PMI Agile Certified Practitioner (PMI-ACP)® — Questions and Answers

Question 1: Which of the following best describes a Definition of Done (DoD) in Scrum?

A list of acceptance criteria for a single user story
The set of features planned for the next release
A shared understanding of what it means for work to be complete (Correct answer)
The product backlog items selected for the current sprint

Correct answer: A shared understanding of what it means for work to be complete

The Definition of Done is a shared agreement across the Scrum Team about the quality standards that must be met before an increment is considered complete.

Question 2: What is the relationship between System Administration & Configuration and ethical professional conduct?

There is no connection between technical knowledge and ethics
Ethics is relevant only when legal issues arise
Ethics applies only to separate, unrelated decisions
Ethical considerations are integrated into all aspects of professional practice in this area (Correct answer)

Correct answer: Ethical considerations are integrated into all aspects of professional practice in this area

Ethical considerations are deeply integrated into System Administration & Configuration, as professional conduct and integrity underpin all aspects of practice in this field.

Question 3: What is the recommended approach to staying current in Vulnerability Assessment & Penetration Testing?

Reviewing initial training materials once per year
Waiting for regulatory changes to force updates
Relying solely on past experience
Regular professional development, industry publications, and peer collaboration (Correct answer)

Correct answer: Regular professional development, industry publications, and peer collaboration

Staying current in Vulnerability Assessment & Penetration Testing requires ongoing professional development, reading industry publications, and collaborating with peers to share knowledge and best practices.

Question 4: Which agile framework is best described as a lightweight framework within which people can address complex adaptive problems?

Lean
Crystal
Kanban
Scrum (Correct answer)

Correct answer: Scrum

The official Scrum Guide defines Scrum as a lightweight framework for addressing complex adaptive problems while delivering high-value products.

Question 5: In agile release planning, what is the concept of a 'minimal marketable feature' (MMF)?

The feature with the lowest development cost
A feature that can be completed within a single sprint
The smallest chunk of functionality that delivers meaningful value to the customer (Correct answer)
The most frequently requested feature in the product backlog

Correct answer: The smallest chunk of functionality that delivers meaningful value to the customer

An MMF is the smallest set of functionality that provides enough value that a customer would pay for it or recognize its benefit, enabling early value delivery.

Question 6: A business stakeholder says: 'I don't understand why you keep changing priorities.' What is the BEST response from a Product Owner?

Defer the question to the Scrum Master to handle
Explain that market feedback and new data justify reprioritization to maximize value (Correct answer)
Apologize and commit to freezing the backlog going forward
Agree to stop changing priorities to avoid conflict

Correct answer: Explain that market feedback and new data justify reprioritization to maximize value

Agile embraces change as a competitive advantage; the Product Owner should explain how responding to new information maximizes delivered business value.

Question 7: In the Cynefin framework, which domain requires sensing, analyzing, and responding where cause-and-effect are not immediately apparent?

Simple
Chaotic
Complex (Correct answer)
Complicated

Correct answer: Complex

In the Complex domain, cause-and-effect can only be understood in retrospect, requiring probe-sense-respond approaches.

Question 8: A product owner discovers that two key stakeholders have conflicting priorities for the next release. What is the BEST approach?

Implement both priorities simultaneously to satisfy everyone
Facilitate a prioritization session using relative ranking techniques (Correct answer)
Defer both features to a future release to avoid conflict
Let the development team decide which feature to build first

Correct answer: Facilitate a prioritization session using relative ranking techniques

Facilitating collaborative prioritization sessions (e.g., MoSCoW or dot voting) helps stakeholders reach consensus on relative value.

Question 9: Which approach to compliance is considered most effective?

Hiring a consultant once a year for a brief review
A reactive approach that addresses issues only after violations
Focusing compliance efforts only on areas that have been cited previously
A proactive approach that integrates compliance into daily operations (Correct answer)

Correct answer: A proactive approach that integrates compliance into daily operations

A proactive compliance approach that integrates regulatory requirements into daily operations is most effective at preventing violations and maintaining standards.

Question 10: In agile estimation, what unit is commonly used to represent the relative size or complexity of a user story?

Story Points (Correct answer)
Hours
Function Points
Days

Correct answer: Story Points

Story points are a relative unit of measure used in agile to estimate the effort, complexity, and uncertainty of user stories.

Question 11: During Sprint Planning, a stakeholder insists on adding new items to the Sprint backlog mid-session. What should the Scrum Master do?

End Sprint Planning and restart with the new requirements
Accept items only if they replace items of equal size
Acknowledge the request and route new items through the Product Owner for backlog refinement (Correct answer)
Add the items immediately since stakeholders have final authority

Correct answer: Acknowledge the request and route new items through the Product Owner for backlog refinement

New scope requests should go through the Product Owner for proper prioritization and backlog refinement rather than disrupting committed Sprint scope.

Question 12: How does Vulnerability Assessment & Penetration Testing contribute to overall professional effectiveness?

It provides essential knowledge and skills that directly impact quality of work and outcomes (Correct answer)
It applies only to supervisory-level professionals
It is relevant only during the certification examination
It serves only as a credential requirement with no practical impact

Correct answer: It provides essential knowledge and skills that directly impact quality of work and outcomes

Vulnerability Assessment & Penetration Testing directly contributes to professional effectiveness by providing essential knowledge and skills that improve the quality of work and outcomes across all career levels.

Question 13: A cumulative flow diagram (CFD) in agile is used to visualize:

The distribution of work across different states over time (Correct answer)
The number of defects discovered in each iteration
The burndown of story points within a sprint
The team's velocity trend over multiple sprints

Correct answer: The distribution of work across different states over time

A CFD shows the number of work items in each workflow state over time, revealing bottlenecks and the flow efficiency of the team.

Question 14: Which principle from the Agile Manifesto states that working software is delivered frequently, with a preference for a shorter timescale?

Principle 11
Principle 7
Principle 3 (Correct answer)
Principle 1

Correct answer: Principle 3

Agile Principle 3 states: deliver working software frequently, from a couple of weeks to a couple of months, with a preference for the shorter timescale.

Question 15: Which best describes the scope of Cloud Computing & Virtualization in professional practice?

A narrow topic relevant only to entry-level professionals
A theoretical framework with no practical applications
An outdated concept no longer relevant to modern practice
A comprehensive area covering both theoretical foundations and practical applications (Correct answer)

Correct answer: A comprehensive area covering both theoretical foundations and practical applications

Cloud Computing & Virtualization encompasses both theoretical foundations and practical applications that are essential to professional practice in this field.

Question 16: Which agile estimation technique involves team members simultaneously revealing their estimates to avoid anchoring bias?

T-shirt Sizing
Affinity Estimation
Planning Poker (Correct answer)
Dot Voting

Correct answer: Planning Poker

Planning Poker uses simultaneous card reveals so that individual estimates are not influenced by what others say first, reducing anchoring bias.

Question 17: In Scrum, the Daily Scrum is a time-boxed event of how long?

1 hour
30 minutes
15 minutes (Correct answer)
45 minutes

Correct answer: 15 minutes

The Daily Scrum is a 15-minute event for the Development Team to synchronize activities and create a plan for the next 24 hours.

Question 18: What is the recommended approach to staying current in Threat Detection & Incident Response?

Relying solely on past experience
Regular professional development, industry publications, and peer collaboration (Correct answer)
Waiting for regulatory changes to force updates
Reviewing initial training materials once per year

Correct answer: Regular professional development, industry publications, and peer collaboration

Staying current in Threat Detection & Incident Response requires ongoing professional development, reading industry publications, and collaborating with peers to share knowledge and best practices.

Question 19: In agile, what is 'progressive elaboration'?

Continuously refining plans and estimates as more information becomes available (Correct answer)
Adding more team members as the project grows in scope
Using retrospectives to improve team processes each sprint
Breaking user stories into smaller tasks during sprint planning

Correct answer: Continuously refining plans and estimates as more information becomes available

Progressive elaboration is the iterative process of increasing the level of detail in a project plan as more information and understanding become available.

Question 20: What is the most important competency assessed in Cryptography & Data Protection for professionals in this field?

Applied knowledge and practical problem-solving ability (Correct answer)
Memorization of textbook definitions only
Academic credentials without practical application
Years of experience without demonstrated skill

Correct answer: Applied knowledge and practical problem-solving ability

Cryptography & Data Protection assessment focuses on applied knowledge and practical problem-solving ability, ensuring professionals can effectively perform in real-world situations.

Question 21: What is the most important competency assessed in Threat Detection & Incident Response for professionals in this field?

Applied knowledge and practical problem-solving ability (Correct answer)
Years of experience without demonstrated skill
Academic credentials without practical application
Memorization of textbook definitions only

Correct answer: Applied knowledge and practical problem-solving ability

Threat Detection & Incident Response assessment focuses on applied knowledge and practical problem-solving ability, ensuring professionals can effectively perform in real-world situations.

Question 22: How does Access Control & Identity Management contribute to overall professional effectiveness?

It is relevant only during the certification examination
It applies only to supervisory-level professionals
It serves only as a credential requirement with no practical impact
It provides essential knowledge and skills that directly impact quality of work and outcomes (Correct answer)

Correct answer: It provides essential knowledge and skills that directly impact quality of work and outcomes

Access Control & Identity Management directly contributes to professional effectiveness by providing essential knowledge and skills that improve the quality of work and outcomes across all career levels.

Question 23: Velocity in agile is calculated as:

The number of user stories completed per sprint
The maximum story points a team can commit to in a sprint
The average number of story points completed per iteration (Correct answer)
Total story points in the backlog divided by team size

Correct answer: The average number of story points completed per iteration

Velocity is the average amount of work (in story points) a team completes per sprint, used for forecasting future sprints.

Question 24: How often should compliance procedures be reviewed and updated?

Once at initial certification and never again
Every ten years regardless of changes
Only when an audit is scheduled
Regularly, and whenever regulations change or new risks are identified (Correct answer)

Correct answer: Regularly, and whenever regulations change or new risks are identified

Compliance procedures should be reviewed regularly and updated whenever regulations change, new risks emerge, or organizational changes occur.

Question 25: How does Threat Detection & Incident Response contribute to overall professional effectiveness?

It applies only to supervisory-level professionals
It provides essential knowledge and skills that directly impact quality of work and outcomes (Correct answer)
It is relevant only during the certification examination
It serves only as a credential requirement with no practical impact

Correct answer: It provides essential knowledge and skills that directly impact quality of work and outcomes

Threat Detection & Incident Response directly contributes to professional effectiveness by providing essential knowledge and skills that improve the quality of work and outcomes across all career levels.

Question 26: What is the principle of least privilege in network security?

Access permissions should be updated annually
All users should have administrator access for convenience
New users should receive the same access as their managers
Users should have only the minimum access needed to perform their job functions (Correct answer)

Correct answer: Users should have only the minimum access needed to perform their job functions

The principle of least privilege restricts user access to only the resources and permissions necessary for their specific job functions, minimizing potential damage from compromised accounts.

Question 27: Which formula is used to calculate the number of remaining sprints needed to complete all backlog items?

Completed Stories ÷ Team Size
Remaining Backlog ÷ Average Velocity (Correct answer)
Sprint Velocity × Number of Team Members
Total Story Points × Sprint Length

Correct answer: Remaining Backlog ÷ Average Velocity

Dividing the total remaining story points in the backlog by the team's average velocity gives the estimated number of sprints needed to complete all backlog items.

Question 28: Which agile planning technique uses index cards on a wall to estimate relative story sizes by grouping similar-effort stories together?

Bucket System
Three-Point Estimation
Planning Poker
Affinity Estimation (Correct answer)

Correct answer: Affinity Estimation

Affinity estimation groups stories by relative size quickly by having team members silently move cards into clusters representing similar levels of effort.

Question 29: What is the most important competency assessed in Database Management & Security for professionals in this field?

Memorization of textbook definitions only
Academic credentials without practical application
Years of experience without demonstrated skill
Applied knowledge and practical problem-solving ability (Correct answer)

Correct answer: Applied knowledge and practical problem-solving ability

Database Management & Security assessment focuses on applied knowledge and practical problem-solving ability, ensuring professionals can effectively perform in real-world situations.

Question 30: Which best describes the scope of Application Security & Development in professional practice?

An outdated concept no longer relevant to modern practice
A comprehensive area covering both theoretical foundations and practical applications (Correct answer)
A narrow topic relevant only to entry-level professionals
A theoretical framework with no practical applications

Correct answer: A comprehensive area covering both theoretical foundations and practical applications

Application Security & Development encompasses both theoretical foundations and practical applications that are essential to professional practice in this field.

Question 31: What is the most important competency assessed in Cloud Computing & Virtualization for professionals in this field?

Academic credentials without practical application
Applied knowledge and practical problem-solving ability (Correct answer)
Memorization of textbook definitions only
Years of experience without demonstrated skill

Correct answer: Applied knowledge and practical problem-solving ability

Cloud Computing & Virtualization assessment focuses on applied knowledge and practical problem-solving ability, ensuring professionals can effectively perform in real-world situations.

Question 32: Which stakeholder communication approach is described in the Agile Practice Guide as most effective for managing expectations?

Comprehensive upfront planning that eliminates surprises
Limiting stakeholder access to technical team details
Frequent delivery of working software with transparent progress sharing (Correct answer)
Under-promise and over-deliver on all commitments

Correct answer: Frequent delivery of working software with transparent progress sharing

The Agile Practice Guide emphasizes that frequent delivery of working software combined with transparent reporting manages expectations more effectively than planning promises.

Question 33: What is the recommended approach to staying current in Operating Systems & Platforms?

Regular professional development, industry publications, and peer collaboration (Correct answer)
Reviewing initial training materials once per year
Waiting for regulatory changes to force updates
Relying solely on past experience

Correct answer: Regular professional development, industry publications, and peer collaboration

Staying current in Operating Systems & Platforms requires ongoing professional development, reading industry publications, and collaborating with peers to share knowledge and best practices.

Question 34: What does 'osmotic communication' mean in agile teams?

A structured daily meeting where all project information is shared
Sending information through formal written channels
Information absorbed passively by co-located team members overhearing conversations (Correct answer)
Using project management software to broadcast updates

Correct answer: Information absorbed passively by co-located team members overhearing conversations

Osmotic communication refers to the passive absorption of project information that occurs naturally in a co-located team environment through overheard conversations.

Question 35: What is the primary purpose of industry regulations in this field?

To generate revenue for regulatory bodies
To limit competition in the marketplace
To protect the public and ensure consistent professional standards (Correct answer)
To create barriers to entry for new professionals

Correct answer: To protect the public and ensure consistent professional standards

Industry regulations are primarily designed to protect the public by ensuring professionals meet consistent standards of competence and conduct.

Question 36: What common challenge do professionals face when applying Access Control & Identity Management principles?

Balancing theoretical best practices with practical constraints and real-world conditions (Correct answer)
Obtaining permission to use the principles
The principles are too simple to present any challenge
Finding the relevant textbook chapter

Correct answer: Balancing theoretical best practices with practical constraints and real-world conditions

Professionals commonly face the challenge of adapting theoretical best practices in Access Control & Identity Management to the practical constraints and varying conditions encountered in real-world settings.

Question 37: What common challenge do professionals face when applying System Administration & Configuration principles?

Finding the relevant textbook chapter
The principles are too simple to present any challenge
Balancing theoretical best practices with practical constraints and real-world conditions (Correct answer)
Obtaining permission to use the principles

Correct answer: Balancing theoretical best practices with practical constraints and real-world conditions

Professionals commonly face the challenge of adapting theoretical best practices in System Administration & Configuration to the practical constraints and varying conditions encountered in real-world settings.

Question 38: What is the purpose of intrusion detection systems (IDS)?

To prevent all unauthorized access automatically
To speed up network performance
To manage network IP addresses
To monitor network traffic for suspicious activity and known threats (Correct answer)

Correct answer: To monitor network traffic for suspicious activity and known threats

IDS monitors network traffic for suspicious activity, known attack patterns, and policy violations, alerting administrators to potential security threats.

Question 39: The DSDM (Dynamic Systems Development Method) framework is based on which underlying philosophy?

Always deliver the maximum number of features possible
Fix time and resources while allowing scope to be adjusted (Correct answer)
Fix quality and scope while varying time and resources
Fix time and resources while varying quality to fit

Correct answer: Fix time and resources while allowing scope to be adjusted

DSDM fixes time and resources while allowing scope to vary, ensuring on-time and on-budget delivery of the highest-priority features.

Question 40: Which best describes the scope of Threat Detection & Incident Response in professional practice?

A theoretical framework with no practical applications
A comprehensive area covering both theoretical foundations and practical applications (Correct answer)
An outdated concept no longer relevant to modern practice
A narrow topic relevant only to entry-level professionals

Correct answer: A comprehensive area covering both theoretical foundations and practical applications

Threat Detection & Incident Response encompasses both theoretical foundations and practical applications that are essential to professional practice in this field.

Question 41: What is the relationship between Threat Detection & Incident Response and ethical professional conduct?

There is no connection between technical knowledge and ethics
Ethics is relevant only when legal issues arise
Ethics applies only to separate, unrelated decisions
Ethical considerations are integrated into all aspects of professional practice in this area (Correct answer)

Correct answer: Ethical considerations are integrated into all aspects of professional practice in this area

Ethical considerations are deeply integrated into Threat Detection & Incident Response, as professional conduct and integrity underpin all aspects of practice in this field.

Question 42: Which best describes the scope of Vulnerability Assessment & Penetration Testing in professional practice?

An outdated concept no longer relevant to modern practice
A comprehensive area covering both theoretical foundations and practical applications (Correct answer)
A narrow topic relevant only to entry-level professionals
A theoretical framework with no practical applications

Correct answer: A comprehensive area covering both theoretical foundations and practical applications

Vulnerability Assessment & Penetration Testing encompasses both theoretical foundations and practical applications that are essential to professional practice in this field.

Question 43: Which communication technique is most aligned with the agile value of 'individuals and interactions over processes and tools'?

Formal written status reports distributed weekly
Structured change request forms for all scope modifications
Face-to-face conversation as the preferred communication mode (Correct answer)
A centralized issue-tracking system for all team communications

Correct answer: Face-to-face conversation as the preferred communication mode

The Agile Manifesto explicitly identifies face-to-face conversation as the most efficient and effective method of conveying information.

Question 44: What common challenge do professionals face when applying Vulnerability Assessment & Penetration Testing principles?

The principles are too simple to present any challenge
Balancing theoretical best practices with practical constraints and real-world conditions (Correct answer)
Obtaining permission to use the principles
Finding the relevant textbook chapter

Correct answer: Balancing theoretical best practices with practical constraints and real-world conditions

Professionals commonly face the challenge of adapting theoretical best practices in Vulnerability Assessment & Penetration Testing to the practical constraints and varying conditions encountered in real-world settings.

Question 45: What common challenge do professionals face when applying Threat Detection & Incident Response principles?

The principles are too simple to present any challenge
Balancing theoretical best practices with practical constraints and real-world conditions (Correct answer)
Finding the relevant textbook chapter
Obtaining permission to use the principles

Correct answer: Balancing theoretical best practices with practical constraints and real-world conditions

Professionals commonly face the challenge of adapting theoretical best practices in Threat Detection & Incident Response to the practical constraints and varying conditions encountered in real-world settings.

Question 46: What should be the first action when a new regulation is enacted that affects your practice?

Review the regulation, assess its impact, and develop an implementation plan (Correct answer)
Assume existing procedures already comply
Wait for enforcement before making changes
Delegate review to the newest team member

Correct answer: Review the regulation, assess its impact, and develop an implementation plan

When new regulations are enacted, professionals should promptly review them, assess their impact on current practices, and develop a structured implementation plan.

Question 47: What is the primary purpose of a project charter in an agile context?

To assign detailed tasks to each team member for the entire project
To establish a shared understanding of project goals, scope, and stakeholders (Correct answer)
To serve as the definitive requirements document that cannot be changed
To document all technical architecture decisions upfront

Correct answer: To establish a shared understanding of project goals, scope, and stakeholders

An agile project charter creates initial alignment among stakeholders on vision, goals, and boundaries without locking in rigid requirements.

Question 48: What is the most important competency assessed in Application Security & Development for professionals in this field?

Academic credentials without practical application
Years of experience without demonstrated skill
Applied knowledge and practical problem-solving ability (Correct answer)
Memorization of textbook definitions only

Correct answer: Applied knowledge and practical problem-solving ability

Application Security & Development assessment focuses on applied knowledge and practical problem-solving ability, ensuring professionals can effectively perform in real-world situations.

Question 49: In Lean software development, which concept refers to anything that does not add value from the customer's perspective?

Kanban
Kaizen
Muda (waste) (Correct answer)
Poka-Yoke

Correct answer: Muda (waste)

Muda is a Japanese term meaning waste, referring to activities that consume resources without adding customer value.

Question 50: Which agile practice best ensures ongoing stakeholder alignment throughout a project?

Holding Sprint Reviews at the end of each iteration (Correct answer)
Creating a detailed project charter at the start
Sending weekly status email reports
Conducting annual stakeholder satisfaction surveys

Correct answer: Holding Sprint Reviews at the end of each iteration

Sprint Reviews provide a regular forum for stakeholders to inspect the increment and adapt priorities, ensuring continuous alignment.

Question 51: How does Operating Systems & Platforms contribute to overall professional effectiveness?

It applies only to supervisory-level professionals
It serves only as a credential requirement with no practical impact
It provides essential knowledge and skills that directly impact quality of work and outcomes (Correct answer)
It is relevant only during the certification examination

Correct answer: It provides essential knowledge and skills that directly impact quality of work and outcomes

Operating Systems & Platforms directly contributes to professional effectiveness by providing essential knowledge and skills that improve the quality of work and outcomes across all career levels.

Question 52: In agile planning, what is the purpose of the 'cone of uncertainty'?

To show how estimates become more accurate as a project progresses (Correct answer)
To illustrate how team velocity changes over time
To represent the range of possible sprint velocities
To track the number of risks identified in each iteration

Correct answer: To show how estimates become more accurate as a project progresses

The cone of uncertainty shows that early in a project, estimates have wide variance; as more is learned, the range of uncertainty narrows.

Question 53: A newly formed agile team has a remote Product Owner in a different time zone. What practice BEST mitigates communication risks?

Require the Product Owner to relocate temporarily
Replace the Product Owner with a local business analyst
Establish overlapping working hours and async communication protocols (Correct answer)
Conduct all backlog refinement sessions at 2 AM local time

Correct answer: Establish overlapping working hours and async communication protocols

Establishing overlapping hours for synchronous meetings and using asynchronous tools for other communication balances the need for collaboration with time zone constraints.

Question 54: How does Application Security & Development contribute to overall professional effectiveness?

It applies only to supervisory-level professionals
It serves only as a credential requirement with no practical impact
It provides essential knowledge and skills that directly impact quality of work and outcomes (Correct answer)
It is relevant only during the certification examination

Correct answer: It provides essential knowledge and skills that directly impact quality of work and outcomes

Application Security & Development directly contributes to professional effectiveness by providing essential knowledge and skills that improve the quality of work and outcomes across all career levels.

Question 55: What does the concept of an 'information radiator' mean in agile communication?

A tool that automatically sends daily emails to stakeholders
A highly visible display of project information accessible to all (Correct answer)
A specialized software for tracking technical debt
A confidential report shared only with senior management

Correct answer: A highly visible display of project information accessible to all

Information radiators are large, visible displays (like task boards or burn-down charts) that passively communicate project status to anyone who sees them.

Question 56: What is the relationship between Access Control & Identity Management and ethical professional conduct?

Ethical considerations are integrated into all aspects of professional practice in this area (Correct answer)
Ethics applies only to separate, unrelated decisions
Ethics is relevant only when legal issues arise
There is no connection between technical knowledge and ethics

Correct answer: Ethical considerations are integrated into all aspects of professional practice in this area

Ethical considerations are deeply integrated into Access Control & Identity Management, as professional conduct and integrity underpin all aspects of practice in this field.

Question 57: What is the relationship between Cloud Computing & Virtualization and ethical professional conduct?

Ethics is relevant only when legal issues arise
There is no connection between technical knowledge and ethics
Ethical considerations are integrated into all aspects of professional practice in this area (Correct answer)
Ethics applies only to separate, unrelated decisions

Correct answer: Ethical considerations are integrated into all aspects of professional practice in this area

Ethical considerations are deeply integrated into Cloud Computing & Virtualization, as professional conduct and integrity underpin all aspects of practice in this field.

Question 58: Which Agile framework uses a visual board with columns representing workflow stages and limits on work-in-progress?

DSDM
Extreme Programming (XP)
Scrum
Kanban (Correct answer)

Correct answer: Kanban

Kanban is characterized by its visual board and WIP (work-in-progress) limits to optimize flow.

Question 59: How does Cloud Computing & Virtualization contribute to overall professional effectiveness?

It is relevant only during the certification examination
It serves only as a credential requirement with no practical impact
It applies only to supervisory-level professionals
It provides essential knowledge and skills that directly impact quality of work and outcomes (Correct answer)

Correct answer: It provides essential knowledge and skills that directly impact quality of work and outcomes

Cloud Computing & Virtualization directly contributes to professional effectiveness by providing essential knowledge and skills that improve the quality of work and outcomes across all career levels.

Question 60: What is the primary purpose of a Sprint Retrospective in Scrum?

To inspect and adapt the team's process for continuous improvement (Correct answer)
To update the Product Backlog with new items
To review the product increment with stakeholders
To plan work for the next Sprint

Correct answer: To inspect and adapt the team's process for continuous improvement

The Sprint Retrospective allows the Scrum Team to inspect itself and create a plan for improvements to be enacted during the next Sprint.

Question 61: Which agile scaling framework uses the concept of an Agile Release Train (ART) to align multiple teams?

LeSS (Large Scale Scrum)
Disciplined Agile Delivery (DAD)
SAFe (Scaled Agile Framework) (Correct answer)
Nexus

Correct answer: SAFe (Scaled Agile Framework)

SAFe's Agile Release Train is a long-lived team of agile teams that incrementally develops, delivers, and operates solutions aligned to a mission.

Question 62: Which agile methodology uses time-boxed iterations called 'Sprints' that typically last 1 to 4 weeks?

Kanban
Scrum (Correct answer)
Crystal Clear
Feature-Driven Development (FDD)

Correct answer: Scrum

Scrum uses fixed-length iterations called Sprints, each producing a potentially releasable product increment.

Question 63: In the Crystal family of methods, which factor primarily determines which Crystal method a team should use?

The budget allocated to the project
The technology stack being used
Team size and project criticality (Correct answer)
The organization's maturity level

Correct answer: Team size and project criticality

Crystal methods are selected based on team size and the criticality of the system being built, ranging from Crystal Clear to Crystal Sapphire.

Question 64: What is the recommended approach to staying current in Cryptography & Data Protection?

Waiting for regulatory changes to force updates
Relying solely on past experience
Reviewing initial training materials once per year
Regular professional development, industry publications, and peer collaboration (Correct answer)

Correct answer: Regular professional development, industry publications, and peer collaboration

Staying current in Cryptography & Data Protection requires ongoing professional development, reading industry publications, and collaborating with peers to share knowledge and best practices.

Question 65: Which best describes the scope of Operating Systems & Platforms in professional practice?

A comprehensive area covering both theoretical foundations and practical applications (Correct answer)
A narrow topic relevant only to entry-level professionals
An outdated concept no longer relevant to modern practice
A theoretical framework with no practical applications

Correct answer: A comprehensive area covering both theoretical foundations and practical applications

Operating Systems & Platforms encompasses both theoretical foundations and practical applications that are essential to professional practice in this field.

Question 66: What does a VPN provide in terms of network security?

Automatic virus removal
Free internet access worldwide
Encrypted communication tunnels over public networks (Correct answer)
Faster internet connection speeds

Correct answer: Encrypted communication tunnels over public networks

A VPN (Virtual Private Network) creates encrypted communication tunnels over public networks, protecting data confidentiality during transmission.

Question 67: In Scrum, who is responsible for maximizing the value of the product resulting from the work of the Development Team?

Development Team Lead
Product Owner (Correct answer)
Project Manager
Scrum Master

Correct answer: Product Owner

The Product Owner is solely responsible for managing the Product Backlog and maximizing the value of the product.

Question 68: What is the purpose of a 'Definition of Ready' (DoR) in agile planning?

To define when a sprint has been successfully completed
To outline the acceptance criteria for the final product
To establish criteria that a user story must meet before it can be taken into a sprint (Correct answer)
To list all tasks that must be done before a release can go live

Correct answer: To establish criteria that a user story must meet before it can be taken into a sprint

The Definition of Ready specifies the minimum criteria a user story must meet (e.g., estimated, clearly defined, testable) before the team can pull it into a sprint.

Question 69: What is the relationship between Database Management & Security and ethical professional conduct?

Ethics applies only to separate, unrelated decisions
There is no connection between technical knowledge and ethics
Ethics is relevant only when legal issues arise
Ethical considerations are integrated into all aspects of professional practice in this area (Correct answer)

Correct answer: Ethical considerations are integrated into all aspects of professional practice in this area

Ethical considerations are deeply integrated into Database Management & Security, as professional conduct and integrity underpin all aspects of practice in this field.

Question 70: The Scaled Agile Framework (SAFe) organizes work at which levels?

Sprint, Release, and Roadmap
Backlog, Board, and Burndown
Team, Program, and Portfolio (Correct answer)
Story, Epic, and Theme

Correct answer: Team, Program, and Portfolio

SAFe operates at the Team, Program, and Portfolio levels to scale agile across large enterprises.

Question 71: What is the recommended approach to staying current in System Administration & Configuration?

Reviewing initial training materials once per year
Regular professional development, industry publications, and peer collaboration (Correct answer)
Relying solely on past experience
Waiting for regulatory changes to force updates

Correct answer: Regular professional development, industry publications, and peer collaboration

Staying current in System Administration & Configuration requires ongoing professional development, reading industry publications, and collaborating with peers to share knowledge and best practices.

Question 72: What does the term 'backlog refinement' (also called grooming) refer to in agile?

Removing completed items from the sprint board
Closing out a release and archiving completed stories
The ongoing process of reviewing, estimating, and prioritizing backlog items (Correct answer)
Re-estimating velocity after a team member leaves

Correct answer: The ongoing process of reviewing, estimating, and prioritizing backlog items

Backlog refinement is the activity of adding detail, estimates, and order to product backlog items to keep it ready for upcoming sprints.

Question 73: What is the relationship between Cryptography & Data Protection and ethical professional conduct?

There is no connection between technical knowledge and ethics
Ethical considerations are integrated into all aspects of professional practice in this area (Correct answer)
Ethics applies only to separate, unrelated decisions
Ethics is relevant only when legal issues arise

Correct answer: Ethical considerations are integrated into all aspects of professional practice in this area

Ethical considerations are deeply integrated into Cryptography & Data Protection, as professional conduct and integrity underpin all aspects of practice in this field.

Question 74: According to PMI-ACP principles, how frequently should stakeholders receive updates on project progress?

At regular intervals aligned with iteration cadence (Correct answer)
Only when major milestones are completed
Only when problems or risks are identified
Annually during formal project reviews

Correct answer: At regular intervals aligned with iteration cadence

Agile emphasizes frequent, regular communication aligned with the iteration rhythm to enable timely feedback and course corrections.

Question 75: Which type of agile planning focuses on a single iteration and determines what the team will work on during that timebox?

Product Vision Planning
Iteration Planning (Correct answer)
Release Planning
Portfolio Planning

Correct answer: Iteration Planning

Iteration (or sprint) planning determines which backlog items the team will work on and how they will accomplish the work in the upcoming iteration.

Question 76: In agile projects, how should a Scrum Master handle a stakeholder who frequently interrupts the development team with direct requests?

Allow direct communication to keep stakeholders informed
Shield the team by routing requests through the Product Owner (Correct answer)
Schedule a weekly meeting for the stakeholder to present all requests
Escalate the issue immediately to senior management

Correct answer: Shield the team by routing requests through the Product Owner

The Product Owner acts as the single point of contact for stakeholder requests, protecting the team's focus during the Sprint.

Question 77: A team's velocity has been declining. A stakeholder demands a detailed explanation and recovery plan. What is the BEST first step?

Commit to a specific velocity number for the next Sprint immediately
Increase working hours to offset the velocity decline
Blame external dependencies to protect the team's reputation
Conduct a retrospective to identify root causes before communicating findings (Correct answer)

Correct answer: Conduct a retrospective to identify root causes before communicating findings

A retrospective allows the team to identify and address root causes of declining velocity before communicating findings and a plan to stakeholders.

Question 78: In Lean, 'pull systems' are used to ensure work is started based on what?

Actual downstream demand or capacity (Correct answer)
Management's prioritized schedule
The total number of backlog items remaining
Team velocity from the previous iteration

Correct answer: Actual downstream demand or capacity

Pull systems ensure that new work is only started when there is actual capacity or demand, preventing overproduction and excess WIP.

Question 79: Which risk response strategy involves reducing the likelihood or impact of a risk?

Risk transfer
Risk escalation
Risk acceptance
Risk mitigation (Correct answer)

Correct answer: Risk mitigation

Risk mitigation involves taking proactive steps to reduce either the probability of a risk occurring or its potential impact if it does occur.

Question 80: How does System Administration & Configuration contribute to overall professional effectiveness?

It applies only to supervisory-level professionals
It is relevant only during the certification examination
It provides essential knowledge and skills that directly impact quality of work and outcomes (Correct answer)
It serves only as a credential requirement with no practical impact

Correct answer: It provides essential knowledge and skills that directly impact quality of work and outcomes

System Administration & Configuration directly contributes to professional effectiveness by providing essential knowledge and skills that improve the quality of work and outcomes across all career levels.

Question 81: What is the recommended approach to staying current in Cloud Computing & Virtualization?

Regular professional development, industry publications, and peer collaboration (Correct answer)
Relying solely on past experience
Waiting for regulatory changes to force updates
Reviewing initial training materials once per year

Correct answer: Regular professional development, industry publications, and peer collaboration

Staying current in Cloud Computing & Virtualization requires ongoing professional development, reading industry publications, and collaborating with peers to share knowledge and best practices.

Question 82: In agile projects, what is a 'spike' used for?

To time-box research or exploration to reduce uncertainty in a user story (Correct answer)
To estimate team velocity at the start of a project
To measure the team's burndown rate against the sprint goal
To track the number of defects found during testing

Correct answer: To time-box research or exploration to reduce uncertainty in a user story

A spike is a time-boxed investigation or research task used to gain knowledge needed to reduce risk or uncertainty before estimating or implementing a story.

Question 83: What is the recommended approach to staying current in Access Control & Identity Management?

Regular professional development, industry publications, and peer collaboration (Correct answer)
Waiting for regulatory changes to force updates
Reviewing initial training materials once per year
Relying solely on past experience

Correct answer: Regular professional development, industry publications, and peer collaboration

Staying current in Access Control & Identity Management requires ongoing professional development, reading industry publications, and collaborating with peers to share knowledge and best practices.

Question 84: What common challenge do professionals face when applying Operating Systems & Platforms principles?

Obtaining permission to use the principles
Finding the relevant textbook chapter
Balancing theoretical best practices with practical constraints and real-world conditions (Correct answer)
The principles are too simple to present any challenge

Correct answer: Balancing theoretical best practices with practical constraints and real-world conditions

Professionals commonly face the challenge of adapting theoretical best practices in Operating Systems & Platforms to the practical constraints and varying conditions encountered in real-world settings.

Question 85: Which best describes the scope of Database Management & Security in professional practice?

A comprehensive area covering both theoretical foundations and practical applications (Correct answer)
A theoretical framework with no practical applications
An outdated concept no longer relevant to modern practice
A narrow topic relevant only to entry-level professionals

Correct answer: A comprehensive area covering both theoretical foundations and practical applications

Database Management & Security encompasses both theoretical foundations and practical applications that are essential to professional practice in this field.

Question 86: In agile, what does the term 'minimum viable product' (MVP) mean?

The smallest version of a product that can be sold profitably
The version of a product with the least number of bugs
The initial prototype created at the start of a project for stakeholder approval
The simplest version of a product that allows the team to collect validated learning from customers (Correct answer)

Correct answer: The simplest version of a product that allows the team to collect validated learning from customers

An MVP is a product with just enough features to gather validated learning about customers with the least effort, enabling early feedback and learning.

Question 87: A burndown chart in agile tracks which of the following?

The cumulative flow of work items through workflow stages
The remaining work versus time remaining in an iteration or release (Correct answer)
The team's velocity trend over multiple sprints
The number of new features added to the backlog over time

Correct answer: The remaining work versus time remaining in an iteration or release

A burndown chart visualizes the amount of remaining work against the time remaining, helping teams track progress toward the sprint or release goal.

Question 88: Which best describes the scope of System Administration & Configuration in professional practice?

A narrow topic relevant only to entry-level professionals
An outdated concept no longer relevant to modern practice
A theoretical framework with no practical applications
A comprehensive area covering both theoretical foundations and practical applications (Correct answer)

Correct answer: A comprehensive area covering both theoretical foundations and practical applications

System Administration & Configuration encompasses both theoretical foundations and practical applications that are essential to professional practice in this field.

Question 89: A stakeholder map categorizes stakeholders by power and interest. Which group requires the MOST active engagement from the agile team?

High power, high interest stakeholders (Correct answer)
Low power, high interest stakeholders
High power, low interest stakeholders
Low power, low interest stakeholders

Correct answer: High power, high interest stakeholders

Stakeholders with high power and high interest have both the ability to influence the project and strong motivation to do so, making them the most critical to engage actively.

Question 90: What is the primary function of a firewall in network security?

To monitor and control incoming and outgoing network traffic based on security rules (Correct answer)
To store network data backups
To manage email distribution
To increase network speed

Correct answer: To monitor and control incoming and outgoing network traffic based on security rules

A firewall monitors and controls network traffic based on predetermined security rules, acting as a barrier between trusted and untrusted networks.

Question 91: What does a risk matrix assess?

The probability and impact of identified risks (Correct answer)
The number of employees affected
Only the financial cost of risks
The timeline for risk resolution

Correct answer: The probability and impact of identified risks

A risk matrix evaluates risks based on two dimensions: the probability (likelihood) of occurrence and the potential impact (severity) if the risk materializes.

Question 92: A Product Owner wants to communicate the product vision to both technical and non-technical stakeholders. Which tool is MOST effective?

A technical architecture diagram with data flow charts
A spreadsheet listing all user stories and acceptance criteria
A detailed 50-page requirements specification document
A product roadmap with visual milestones and themes (Correct answer)

Correct answer: A product roadmap with visual milestones and themes

A product roadmap with visual milestones communicates direction and value at a level accessible to all stakeholders regardless of technical background.

Question 93: Which metric measures the total amount of value delivered to customers over the life of an agile project?

Net Present Value (NPV) (Correct answer)
Cumulative Story Points
Cycle Time
Lead Time

Correct answer: Net Present Value (NPV)

Net Present Value (NPV) is a financial metric used in agile portfolio management to measure the overall value delivered by a project relative to its cost.

Question 94: What is the most important competency assessed in System Administration & Configuration for professionals in this field?

Years of experience without demonstrated skill
Applied knowledge and practical problem-solving ability (Correct answer)
Academic credentials without practical application
Memorization of textbook definitions only

Correct answer: Applied knowledge and practical problem-solving ability

System Administration & Configuration assessment focuses on applied knowledge and practical problem-solving ability, ensuring professionals can effectively perform in real-world situations.

Question 95: What common challenge do professionals face when applying Cryptography & Data Protection principles?

Finding the relevant textbook chapter
The principles are too simple to present any challenge
Balancing theoretical best practices with practical constraints and real-world conditions (Correct answer)
Obtaining permission to use the principles

Correct answer: Balancing theoretical best practices with practical constraints and real-world conditions

Professionals commonly face the challenge of adapting theoretical best practices in Cryptography & Data Protection to the practical constraints and varying conditions encountered in real-world settings.

Question 96: When presenting agile metrics to executive stakeholders, which combination of metrics provides the BEST strategic view?

Number of daily standups held and retrospective action items closed
Lines of code written and test coverage percentage
Release burn-down, team velocity trend, and business value delivered (Correct answer)
Story points completed per Sprint and number of bugs fixed

Correct answer: Release burn-down, team velocity trend, and business value delivered

Release burn-down, velocity trends, and business value delivered give executives insight into predictability, capacity, and ROI without requiring technical knowledge.

Question 97: What is the first step in the risk management process?

Risk acceptance — deciding to live with all risks
Risk identification — recognizing potential threats and vulnerabilities (Correct answer)
Risk avoidance — canceling all activities
Risk transfer — purchasing insurance immediately

Correct answer: Risk identification — recognizing potential threats and vulnerabilities

Risk identification is the critical first step in risk management, involving systematic recognition and documentation of potential threats and vulnerabilities.

Question 98: How does Database Management & Security contribute to overall professional effectiveness?

It serves only as a credential requirement with no practical impact
It applies only to supervisory-level professionals
It provides essential knowledge and skills that directly impact quality of work and outcomes (Correct answer)
It is relevant only during the certification examination

Correct answer: It provides essential knowledge and skills that directly impact quality of work and outcomes

Database Management & Security directly contributes to professional effectiveness by providing essential knowledge and skills that improve the quality of work and outcomes across all career levels.

Question 99: What common challenge do professionals face when applying Application Security & Development principles?

Obtaining permission to use the principles
Finding the relevant textbook chapter
The principles are too simple to present any challenge
Balancing theoretical best practices with practical constraints and real-world conditions (Correct answer)

Correct answer: Balancing theoretical best practices with practical constraints and real-world conditions

Professionals commonly face the challenge of adapting theoretical best practices in Application Security & Development to the practical constraints and varying conditions encountered in real-world settings.

Question 100: What is the primary purpose of a Release Plan in agile projects?

To provide a high-level view of when features will be delivered over multiple iterations (Correct answer)
To track daily team progress during a sprint
To assign tasks to individual team members
To document the technical architecture of the system

Correct answer: To provide a high-level view of when features will be delivered over multiple iterations

A Release Plan maps out which product backlog items are expected to be delivered across future iterations to achieve a release goal.

Question 101: What is the role of documentation in regulatory compliance?

It serves no practical purpose beyond record-keeping
It is only necessary for international operations
It provides verifiable evidence that standards are being met (Correct answer)
It is optional if verbal confirmation is available

Correct answer: It provides verifiable evidence that standards are being met

Documentation provides verifiable evidence that regulatory requirements are being met and creates an audit trail for compliance verification.

Question 102: Which agile estimation technique groups user stories into broad size categories such as small, medium, large, and extra-large?

Wideband Delphi
Three-Point Estimation
Planning Poker
T-shirt Sizing (Correct answer)

Correct answer: T-shirt Sizing

T-shirt sizing uses clothing size categories to quickly and relatively group user stories by effort without assigning numeric values.

Question 103: Which agile practice allows distributed stakeholders to inspect working software and provide real-time feedback?

Monthly executive dashboard reviews
Asynchronous email status updates
Quarterly business review presentations
Virtual Sprint Reviews using video conferencing (Correct answer)

Correct answer: Virtual Sprint Reviews using video conferencing

Virtual Sprint Reviews enable distributed stakeholders to inspect the working increment and provide timely feedback regardless of geographic location.

Question 104: In the Cynefin framework, how should communication differ when a project moves from 'complicated' to 'complex' domains?

Reduce stakeholder communication to avoid confusion
Increase the number of formal documentation requirements
Switch from expert analysis to probe-sense-respond experimentation (Correct answer)
Apply best practices from similar past projects directly

Correct answer: Switch from expert analysis to probe-sense-respond experimentation

In complex domains, cause-and-effect relationships are only understood retrospectively, requiring experimental approaches (probe-sense-respond) rather than expert analysis.

Question 105: Why is regular risk reassessment important?

Because the risk landscape changes as conditions, activities, and environments evolve (Correct answer)
Because initial assessments are always wrong
Because regulators require it exactly once per year
Because it provides work for risk management teams

Correct answer: Because the risk landscape changes as conditions, activities, and environments evolve

Regular risk reassessment is essential because risks are dynamic — new threats emerge, existing risks change in severity, and the effectiveness of controls may vary over time.

Question 106: What is the relationship between Application Security & Development and ethical professional conduct?

There is no connection between technical knowledge and ethics
Ethical considerations are integrated into all aspects of professional practice in this area (Correct answer)
Ethics applies only to separate, unrelated decisions
Ethics is relevant only when legal issues arise

Correct answer: Ethical considerations are integrated into all aspects of professional practice in this area

Ethical considerations are deeply integrated into Application Security & Development, as professional conduct and integrity underpin all aspects of practice in this field.

Question 107: In Extreme Programming (XP), which practice involves two developers working together at one workstation?

Test-Driven Development
Pair Programming (Correct answer)
Continuous Integration
Refactoring

Correct answer: Pair Programming

Pair programming in XP has one developer writing code while the other reviews, switching roles frequently.

Question 108: What common challenge do professionals face when applying Cloud Computing & Virtualization principles?

Finding the relevant textbook chapter
The principles are too simple to present any challenge
Obtaining permission to use the principles
Balancing theoretical best practices with practical constraints and real-world conditions (Correct answer)

Correct answer: Balancing theoretical best practices with practical constraints and real-world conditions

Professionals commonly face the challenge of adapting theoretical best practices in Cloud Computing & Virtualization to the practical constraints and varying conditions encountered in real-world settings.

Question 109: What is the relationship between Vulnerability Assessment & Penetration Testing and ethical professional conduct?

Ethics is relevant only when legal issues arise
There is no connection between technical knowledge and ethics
Ethical considerations are integrated into all aspects of professional practice in this area (Correct answer)
Ethics applies only to separate, unrelated decisions

Correct answer: Ethical considerations are integrated into all aspects of professional practice in this area

Ethical considerations are deeply integrated into Vulnerability Assessment & Penetration Testing, as professional conduct and integrity underpin all aspects of practice in this field.

Question 110: In agile, what is the purpose of a 'Definition of Done' (DoD) in the context of stakeholder communication?

To document the process for handling rejected user stories
To define when a project is officially closed and stakeholders are released
To specify which stakeholders must approve each user story
To create a shared understanding of what 'complete' means for delivered work (Correct answer)

Correct answer: To create a shared understanding of what 'complete' means for delivered work

The Definition of Done creates a transparent, shared standard that aligns stakeholder expectations with what the team considers releasable work.

Question 111: What is the most important competency assessed in Access Control & Identity Management for professionals in this field?

Applied knowledge and practical problem-solving ability (Correct answer)
Years of experience without demonstrated skill
Academic credentials without practical application
Memorization of textbook definitions only

Correct answer: Applied knowledge and practical problem-solving ability

Access Control & Identity Management assessment focuses on applied knowledge and practical problem-solving ability, ensuring professionals can effectively perform in real-world situations.

Question 112: Which best describes the scope of Cryptography & Data Protection in professional practice?

A narrow topic relevant only to entry-level professionals
A theoretical framework with no practical applications
An outdated concept no longer relevant to modern practice
A comprehensive area covering both theoretical foundations and practical applications (Correct answer)

Correct answer: A comprehensive area covering both theoretical foundations and practical applications

Cryptography & Data Protection encompasses both theoretical foundations and practical applications that are essential to professional practice in this field.

Question 113: Which best describes the scope of Access Control & Identity Management in professional practice?

An outdated concept no longer relevant to modern practice
A comprehensive area covering both theoretical foundations and practical applications (Correct answer)
A theoretical framework with no practical applications
A narrow topic relevant only to entry-level professionals

Correct answer: A comprehensive area covering both theoretical foundations and practical applications

Access Control & Identity Management encompasses both theoretical foundations and practical applications that are essential to professional practice in this field.

Question 114: What is network segmentation and why is it important?

Upgrading all network cables simultaneously
Removing old network equipment
Increasing the number of network devices
Dividing a network into smaller segments to contain breaches and control access (Correct answer)

Correct answer: Dividing a network into smaller segments to contain breaches and control access

Network segmentation divides a network into isolated segments, limiting the spread of security breaches and providing granular access control.

Question 115: A stakeholder continues to request features that are out of scope. What agile technique helps prevent scope creep while maintaining the relationship?

Log requests in a product backlog and explain the trade-off process transparently (Correct answer)
Escalate the issue to the project sponsor for resolution
Refuse all out-of-scope requests with a formal change request form
Add all requests directly to the product backlog for future prioritization

Correct answer: Log requests in a product backlog and explain the trade-off process transparently

Adding requests to the product backlog while transparently explaining the prioritization and trade-off process respects stakeholder input while protecting current commitments.

Question 116: Which tool is MOST useful for helping a team and stakeholders visualize the flow of work and identify bottlenecks in a Kanban context?

A RACI matrix defining stakeholder responsibilities
A cumulative flow diagram showing work in each state over time (Correct answer)
A Gantt chart showing planned vs. actual task completion
A risk register with probability and impact scores

Correct answer: A cumulative flow diagram showing work in each state over time

A cumulative flow diagram visualizes the volume of work in each state over time, making bottlenecks and flow inefficiencies immediately visible to teams and stakeholders.

Question 117: What common challenge do professionals face when applying Database Management & Security principles?

Balancing theoretical best practices with practical constraints and real-world conditions (Correct answer)
Finding the relevant textbook chapter
Obtaining permission to use the principles
The principles are too simple to present any challenge

Correct answer: Balancing theoretical best practices with practical constraints and real-world conditions

Professionals commonly face the challenge of adapting theoretical best practices in Database Management & Security to the practical constraints and varying conditions encountered in real-world settings.

Question 118: What is the purpose of a risk register?

To assign blame when problems occur
To satisfy audit requirements only
To document, track, and manage all identified risks throughout a project or operation (Correct answer)
To eliminate all risks before starting work

Correct answer: To document, track, and manage all identified risks throughout a project or operation

A risk register is a living document that records all identified risks, their assessments, response plans, and status updates throughout the lifecycle of a project or operation.

Question 119: What is the most important competency assessed in Operating Systems & Platforms for professionals in this field?

Academic credentials without practical application
Applied knowledge and practical problem-solving ability (Correct answer)
Memorization of textbook definitions only
Years of experience without demonstrated skill

Correct answer: Applied knowledge and practical problem-solving ability

Operating Systems & Platforms assessment focuses on applied knowledge and practical problem-solving ability, ensuring professionals can effectively perform in real-world situations.

Question 120: What is the recommended approach to staying current in Database Management & Security?

Relying solely on past experience
Waiting for regulatory changes to force updates
Regular professional development, industry publications, and peer collaboration (Correct answer)
Reviewing initial training materials once per year

Correct answer: Regular professional development, industry publications, and peer collaboration

Staying current in Database Management & Security requires ongoing professional development, reading industry publications, and collaborating with peers to share knowledge and best practices.

PMI Agile Certified Practitioner (PMI-ACP)®

The PMI-ACP® certifies practitioners' knowledge of agile principles and skill with agile techniques, recognizing proficiency across four domains: Mindset, Leadership, Product, and Delivery. It validates the ability to apply agile approaches to project management in real-world environments.

120

Questions

180 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds