Project+ PK0-005 CompTIA Study Notes

The system is lacking proper access controls if a third-party vendor was able to see secured project information in a recently implemented system that resulted in a fine for the organization. Access controls are security mechanisms that regulate who or what can view, use, or modify data or resources in a system or network. Access controls typically involve authentication and authorization processes that verify the identity and permissions of users or devices before granting them access. Access controls can help to protect data confidentiality, integrity, and availability and prevent unauthorized access, misuse, or theft12

A multitiered architecture project is a type of project that involves designing and implementing a system that consists of multiple layers or tiers, such as presentation, application, and data. A multitiered architecture project can provide a high level of redundancy, scalability, and performance, as each tier can have multiple servers or components that can handle requests and failures independently. A Tier 5 redundancy level is the highest level of redundancy that requires a fully redundant, mirrored system plus one additional backup unit for every component12.

A postmortem (often synonymous with a structured “lessons learned”/retrospective at the end of a project) is specifically intended to identify what worked, what didn’t, and what to improve next time. It creates actionable improvements for future projects—process changes, tooling updates, training needs, better estimation approaches, risk triggers, and governance refinements. CompTIA Project+ closing-phase expectations include evaluating the project and collecting feedback, which is the exact purpose of a postmortem-style activity.

A contract review is valuable for procurement performance and compliance, but it’s narrower than overall delivery improvement. Archived documents are essential for auditability and reference, but archiving is primarily record retention; it doesn’t inherently analyze improvement opportunities unless paired with a review session. Project rewards support morale and recognition (also called out as part of closure activities), but they don’t generate systematic improvement insights.

A strong postmortem typically produces: a short list of top improvement themes, owners, due dates, and where to embed changes (templates, playbooks, onboarding, QA practices). That turns closure learning into measurable organizational improvement—exactly what the question is asking for.

Smoke testing is the best fit because it is a quick, high-level validation that a new build’s most critical functions work and the build is stable enough to proceed to deeper testing. The scenario specifically says “ready for the next testing phase,” which is exactly the gate smoke testing supports: confirm the build is not “broken” and that core paths execute without major failures. CompTIA Project+ includes smoke testing as one of the testing cycles/methods candidates should recognize in project quality activities. ()

The other options are not the best match. Unit testing is low-level testing of individual components (often done by developers) and doesn’t validate that the integrated build’s critical workflows function end-to-end. Regression testing is broader and verifies existing features weren’t broken by changes; it typically takes more time and is usually run after the build passes smoke checks. Performance testing evaluates responsiveness, throughput, and resource usage—important, but not the initial readiness check for a new build entering the next test stage.

So, to quickly confirm essential functionality and determine readiness to proceed, the PM should ensure a smoke test is performed.