You are the project manager of the NNQ Project for your company and are working you’re
your project team to define contingency plans for the risks within your project. Mary, one of
your project team members, asks what a contingency plan is. Which of the following
statements best defines what a contingency response is?

Who is responsible for the stakeholder expectations management in a high-profile, high-risk
project?

Which of the following refers to a process that is used for implementing information
security?

What project management plan is most likely to direct the quantitative risk analysis process
for a project in a matrix environment?

Your project team has identified a project risk that must be responded to. The risk has been
recorded in the risk register and the project team has been discussing potential risk
responses for the risk event. The event is not likely to happen for several months but the
probability of the event is high. Which one of the following is a valid response to the
identified risk event?

Which of the following statements about the availability concept of Information security
management is true?

Which of the following are the objectives of the security certification documentation task?
Each correct answer represents a complete solution. Choose all that apply.

Which of the following statements about System Access Control List (SACL) is true?

Kelly is the project manager of the BHH project for her organization. She is completing the
risk identification process for this portion of her project. Which one of the following is the
only thing that the risk identification process will create for Kelly?

You are the project manager for your organization. You are working with your project team
to complete the qualitative risk analysis process. The first tool and technique you are using
requires that you assess the probability and what other characteristic of each identified risk
in the project?