Courseiva
Business Analysis FrameworkshardMultiple ChoiceObjective-mapped

CAPM Business Analysis Frameworks Practice Question

Exhibit

Refer to the exhibit.

```json
{
  "requirements": [
    {
      "id": "REQ-001",
      "description": "The system shall allow users to reset their password via email",
      "source": "Stakeholder interview",
      "status": "Approved",
      "verified": false
    },
    {
      "id": "REQ-002",
      "description": "The system shall send a confirmation email after password reset",
      "source": "Security policy",
      "status": "Draft",
      "verified": false
    },
    {
      "id": "REQ-003",
      "description": "The system shall require multi-factor authentication for admin accounts",
      "source": "Compliance requirement",
      "status": "Approved",
      "verified": true
    }
  ]
}
```

Based on the exhibit, which requirement poses the greatest risk to the project if not addressed?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

REQ-002, because it is still in Draft status

REQ-002 is still in Draft status, meaning it has not been approved. Unapproved requirements pose the greatest risk as they may change, cause rework, or lead to compliance issues. Option A is incorrect because REQ-001 is already verified and approved. Option B is incorrect because REQ-003 being verified indicates it has been tested and is less risky. Option C is incorrect because the draft status of REQ-002 makes it more risky than the others.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • REQ-001, because it is not verified

    Why it's wrong here

    REQ-001 is approved; verification is a separate step.

  • REQ-003, because it is already verified

    Why it's wrong here

    Verification reduces risk, not increases.

  • All requirements are equally risky

    Why it's wrong here

    REQ-002 is the only draft; others are approved.

  • REQ-002, because it is still in Draft status

    Why this is correct

    Draft status from a security policy source indicates potential for scope or compliance changes.

About these practice questions

Courseiva writes every CAPM question from scratch — 487 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CAPM practice question is part of Courseiva's free PMI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAPM exam.