PMP Process — Managing Technical Aspects Practice Question
Your project is using a predictive approach to build a mobile app. During testing, the team discovers a critical security vulnerability that was not identified during planning. Fixing it will require two additional weeks and $50,000, which is within the contingency reserve. What should you do NEXT?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Submit a change request to use the contingency reserve for the fix.
The contingency reserve is intended for such risks; using it requires a change request. Option A is incorrect because the contingency reserve should be used through formal process. Option C is incorrect as approval is needed. Option D is incorrect; the PM cannot authorize use of contingency reserves without following the plan.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Document the vulnerability in the issue log and proceed without fixing it.
Why it's wrong here
Documenting a critical security vulnerability in the issue log is a necessary step for tracking, but proceeding without fixing it is unacceptable for a project using a predictive approach. Critical vulnerabilities represent significant risks that can severely impact project objectives, product quality, and organizational reputation. Ignoring such a risk violates the project's commitment to delivering a secure and functional product, potentially leading to future failures, legal issues, or significant rework, making this action irresponsible.
- ✓
Submit a change request to use the contingency reserve for the fix.
Why this is correct
Submitting a formal change request is the correct PMP procedure when an identified risk event, such as a critical vulnerability, materializes and requires the use of contingency reserves. This action ensures adherence to the Integrated Change Control process, maintaining proper governance and transparency. The change request outlines the proposed solution, its impact on scope, schedule, or cost, and seeks formal approval before allocating funds from the reserve to address the issue.
- ✗
Inform the sponsor and ask for approval to use the contingency reserve.
Why it's wrong here
While informing the sponsor is good practice for significant issues, simply asking for informal approval to use contingency reserves bypasses the formal Integrated Change Control process. Project management requires documented decisions and approvals, especially when allocating financial reserves that are part of the project's cost baseline. Relying on informal consent can lead to a lack of traceability, potential disputes, and a breakdown in project governance, which is critical for managing project baselines effectively.
- ✗
Use the contingency reserve to fix the vulnerability immediately.
Why it's wrong here
Using the contingency reserve immediately without following the established change control process is generally not permissible in a predictive project environment. Contingency reserves are specifically allocated for known-unknown risks that materialize, but their utilization typically requires a formal change request and approval to ensure proper oversight and update project baselines. Unilateral action, even for a critical issue, undermines project governance and financial control, unless explicitly pre-approved in the project management plan for specific scenarios.
Go deeper
Related to this question
About these practice questions
One of 800 original PMP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PMP practice question is part of Courseiva's free PMI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PMP exam.