PMI-ACP Cheat Sheet 2026

The 30 highest-yield PMI-ACP facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. A cumulative flow diagram (CFD) in agile is used to visualize: → The distribution of work across different states over time
2. What is the most important competency assessed in Application Security & Development for professionals in this field? → Applied knowledge and practical problem-solving ability
3. In agile release planning, what is the concept of a 'minimal marketable feature' (MMF)? → The smallest chunk of functionality that delivers meaningful value to the customer
4. Which agile methodology uses time-boxed iterations called 'Sprints' that typically last 1 to 4 weeks? → Scrum
5. The DSDM (Dynamic Systems Development Method) framework is based on which underlying philosophy? → Fix time and resources while allowing scope to be adjusted
6. Which best describes the scope of Operating Systems & Platforms in professional practice? → A comprehensive area covering both theoretical foundations and practical applications
7. Which agile practice allows distributed stakeholders to inspect working software and provide real-time feedback? → Virtual Sprint Reviews using video conferencing
8. In the Cynefin framework, how should communication differ when a project moves from 'complicated' to 'complex' domains? → Switch from expert analysis to probe-sense-respond experimentation
9. In Scrum, the Daily Scrum is a time-boxed event of how long? → 15 minutes
10. A business stakeholder says: 'I don't understand why you keep changing priorities.' What is the BEST response from a Product Owner? → Explain that market feedback and new data justify reprioritization to maximize value
11. What distinguishes inherent risk from residual risk? → Inherent risk exists before controls; residual risk remains after controls are applied
12. What is the recommended approach to staying current in Access Control & Identity Management? → Regular professional development, industry publications, and peer collaboration
13. Why is regular risk reassessment important? → Because the risk landscape changes as conditions, activities, and environments evolve
14. What is the purpose of a risk register? → To document, track, and manage all identified risks throughout a project or operation
15. What is the recommended approach to staying current in Vulnerability Assessment & Penetration Testing? → Regular professional development, industry publications, and peer collaboration
16. How often should compliance procedures be reviewed and updated? → Regularly, and whenever regulations change or new risks are identified
17. A stakeholder continues to request features that are out of scope. What agile technique helps prevent scope creep while maintaining the relationship? → Log requests in a product backlog and explain the trade-off process transparently
18. According to PMI-ACP principles, how frequently should stakeholders receive updates on project progress? → At regular intervals aligned with iteration cadence
19. What is the most important competency assessed in Cryptography & Data Protection for professionals in this field? → Applied knowledge and practical problem-solving ability
20. A newly formed agile team has a remote Product Owner in a different time zone. What practice BEST mitigates communication risks? → Establish overlapping working hours and async communication protocols
21. What is the most important competency assessed in System Administration & Configuration for professionals in this field? → Applied knowledge and practical problem-solving ability
22. What common challenge do professionals face when applying Access Control & Identity Management principles? → Balancing theoretical best practices with practical constraints and real-world conditions
23. Which type of agile planning focuses on a single iteration and determines what the team will work on during that timebox? → Iteration Planning
24. Which agile practice best ensures ongoing stakeholder alignment throughout a project? → Holding Sprint Reviews at the end of each iteration
25. In agile, what is the purpose of a 'Definition of Done' (DoD) in the context of stakeholder communication? → To create a shared understanding of what 'complete' means for delivered work
26. In agile projects, how should a Scrum Master handle a stakeholder who frequently interrupts the development team with direct requests? → Shield the team by routing requests through the Product Owner
27. Which best describes the scope of Application Security & Development in professional practice? → A comprehensive area covering both theoretical foundations and practical applications
28. What is the most important competency assessed in Operating Systems & Platforms for professionals in this field? → Applied knowledge and practical problem-solving ability
29. A team's velocity has been declining. A stakeholder demands a detailed explanation and recovery plan. What is the BEST first step? → Conduct a retrospective to identify root causes before communicating findings
30. What is the consequence of non-compliance with mandatory regulations? → Penalties including fines, license revocation, and potential legal action