In project management, understanding the difference between the current state and the desired future state is essential for identifying gaps and planning improvements. The current state refers to the organization's existing conditions, processes, or performance levels. The desired future state represents the target conditions or performance levels the organization aims to achieve through the project. This comparison is fundamental in conducting a gap analysis, which helps in planning the necessary steps to transition from the current to the desired state.

According to the CompTIA Project+ PK0-005 exam objectives, under Domain 1.3: Given a scenario, apply the change control process throughout the project life cycle, understanding the current and desired states is crucial for effective change management and project planning.

Operational security (OPSEC) is a process that prevents sensitive information from getting into the wrong hands by viewing operations from the perspective of an adversary1. Facility access is a form of OPSEC that controls who can enter and exit a physical location where sensitive data or equipment is stored or processed. Facility access can include measures such as locks, alarms, badges, biometrics, guards, and cameras. The other options are not correct because:

Mobile device compliance is a policy that ensures that mobile devices used by employees or contractors meet certain security standards and requirements, such as encryption, password protection, antivirus, and remote wipe. Mobile device compliance is not a form of OPSEC, but rather a form of data security or device management.

Background screening is a process that checks the criminal, financial, and employment history of a potential employee or contractor before hiring them. Background screening is not a form of OPSEC, but rather a form of human resource management or risk mitigation.

Multifactor authentication is a method that requires users to provide two or more pieces of evidence to verify their identity before accessing a system or service, such as a password, a code, a token, or a biometric. Multifactor authentication is not a form of OPSEC, but rather a form of access control or identity management. References = CompTIA Project+ Study Guide: Exam PK0-005, 3rd Edition, Chapter 10: Executing and Closing Projects, page 314; CompTIA Project+ Certification Exam Objectives, Domain 3: Project Execution, Objective 3.2: Given a scenario, execute and monitor project tasks using traditional methodologies; What is Operational Security? The Five-Step Process, Best Practices, and More

This answer is based on the best practice of choosing a project management methodology that suits the project characteristics and environment12. Scrum is an agile framework that is designed to handle complex and uncertain projects with frequent changes and tight deadlines34. Scrum involves a small, cross-functional team that works in short iterations called sprints, delivering incremental and potentially shippable products at the end of each sprint5. Scrum also allows for continuous feedback and improvement through daily stand-up meetings, sprint reviews, and retrospectives6. Scrum is suitable for this project because it can accommodate the high uncertainty, the risk of requirement changes, and the tight deadlines, while also enabling the two developers to collaborate effectively and deliver value to the customer. References = CompTIA Project+ Certification Study Guide7, CompTIA Project+ Certification Exam Objectives8, Project Management Methodologies Comparison (11 PM Methods)6, Project Management Methodologies: 12 Best Frameworks [2023]7, What is Scrum?5, Scrum Methodology: The Ultimate Guide6

The project manager should validate against the scope statement and ask for sign-off after a system was implemented and testing was successfully completed. The scope statement is a document that defines and documents the project scope, objectives, deliverables, requirements, assumptions, and constraints. The scope statement can help to establish a common understanding and agreement between the project manager and the stakeholders on what the project aims to achieve and deliver. Validating against the scope statement means checking whether the project deliverables meet the agreed-upon scope criteria and quality standards. Asking for sign-off means requesting formal acceptance and approval of the project deliverables from the stakeholders.

Option A shows a cause and effect diagram, also known as a fishbone diagram or an Ishikawa diagram1. This is a tool that helps to identify and analyze the root causes of a problem by displaying the possible causes and effects in a graphical format2. A cause and effect diagram can help the project team to determine whether the particular cause and effect are related by using a systematic and logical approach, such as asking “why” questions or using the 5 Whys technique34. A cause and effect diagram is better than the other options because:

Option B shows a Gantt chart, which is a tool that helps to plan and track the tasks, dependencies, durations, and resources of a project along a timeline5. A Gantt chart does not focus on the causes and effects of a problem, but rather on the sequence and progress of the project activities.

Option C shows a pie chart, which is a tool that helps to compare and visualize the proportions of different categories or segments of data6. A pie chart does not show the relationships between the causes and effects of a problem, but rather the distribution of the data values.

Option D shows a scatter plot, which is a tool that helps to examine the correlation or association between two variables or sets of data7. A scatter plot does not show the causes and effects of a problem, but rather the pattern or trend of the data points.

References = CompTIA Project+ Certification Study Guide8, CompTIA Project+ Certification Exam Objectives9, Cause and Effect Diagrams for PMP1, Cause and Effect Analysis: Using Fishbone Diagram and 5 Whys2, How to Create a Cause and Effect Diagram3, How to Use Cause and Effect Analysis to Solve Business Problems4, What is a Gantt Chart?5, What is a Pie Chart?6, What is a Scatter Plot?7

Applying the contingency plan is the immediate response to mitigate a security risk. CompTIA Project+ emphasizes the importance of having pre-established contingency plans to handle potential risks promptly and effectively.

A change log is a document that records and tracks the changes that are made to the project scope, schedule, budget, or quality. It helps the project manager to monitor and control the project performance and ensure that the changes are aligned with the project objectives and stakeholders’ expectations. A change log can also include information such as the change description, impact, status, approval, and date. A change log is the best source for the PM to use to confirm the assertion that the functionality request was rejected during the planning phase, as it would show the details and reasons for the rejection12.