CSPM Security Project Planning 5 — Questions and Answers
Question 1: A security project manager is asked to fast-track a compliance remediation project. What does fast-tracking involve?
- Adding more resources to compress duration
- Performing activities in parallel that were originally planned sequentially (Correct answer)
- Cutting scope to meet the deadline
- Outsourcing tasks to speed delivery
Correct answer: Performing activities in parallel that were originally planned sequentially
Fast-tracking overlaps activities that were originally planned in sequence, reducing overall duration but increasing risk.
Question 2: A CSPM is using a probability and impact matrix during risk planning. Which quadrant receives the highest priority for response planning?
- Low probability, high impact
- High probability, low impact
- High probability, high impact (Correct answer)
- Low probability, low impact
Correct answer: High probability, high impact
Risks with both high probability and high impact represent the greatest threat and require the most urgent response planning.
Question 3: When planning vendor selection for a security tool procurement, which document formally describes the requirements that vendors must address in their proposals?
- Statement of Work (SOW)
- Request for Proposal (RFP) (Correct answer)
- Memorandum of Understanding (MOU)
- Service Level Agreement (SLA)
Correct answer: Request for Proposal (RFP)
An RFP solicits detailed proposals from vendors, specifying requirements, evaluation criteria, and submission instructions.
Question 4: A security project's schedule shows activities with float (slack). What does float indicate?
- The activity is on the critical path
- The amount of time an activity can be delayed without delaying the project (Correct answer)
- The budget reserved for schedule overruns
- The number of resources available for the activity
Correct answer: The amount of time an activity can be delayed without delaying the project
Float (or slack) is the amount of time an activity can be delayed without affecting the project's overall completion date.
Question 5: Which planning process group activity ensures that the security project's quality standards and metrics are defined before work begins?
- Quality control
- Quality assurance
- Plan quality management (Correct answer)
- Quality auditing
Correct answer: Plan quality management
Plan Quality Management identifies the relevant quality standards and determines how to satisfy them throughout the project.
Question 6: A security project manager is creating a network diagram and notices a lag of 5 days between two tasks. This means:
- The second task starts 5 days before the first task finishes
- There is a required wait of 5 days between the end of the predecessor and the start of the successor (Correct answer)
- The first task is 5 days behind schedule
- Both tasks share 5 days of float
Correct answer: There is a required wait of 5 days between the end of the predecessor and the start of the successor
Lag introduces a deliberate delay between the finish of a predecessor and the start of a successor activity.
Question 7: During security project planning, the project manager establishes a management reserve. What is the purpose of management reserve?
- To fund approved scope changes requested by the sponsor
- To cover unknown unknown risks that were not identified during planning (Correct answer)
- To compensate for cost overruns on identified risks
- To pay for quality audits at project closure
Correct answer: To cover unknown unknown risks that were not identified during planning
Management reserve is withheld from the cost baseline to address unknown unknowns — unforeseeable events outside the project scope.
CSPM Security Project Planning 5
A security project manager is asked to fast-track a compliance remediation project.
What does fast-tracking involve?