CSPM Security Project Execution & Monitoring 2

Question 1

During execution of a security project, a critical vulnerability is discovered in a third-party library used by the system under development. What is the BEST immediate action?

Accepted Answer

Raise a risk event, assess impact, and escalate per the risk management plan

Answer

Discovering a vulnerability during execution requires raising a risk event, assessing its impact on project scope and timeline, and escalating according to the pre-defined risk management plan.

Question 2

Which monitoring technique involves comparing planned security deliverables against actual completions using a cumulative S-curve?

Accepted Answer

Earned Value Management (EVM)

Answer

Earned Value Management uses S-curves to plot cumulative planned value against earned value and actual cost, enabling performance assessment of security deliverables.

Question 3

A security project manager notices the Schedule Performance Index (SPI) is 0.82. What does this indicate?

Accepted Answer

The project is behind schedule — only 82% of planned work is complete

Answer

An SPI below 1.0 means the project is behind schedule; an SPI of 0.82 means only 82 cents of planned work has been accomplished for every dollar of scheduled work.

Question 4

What is the PRIMARY purpose of a security project status report during the monitoring phase?

Accepted Answer

To communicate current progress, risks, and issues to stakeholders

Answer

Status reports during monitoring primarily serve to communicate current project health, including progress against the baseline, active risks, and open issues to stakeholders.

Question 5

When conducting security control testing during project execution, which approach ensures coverage without duplicating effort?

Accepted Answer

Use a requirements traceability matrix to map controls to test cases

Answer

A requirements traceability matrix links each security control requirement to specific test cases, ensuring complete coverage while preventing redundant testing efforts.

(CSPM) Certified Security Project Manager Practice Test

(CSPM) Certified Security Project Manager Practice Test

CSPM Security Project Execution & Monitoring 2