PK0-005 Tools and Documentation Practice Question
A project manager is reviewing a risk register and wants to document the specific actions that will be taken if a high-probability supplier failure occurs. Which component of the risk register should contain this information?
⚠ Common exam trap
Test-takers frequently confuse a risk trigger, which signals that a risk is occurring, with the response plan, which contains the actions to take once it does.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Risk response plan
The risk response plan is the risk register component that captures the actions to be executed if a risk materializes. It documents mitigation, contingency, and fallback steps along with ownership and timing. Other fields identify who owns the risk, how it is categorized, or what signals its occurrence, but only the response plan contains the specific actions for the supplier failure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Risk response plan
Why this is correct
The risk response plan documents the agreed actions to be taken if a risk occurs, including contingency and fallback steps. For a high-probability supplier failure, this component would contain the specific mitigation or contingency actions. It is the correct place for the project manager to document and later execute the response actions described in the scenario.
- ✗
Risk owner
Why it's wrong here
The risk owner is the person assigned to monitor the risk and implement the agreed response. It identifies accountability but does not describe the actions themselves. In this scenario, the project manager needs the documented actions for a supplier failure, not the name of the person responsible, so the risk owner field alone would not provide the required contingency detail.
- ✗
Risk trigger
Why it's wrong here
A risk trigger is an event or condition that indicates a risk is about to occur or has occurred, such as a missed delivery or a supplier warning notice. It signals that the response should be activated but does not contain the actions themselves. The project manager needs the action steps, so the trigger field would not provide the required contingency detail.
- ✗
Risk category
Why it's wrong here
The risk category groups risks by source, such as technical, external, or organizational, to support analysis and reporting. It classifies the risk but does not specify what will be done if the supplier fails. The project manager needs the concrete action plan, so the category field is not the correct location for the response actions.
Go deeper
Related to this question
About these practice questions
This PK0-005 question is part of Courseiva's 954-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This PK0-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PK0-005 exam.