a system. MFA can use different types of factors, such as something the user knows (e.g., password, PIN, security question), something the user has (e.g., token, smart card, mobile device), or something the user is (e.g., fingerprint, face, voice). MFA provides a layered approach to logging in to systems that contain an organization’s most valuable intellectual property, as it makes it harder for unauthorized users to gain access by compromising one factor alone. MFA can also prevent phishing, brute force, and credential theft attacks12. References = CompTIA Project+ PK0-005 Certification Study Guide,

The waterfall methodology is a project management framework that follows a linear and sequential process, where each stage of the project must be completed before moving on to the next one. The stages of the waterfall model are initiation, planning, execution, and closure, as described in the question12.

When onboarding new staff who will handle sensitive data, the PM must first verify their security clearance or authorization. Only authorized personnel should access sensitive systems or datasets. Training follows after confirming clearance. Data analysis itself should never begin until security requirements are validated.

PaaS (Platform as a Service) provides a platform allowing developers to build and deploy applications quickly. It offers development tools and integrations with the operating system, which speeds up development and delivery. This model is highlighted in CompTIA Project+ as ideal for software development environments.