Project+ PK0-005 Updated Exam

The project manager should first document the change request in the change log because an additional feature represents a potential change to the approved scope described in the SOW. In project change control, requested changes must be formally captured before they are evaluated, approved, rejected, or communicated as accepted work. The change log provides traceability by recording the request, requester, date, description, status, impact, and decision. Validating the request and determining decision makers may occur after documentation, but the project manager should not skip the formal record. Communicating the change broadly before review could create confusion or expectations that the feature is already approved. Proper logging supports governance, prevents scope creep, and ensures the change follows the approved control process.

A breach of physical security is an unauthorized access or damage to physical assets, such as equipment, data, or personnel. Project documentation that is only kept on a removable device is the best example of a breach of physical security, because it exposes sensitive information to theft, loss, or corruption. If the removable device is not encrypted or protected, anyone who obtains it can access the project documentation and compromise the project integrity, confidentiality, or availability. Therefore, project documentation should be stored in a secure location, backed up regularly, and protected by access controls and encryption.

The other options are not examples of physical security breaches, but rather logical or administrative security breaches. System user IDs being used by multiple individuals is a violation of the principle of least privilege and accountability, which could lead to unauthorized access or misuse of system resources. Printers that do not request user authentication is a lack of proper access control, which could allow unauthorized printing or retrieval of confidential documents. Developers having full access to both development and production environments is a violation of the principle of separation of duties and environments, which could introduce errors, conflicts, or malicious code into the production system. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 9: Security Management1; CompTIA Project+ Certification Study Guide, 3rd Edition, Chapter 9: Security Management2; Types of Security Breaches: Physical and Digital3

A change log is a document that records and tracks the changes that are made to the project scope, schedule, budget, or quality. It helps the project manager to monitor and control the project performance and ensure that the changes are aligned with the project objectives and stakeholders’ expectations. A change log can also include information such as the change description, impact, status, approval, and date. A change log is the best source for the PM to use to confirm the assertion that the functionality request was rejected during the planning phase, as it would show the details and reasons for the rejection12.

This answer is based on the best practice of using historical information and lessons learned from previous projects to improve the planning and execution of current projects12. By using existing artifacts, such as scope statements, project plans, risk registers, and change logs, the PM can leverage the knowledge and experience of the previous PM and avoid repeating the same mistakes or oversights. However, the PM should also accommodate the artifacts based on the current project success criteria, which may differ from the previous project in terms of scope, schedule, budget, quality, or stakeholder expectations34. The PM should not rely solely on the previous PM’s advice, the project sponsor’s report, or the project charter, as these sources may not provide enough detail or accuracy for the current project’s scope statement. References = CompTIA Project+ Certification Study Guide5, CompTIA Project+ Certification Exam Objectives6, How to Use Historical Information in Project Management1, How to Use Lessons Learned to Improve Project Management2, How to Define Project Success Criteria3, How to Use Existing Artifacts in Project Management4