[ACT] COMPLETE EXAM QUESTIONS AND VERIFIED
ANSWERS | 2026–2027 LATEST UPDATE | GUARANTEED
PASS | DETAILED RATIONALES | FULL STUDY GUIDE | EXAM
PREP | PRACTICE TEST | CERTIFICATION PREPARATION
1. A project team is in the execution phase, and a key stakeholder requests a significant change
that will impact the project scope and schedule. What is the project manager's FIRST course of
action?
A. Implement the change immediately to satisfy the stakeholder.
B. Evaluate the impact of the change and submit a formal change request.
C. Escalate the issue to the project sponsor for a decision.
D. Reject the change request to protect the project baseline.
Correct Answer: B. Evaluate the impact of the change and submit a formal change request.
Rationale: The correct first step is to assess the impact of the proposed change on the project's scope,
schedule, and budget. This evaluation forms the basis of a formal change request, which must be
submitted to the change control board (CCB) for approval. While satisfying the stakeholder is
important, it cannot come at the expense of the project's formal control processes. Escalating to the
sponsor is premature before the full impact is known, and rejecting a request without evaluation is
contrary to the principles of stakeholder management and integrated change control.
2. An IT manager is reviewing the results of a recent vulnerability scan. Several critical
vulnerabilities were found on servers that process sensitive customer data. Which of the following
is the MOST immediate risk management action?
A. Update the organization's disaster recovery plan.
B. Implement compensating controls to mitigate the vulnerabilities.
C. Perform a full business impact analysis.
D. Apply the recommended security patches immediately.
Correct Answer: D. Apply the recommended security patches immediately.
Rationale: While all options are components of a robust security posture, the most immediate and
direct action to address a critical vulnerability is to apply the available fix, such as a security patch.
The risk of exploitation is high, making speed essential. Implementing compensating controls (Option
B) might be a secondary step if a patch isn't available. A business impact analysis (Option C) or
updating the disaster recovery plan (Option A) are longer-term planning activities that do not address
the immediate threat.
3. A business analyst is gathering requirements for a new customer relationship management
(CRM) system. Which technique is BEST suited for understanding the underlying needs and
motivations of end-users?
A. Brainstorming
B. Document analysis
C. Interviews
D. Surveys
,Correct Answer: C. Interviews
Rationale: Interviews, especially one-on-one, allow the business analyst to ask probing questions,
clarify ambiguous answers, and uncover the "why" behind user requests. This provides a deep
understanding of needs and motivations. Brainstorming (Option A) is useful for generating ideas but
less effective for in-depth understanding. Document analysis (Option B) reveals existing processes but
not necessarily user motivations. Surveys (Option D) are effective for collecting broad feedback but
lack the depth of direct interaction.
4. According to ITIL 4, which practice focuses on aligning an organization's capabilities and
resources with the strategic objectives of the business?
A. Service Level Management
B. Strategy Management
C. Business Relationship Management
D. Portfolio Management
Correct Answer: B. Strategy Management
Rationale: The Strategy Management practice is specifically designed to establish a clear strategic
direction, ensuring that services and products are created and managed to meet the organization's
goals. Service Level Management (Option A) is about defining and managing service levels. Business
Relationship Management (Option C) focuses on nurturing relationships with stakeholders. Portfolio
Management (Option D) is about managing the investment portfolio of services, which is a
component of a broader strategy.
5. During a code review, a developer discovers that a colleague has hardcoded database
credentials directly into a web application's source code. What is the MOST appropriate action for
the developer to take?
A. Remove the credentials and commit the change without discussion.
B. Report the finding to the security team but take no further action.
C. Privately inform the colleague and educate them on secure coding practices.
D. Immediately alert the project manager to have the colleague removed from the project.
Correct Answer: C. Privately inform the colleague and educate them on secure coding practices.
Rationale: This is a serious security flaw, but the most professional and constructive first step is to
address it directly with the colleague. This provides an opportunity to correct the immediate issue
and foster a learning culture around secure coding practices. Removing the credentials without
discussion (Option A) is a unilateral action that doesn't address the root cause or educate the
developer. Reporting to security without engaging the colleague (Option B) is an escalation that
bypasses a key educational moment. Option D is a severe overreaction; a single security lapse, while
serious, is not typically grounds for immediate removal.
6. A project manager is leading a software development project using an Agile methodology.
During a sprint planning meeting, the team estimates the effort for user stories. A senior developer
with significant expertise in the domain provides a very low estimate for a complex story. What is
the BEST way for the Scrum Master to facilitate the session?
A. Accept the senior developer's estimate as the team's consensus to maintain team harmony.
B. Encourage the senior developer to explain their rationale before the team votes.
,C. Overrule the senior developer's estimate and use the higher estimate to add buffer.
D. Ask the team to use "Planning Poker" to arrive at a consensus estimate.
Correct Answer: D. Ask the team to use "Planning Poker" to arrive at a consensus estimate.
Rationale: Planning Poker is a proven Agile technique designed to facilitate team-based estimation
and leverage the collective wisdom of the group. This process naturally surfaces different
perspectives (like the senior developer's) and encourages discussion to build a true consensus. Simply
accepting a single estimate (Option A) or overruling it (Option C) undermines the value of the team's
collective input. While encouraging the developer to explain their rationale (Option B) is part of the
process, the core facilitator action is to employ the technique that ensures all voices are heard and a
true consensus is reached.
7. An organization is adopting a new enterprise resource planning (ERP) system. The change
management team is tasked with preparing employees for the new system. Which activity is MOST
critical for reducing resistance and ensuring user adoption?
A. Creating comprehensive user manuals.
B. Announcing the project go-live date six months in advance.
C. Identifying and engaging early adopters and champions within the organization.
D. Offering monetary incentives for employees who complete training early.
Correct Answer: C. Identifying and engaging early adopters and champions within the organization.
Rationale: Engaging influential champions from within the user base is one of the most effective
strategies for change management. These individuals can provide peer-to-peer support, demonstrate
the benefits of the system, and help bridge the gap between the project team and end-users. This
reduces resistance by making the change feel less imposed and more organic. While manuals (Option
A) and announcements (Option B) are important for communication, they are one-way and do not
foster the personal buy-in that champions provide. Monetary incentives (Option D) can be a
secondary tactic but are not as effective as intrinsic motivation and peer influence.
8. Which term describes the total amount of data that can be transferred from one point to
another within a specific period?
A. Throughput
B. Bandwidth
C. Latency
D. Jitter
Correct Answer: B. Bandwidth
Rationale: Bandwidth is the maximum rate of data transfer across a given path. It's measured in bits
per second (bps). Throughput (Option A) is the actual rate of successful data transfer and is usually
lower than the theoretical bandwidth. Latency (Option C) is the delay in data transfer, and jitter
(Option D) is the variation in latency.
9. A Quality Assurance (QA) analyst finds a critical defect in a software build just before a
scheduled release. The project manager wants to release on time, and the developer believes the
fix is risky and could destabilize the system. The BEST approach is to:
A. Release the product as scheduled and address the defect in the next patch.
B. Delay the release to test and integrate the fix thoroughly.
, C. Force the developer to apply the fix immediately.
D. Have the QA analyst approve the release with the known defect.
Correct Answer: B. Delay the release to test and integrate the fix thoroughly.
Rationale: The fundamental purpose of QA is to ensure quality. Releasing with a critical defect
(Options A and D) compromises the product's integrity and user experience, damaging the
organization's reputation. Forcing an untested fix (Option C) could introduce new, potentially worse
issues. The most responsible action is to delay the release, allowing time for a proper root cause
analysis, development, and rigorous testing of the fix.
10. In the context of cloud computing, which characteristic enables rapid scaling of resources to
meet fluctuating demand?
A. Broad network access
B. Measured service
C. Resource pooling
D. Rapid elasticity
Correct Answer: D. Rapid elasticity
Rationale: Rapid elasticity is the cloud characteristic that allows for the quick and automatic scaling
of resources, both up and down, in response to demand. This is what gives cloud computing its
flexibility and cost-effectiveness. Broad network access (Option A) refers to access over the network.
Measured service (Option B) refers to metering and billing. Resource pooling (Option C) refers to the
provider's multi-tenant model.
11. A service desk analyst receives a call from a frustrated user who has been locked out of their
account. The user is yelling and blaming the IT department. What is the MOST appropriate first
step?
A. Politely inform the user that their frustration is unprofessional.
B. Ask the user to submit a formal ticket and then hang up.
C. Listen actively to the user's issue without interrupting.
D. Immediately escalate the call to a supervisor.
Correct Answer: C. Listen actively to the user's issue without interrupting.
Rationale: The first and most critical step in de-escalating a frustrated caller is active listening.
Allowing the user to vent and clearly explain their problem validates their feelings and helps build
rapport. This is a foundational principle of customer service and service desk professionalism. Option
A is confrontational and counterproductive. Option B abdicates responsibility. Escalating to a
supervisor (Option D) should happen only if the analyst cannot resolve the issue after attempting to
de-escalate the situation.
12. What is the PRIMARY purpose of a non-disclosure agreement (NDA) in a project context?
A. To ensure project deliverables are completed on time.
B. To prevent project team members from disclosing confidential information.
C. To resolve disputes between the project team and stakeholders.
D. To define the acceptance criteria for project deliverables.
Correct Answer: B. To prevent project team members from disclosing confidential information.
ANSWERS | 2026–2027 LATEST UPDATE | GUARANTEED
PASS | DETAILED RATIONALES | FULL STUDY GUIDE | EXAM
PREP | PRACTICE TEST | CERTIFICATION PREPARATION
1. A project team is in the execution phase, and a key stakeholder requests a significant change
that will impact the project scope and schedule. What is the project manager's FIRST course of
action?
A. Implement the change immediately to satisfy the stakeholder.
B. Evaluate the impact of the change and submit a formal change request.
C. Escalate the issue to the project sponsor for a decision.
D. Reject the change request to protect the project baseline.
Correct Answer: B. Evaluate the impact of the change and submit a formal change request.
Rationale: The correct first step is to assess the impact of the proposed change on the project's scope,
schedule, and budget. This evaluation forms the basis of a formal change request, which must be
submitted to the change control board (CCB) for approval. While satisfying the stakeholder is
important, it cannot come at the expense of the project's formal control processes. Escalating to the
sponsor is premature before the full impact is known, and rejecting a request without evaluation is
contrary to the principles of stakeholder management and integrated change control.
2. An IT manager is reviewing the results of a recent vulnerability scan. Several critical
vulnerabilities were found on servers that process sensitive customer data. Which of the following
is the MOST immediate risk management action?
A. Update the organization's disaster recovery plan.
B. Implement compensating controls to mitigate the vulnerabilities.
C. Perform a full business impact analysis.
D. Apply the recommended security patches immediately.
Correct Answer: D. Apply the recommended security patches immediately.
Rationale: While all options are components of a robust security posture, the most immediate and
direct action to address a critical vulnerability is to apply the available fix, such as a security patch.
The risk of exploitation is high, making speed essential. Implementing compensating controls (Option
B) might be a secondary step if a patch isn't available. A business impact analysis (Option C) or
updating the disaster recovery plan (Option A) are longer-term planning activities that do not address
the immediate threat.
3. A business analyst is gathering requirements for a new customer relationship management
(CRM) system. Which technique is BEST suited for understanding the underlying needs and
motivations of end-users?
A. Brainstorming
B. Document analysis
C. Interviews
D. Surveys
,Correct Answer: C. Interviews
Rationale: Interviews, especially one-on-one, allow the business analyst to ask probing questions,
clarify ambiguous answers, and uncover the "why" behind user requests. This provides a deep
understanding of needs and motivations. Brainstorming (Option A) is useful for generating ideas but
less effective for in-depth understanding. Document analysis (Option B) reveals existing processes but
not necessarily user motivations. Surveys (Option D) are effective for collecting broad feedback but
lack the depth of direct interaction.
4. According to ITIL 4, which practice focuses on aligning an organization's capabilities and
resources with the strategic objectives of the business?
A. Service Level Management
B. Strategy Management
C. Business Relationship Management
D. Portfolio Management
Correct Answer: B. Strategy Management
Rationale: The Strategy Management practice is specifically designed to establish a clear strategic
direction, ensuring that services and products are created and managed to meet the organization's
goals. Service Level Management (Option A) is about defining and managing service levels. Business
Relationship Management (Option C) focuses on nurturing relationships with stakeholders. Portfolio
Management (Option D) is about managing the investment portfolio of services, which is a
component of a broader strategy.
5. During a code review, a developer discovers that a colleague has hardcoded database
credentials directly into a web application's source code. What is the MOST appropriate action for
the developer to take?
A. Remove the credentials and commit the change without discussion.
B. Report the finding to the security team but take no further action.
C. Privately inform the colleague and educate them on secure coding practices.
D. Immediately alert the project manager to have the colleague removed from the project.
Correct Answer: C. Privately inform the colleague and educate them on secure coding practices.
Rationale: This is a serious security flaw, but the most professional and constructive first step is to
address it directly with the colleague. This provides an opportunity to correct the immediate issue
and foster a learning culture around secure coding practices. Removing the credentials without
discussion (Option A) is a unilateral action that doesn't address the root cause or educate the
developer. Reporting to security without engaging the colleague (Option B) is an escalation that
bypasses a key educational moment. Option D is a severe overreaction; a single security lapse, while
serious, is not typically grounds for immediate removal.
6. A project manager is leading a software development project using an Agile methodology.
During a sprint planning meeting, the team estimates the effort for user stories. A senior developer
with significant expertise in the domain provides a very low estimate for a complex story. What is
the BEST way for the Scrum Master to facilitate the session?
A. Accept the senior developer's estimate as the team's consensus to maintain team harmony.
B. Encourage the senior developer to explain their rationale before the team votes.
,C. Overrule the senior developer's estimate and use the higher estimate to add buffer.
D. Ask the team to use "Planning Poker" to arrive at a consensus estimate.
Correct Answer: D. Ask the team to use "Planning Poker" to arrive at a consensus estimate.
Rationale: Planning Poker is a proven Agile technique designed to facilitate team-based estimation
and leverage the collective wisdom of the group. This process naturally surfaces different
perspectives (like the senior developer's) and encourages discussion to build a true consensus. Simply
accepting a single estimate (Option A) or overruling it (Option C) undermines the value of the team's
collective input. While encouraging the developer to explain their rationale (Option B) is part of the
process, the core facilitator action is to employ the technique that ensures all voices are heard and a
true consensus is reached.
7. An organization is adopting a new enterprise resource planning (ERP) system. The change
management team is tasked with preparing employees for the new system. Which activity is MOST
critical for reducing resistance and ensuring user adoption?
A. Creating comprehensive user manuals.
B. Announcing the project go-live date six months in advance.
C. Identifying and engaging early adopters and champions within the organization.
D. Offering monetary incentives for employees who complete training early.
Correct Answer: C. Identifying and engaging early adopters and champions within the organization.
Rationale: Engaging influential champions from within the user base is one of the most effective
strategies for change management. These individuals can provide peer-to-peer support, demonstrate
the benefits of the system, and help bridge the gap between the project team and end-users. This
reduces resistance by making the change feel less imposed and more organic. While manuals (Option
A) and announcements (Option B) are important for communication, they are one-way and do not
foster the personal buy-in that champions provide. Monetary incentives (Option D) can be a
secondary tactic but are not as effective as intrinsic motivation and peer influence.
8. Which term describes the total amount of data that can be transferred from one point to
another within a specific period?
A. Throughput
B. Bandwidth
C. Latency
D. Jitter
Correct Answer: B. Bandwidth
Rationale: Bandwidth is the maximum rate of data transfer across a given path. It's measured in bits
per second (bps). Throughput (Option A) is the actual rate of successful data transfer and is usually
lower than the theoretical bandwidth. Latency (Option C) is the delay in data transfer, and jitter
(Option D) is the variation in latency.
9. A Quality Assurance (QA) analyst finds a critical defect in a software build just before a
scheduled release. The project manager wants to release on time, and the developer believes the
fix is risky and could destabilize the system. The BEST approach is to:
A. Release the product as scheduled and address the defect in the next patch.
B. Delay the release to test and integrate the fix thoroughly.
, C. Force the developer to apply the fix immediately.
D. Have the QA analyst approve the release with the known defect.
Correct Answer: B. Delay the release to test and integrate the fix thoroughly.
Rationale: The fundamental purpose of QA is to ensure quality. Releasing with a critical defect
(Options A and D) compromises the product's integrity and user experience, damaging the
organization's reputation. Forcing an untested fix (Option C) could introduce new, potentially worse
issues. The most responsible action is to delay the release, allowing time for a proper root cause
analysis, development, and rigorous testing of the fix.
10. In the context of cloud computing, which characteristic enables rapid scaling of resources to
meet fluctuating demand?
A. Broad network access
B. Measured service
C. Resource pooling
D. Rapid elasticity
Correct Answer: D. Rapid elasticity
Rationale: Rapid elasticity is the cloud characteristic that allows for the quick and automatic scaling
of resources, both up and down, in response to demand. This is what gives cloud computing its
flexibility and cost-effectiveness. Broad network access (Option A) refers to access over the network.
Measured service (Option B) refers to metering and billing. Resource pooling (Option C) refers to the
provider's multi-tenant model.
11. A service desk analyst receives a call from a frustrated user who has been locked out of their
account. The user is yelling and blaming the IT department. What is the MOST appropriate first
step?
A. Politely inform the user that their frustration is unprofessional.
B. Ask the user to submit a formal ticket and then hang up.
C. Listen actively to the user's issue without interrupting.
D. Immediately escalate the call to a supervisor.
Correct Answer: C. Listen actively to the user's issue without interrupting.
Rationale: The first and most critical step in de-escalating a frustrated caller is active listening.
Allowing the user to vent and clearly explain their problem validates their feelings and helps build
rapport. This is a foundational principle of customer service and service desk professionalism. Option
A is confrontational and counterproductive. Option B abdicates responsibility. Escalating to a
supervisor (Option D) should happen only if the analyst cannot resolve the issue after attempting to
de-escalate the situation.
12. What is the PRIMARY purpose of a non-disclosure agreement (NDA) in a project context?
A. To ensure project deliverables are completed on time.
B. To prevent project team members from disclosing confidential information.
C. To resolve disputes between the project team and stakeholders.
D. To define the acceptance criteria for project deliverables.
Correct Answer: B. To prevent project team members from disclosing confidential information.
