CAPM Business Analysis Frameworks Practice Question
You are the business analyst for a project developing a mobile banking application. The project is in the requirements elicitation phase. One of the key stakeholders, the head of security, is on an extended leave and will not be available for three weeks. The project timeline is aggressive, and the project manager insists on completing requirements gathering within two weeks to stay on schedule. You have held initial interviews with other stakeholders, but the security requirements are critical because the app will handle sensitive financial data. The quality assurance lead suggests using a survey to collect security requirements from the security team, but the security team members are reluctant to provide input without their manager's approval. What should you do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Document assumptions about the security requirements and proceed with the rest of the elicitation, planning to validate with the head of security upon their return.
When a key stakeholder is unavailable, it is a recognized practice to document assumptions about their requirements and plan to validate later. This keeps the project on schedule while acknowledging the risk. Conducting a survey may face resistance, delaying elicitation. Delaying the entire project is not justified for one stakeholder. Using existing documentation is useful but may not capture all needs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Delay all requirements elicitation until the head of security returns to ensure complete and accurate security requirements.
Why it's wrong here
Delaying the entire project is overly conservative and may not be necessary.
- ✗
Use existing security policies and industry standards as a proxy for the security requirements without further elicitation.
Why it's wrong here
Standards may not capture organization-specific needs and could miss critical requirements.
- ✓
Document assumptions about the security requirements and proceed with the rest of the elicitation, planning to validate with the head of security upon their return.
Why this is correct
This manages schedule risk while acknowledging the gap.
- ✗
Conduct a survey of the security team members to gather their requirements despite their reluctance.
Why it's wrong here
Resistance may lead to incomplete or inaccurate data and create tension.
Go deeper
Related to this question
About these practice questions
This CAPM question is part of Courseiva's 487-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAPM practice question is part of Courseiva's free PMI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAPM exam.