Task 2 PMI-PBA Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A healthcare organization implemented a patient portal that allows patients to view their medical records. The BA is evaluating the solution and identifies a risk that the portal's authentication mechanism may be vulnerable to a brute-force attack. The organization has a strict compliance requirement to protect patient data. What should the BA recommend as the most appropriate mitigation?

   • AIncrease the password length requirement to 15 characters.
   • BConduct a penetration test to confirm the vulnerability.
   • CDisable the portal's public access and require VPN for all users.
   • DImplement multi-factor authentication (MFA) and account lockout policies.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When evaluating solution risks, what should be the outcome of the analysis?

   • AA report on user satisfaction
   • BA list of defects to be fixed
   • CRecommendations for mitigation strategies
   • DA confirmation of compliance
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary focus of usability evaluation?

   • AThe ease of use and user satisfaction
   • BThe integration with other systems
   • CThe security measures in place
   • DThe scalability of the solution
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the purpose of evaluating solution compliance?

   • ATo verify that the solution complies with relevant regulations, standards, and organizational policies
   • BTo measure the business value delivered by the solution
   • CTo identify risks associated with the solution's operation
   • DTo assess the ease of use and user satisfaction
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   During post-implementation monitoring, the BA notices that a new billing system is generating incorrect invoices for a small percentage of customers. The error causes a minor delay in payment but does not affect the majority of users. The BA has identified three defects: one that affects a few high-value customers, one that affects many low-value customers, and one that affects a regulatory report. How should the BA prioritize these defects?

   • APrioritize the high-value customer defect first, then the regulatory report, then the low-value customer defect.
   • BPrioritize the low-value customer defect first because it affects many customers.
   • CPrioritize the regulatory report defect first, then the high-value customer defect, then the low-value customer defect.
   • DPrioritize all defects equally and fix them in the order they were reported.
   Reveal Solution Discussion Select an answer first