CompTIA Updated PK0-005 Exam Questions and Answers by kitty

When a project relies on legacy applications, a primary and often heightened risk is a major cybersecurity event. Legacy systems frequently have older architectures, limited vendor support, weaker security controls, outdated dependencies, and delayed patching capabilities—factors that increase vulnerability exposure. From a Project+ perspective, risk management requires identifying threats with the highest potential impact; a cybersecurity incident can create severe consequences across confidentiality, integrity, and availability, leading to service outages, regulatory exposure (especially if PII is involved), reputational damage, and unplanned cost/schedule impacts.

“Infrastructure end of life” (A) is also a legitimate legacy-related risk, but it is typically a more predictable lifecycle risk that can be planned around (replacement schedules, support contracts). A “company reorganization” (B) is a general organizational risk not specific to legacy applications. “Digital transformation” (C) is more of a strategic initiative context than a discrete risk event.

Because the question asks for the main concern when using legacy apps, the most critical, high-impact threat that legacy systems exacerbate is a major cybersecurity event—the kind of risk that can derail timelines and budgets and force emergency scope changes and remediation work.

A request for proposal (RFP) is the best document for the company to use in this scenario, because it is the most detailed and personalized type of request document. An RFP allows the company to specify the project scope, requirements, deliverables, evaluation criteria, and budget for the structured cabling installation, and to solicit proposals from various vendors that can meet those needs. An RFP also enables the company to compare the vendors based on their qualifications, experience, methodology, and pricing, and to select the best one for the project. An RFP is more suitable than an RFB, RFQ, or RFI, because those documents are less comprehensive and more generic, and they do not provide enough information for the company to make an informed decision. References = CompTIA Project+ Study Guide: Exam PK0-005, Third Edition, Chapter 5: Initiating the Project, page 1131; RFI, RFP, RFQ: Understanding the Differences2; Data Center Structured Cabling RFP Template3

A program is a group of related projects managed in a coordinated way to achieve benefits and control that would not be available if the projects were managed separately. Option C—a consolidation of related projects with a common goal—matches the standard program definition used across project management frameworks and aligns with CompTIA Project+ terminology that distinguishes projects (temporary endeavors producing unique outputs) from programs (coordinated management of multiple related projects).

Option A is incorrect because unrelated projects do not form a program; that is closer to a portfolio (a collection of projects/programs managed to meet strategic objectives, not necessarily related). Option B describes operational tracking, not a program definition. Option D sounds like scope decomposition or workload definition, which is not what a program is.

Programs typically have overarching governance, shared resources, interdependent timelines, and integrated risk/benefit management. The focus is on achieving strategic outcomes/benefits across the combined effort, such as rolling out a suite of capabilities or transforming an end-to-end business process via multiple projects.

 The project manager should make an impact assessment after being informed that the delivery of required IT equipment will be delayed. An impact assessment is a process of analyzing and evaluating how a change or an issue may affect the scope, schedule, cost, quality, or risks of a project. An impact assessment can help to determine the severity and implications of the delay on the project objectives and deliverables and identify any possible alternatives or corrective actions to minimize or avoid its negative effects.