CAPM Business Analysis Frameworks Practice Question
You are a business analyst on a project to upgrade the network infrastructure in a large organization. The project plan was created using a predictive approach, and requirements were gathered months ago. During implementation, the team discovers that some requirements conflict with a new company-wide security policy issued after the project started. The project manager says the scope is frozen and changes cannot be accommodated. The sponsor is not involved daily. As the business analyst, what is the most effective action to take?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Analyze the impact of the security policy on the project and present options to the sponsor for a decision.
The most effective action because as a business analyst, you should analyze the impact of the new security policy on the project and present options to the sponsor for decision. The sponsor has authority to approve changes, and since the project manager refuses to accommodate changes, escalating to the sponsor with impact analysis enables informed decision-making. Option A is ineffective because the project manager has already stated the scope is frozen, so reconvening the change control board without analysis may be premature. Option B is incorrect because ignoring the conflict and only noting it in lessons learned does not address the issue; it could lead to security non-compliance. Option C is wrong because updating requirements without formal approval violates the scope freeze and could lead to unauthorized changes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ask the project manager to reconvene the change control board to evaluate the conflicts.
Why it's wrong here
Without impact analysis, the CCB lacks information to make a good decision.
- ✗
Proceed with the original requirements and note the security conflicts in a lessons learned document.
Why it's wrong here
Ignoring security issues could lead to non-compliance and serious risks.
- ✗
Update the requirements to align with the new policy without formal approval to save time.
Why it's wrong here
Unauthorized changes violate project governance and may cause scope creep.
- ✓
Analyze the impact of the security policy on the project and present options to the sponsor for a decision.
Why this is correct
The sponsor can authorize changes and balance compliance with project constraints.
Go deeper
Related to this question
About these practice questions
This CAPM question is part of Courseiva's 487-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAPM practice question is part of Courseiva's free PMI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAPM exam.