CompTIA Project+ (PK0-005) flashcards

The process of reviewing all change requests, approving changes, and managing changes to deliverables, organizational process assets, project documents, and the project management plan.

• Applies throughout the project.
• Ensures only approved changes are implemented.
• Involves evaluating impact on baselines.

Memory trick: Changes need a 'STOP, LOOK, LISTEN' process before proceeding.

Categories of cloud computing services that define the level of control and responsibility shared between the cloud provider and the customer.

• IaaS: Infrastructure (VMs, storage, networks).
• PaaS: Platform (OS, middleware, runtime).
• SaaS: Software (complete application).
• FaaS: Function (serverless execution).

Memory trick: Cloud Control: IaaS has Most, SaaS has Least.

The process of prioritizing individual project risks for further analysis or action by assessing their probability of occurrence and impact.

• Uses subjective judgment and data to assess risks.
• Helps focus attention on high-priority risks.
• Often involves probability and impact matrix for rating.

Memory trick: Qualitative is for sorting, Quantitative is for counting.

The iterative process of continuously refining and adding detail to project plans as more accurate information becomes available.

• Applies throughout the project lifecycle
• Distinct from rolling wave planning, which is a specific technique for it
• Not the same as scope creep, which is uncontrolled

Memory trick: Progressive elaboration = the plan gets 'sharper' over time like a zoom lens

The hardware and software resources of an entire network that enable network connectivity, communication, operations and management of an enterprise.

• Includes routers, switches, firewalls, servers, and cabling.
• Essential for data transmission and application accessibility.
• Performance is measured by bandwidth, latency, and throughput.

Memory trick: Networks, Servers, Storage: The IT Core.

An Agile method focused on visualizing work, limiting work in progress (WIP), and maximizing efficiency (flow) for ongoing operational processes or continuous delivery.

• Uses a visual board to represent workflow states.
• Emphasizes continuous delivery and flow, rather than iterations.
• Ideal for managing ongoing operational tasks and reducing bottlenecks.

Memory trick: Kanban's board shows the flow, helping operations grow.

One of the four core values of the Agile Manifesto, emphasizing the importance of adapting to evolving requirements and circumstances over rigid adherence to a pre-defined plan.

• Embraces flexibility and adaptability.
• Prioritizes stakeholder feedback and market shifts.
• Allows for continuous improvement and course correction.

Memory trick: I C W R: Individuals, Collaboration, Working, Responding.

An initiation-phase document listing all identified project stakeholders along with their interest, influence, and engagement requirements.

• Created early, alongside the charter and business case
• Feeds into the stakeholder engagement/communication plan
• Should be updated throughout the project as stakeholders change

Memory trick: 'Business, Charter, Stakeholders, Scope' - build the foundation before planning starts.

The 'Confidentiality' principle of the CIA triad ensures that information is not disclosed to unauthorized individuals, entities, or processes. It involves implementing measures to protect sensitive data from unauthorized access or viewing.

• Protects sensitive data from unauthorized disclosure.
• Achieved through encryption, access control, and data masking.
• Crucial for privacy and regulatory compliance.

Memory trick: Confidentiality: Keep Secrets Safe.

Load balancing distributes incoming network traffic across multiple servers to ensure high availability and optimal resource utilization. Auto-scaling dynamically adjusts the number of compute resources (e.g., virtual machines) in response to changes in demand.

• Load balancing ensures high availability and distributes traffic.
• Auto-scaling provides elasticity by matching resources to demand.
• Together, they deliver resilient and cost-effective cloud applications.

Memory trick: Balance the Load, Auto-Scale for demand.

The automated management, deployment, scaling, networking, and availability of containerized applications.

• Tools like Kubernetes and Docker Swarm are popular.
• Essential for managing microservices architectures.
• Automates tasks such as load balancing, self-healing, and rolling updates.

Memory trick: Orchestrators Organize Containers with Care.

A dedicated, private network connection that links an organization's on-premises infrastructure directly to a public cloud provider's network, bypassing the public internet. Examples include AWS Direct Connect and Azure ExpressRoute.

• Provides dedicated, high-bandwidth connectivity.
• Offers lower latency and consistent network performance.
• Enhances security by not traversing the public internet.

Memory trick: Private Connect: Direct, Dedicated, Dependable.

A cloud strategy combining deployments in multiple geographical regions for high availability and disaster recovery, while specifically configuring data storage and processing to comply with data sovereignty laws of different countries.

• Ensures high availability and resilience against regional failures.
• Addresses data sovereignty by keeping data within specific national borders.
• Critical for global services with strict regulatory compliance.

Memory trick: Regions for resilience, residency for regulations.

Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment.

• Mandatory for all entities handling credit card data.
• Aims to reduce credit card fraud.
• Includes requirements for network security, data protection, vulnerability management, and access control.

Memory trick: Regulations Rule Risky Records.

Adhering to regulations and standards that protect personal and sensitive information from unauthorized access, use, or disclosure.

• Often requires encryption, access controls, and data minimization.
• Involves understanding and implementing legal frameworks like GDPR, HIPAA, CCPA.
• Critical for maintaining trust and avoiding legal penalties.

Memory trick: Privacy Protects People's PII.

A technology that creates a secure, encrypted connection over a less secure network, such as the internet. It allows remote users or sites to securely access private network resources.

• Encrypts data traffic between endpoints.
• Creates a 'private' tunnel over a public network.
• Essential for secure remote access to corporate resources.

Memory trick: VPNs Provide Private Paths.

An access control mechanism that grants or denies access to resources based on the roles individual users have within an organization. Permissions are associated with roles, and users are assigned to roles.

• Simplifies access management in large organizations.
• Permissions are assigned to roles, not individual users.
• Ensures users have only the access necessary for their job functions.

Memory trick: RBAC: Roles grant rights, keeping access clear and tight.

A secure version of HTTP that uses SSL/TLS encryption to protect communication between a web browser and a website, ensuring data confidentiality, integrity, and authenticity.

• Encrypts web traffic using SSL/TLS.
• Protects against eavesdropping and tampering.
• Essential for e-commerce, banking, and sensitive data transfer.

Memory trick: HTTPS is HTTP with a secure 'S'eal of approval.

The process of identifying, assessing, and reducing potential negative impacts associated with implementing changes to systems or processes, often through careful planning, testing, and contingency measures.

• Crucial for critical and legacy systems.
• Involves thorough planning and impact analysis.
• Includes developing rollback strategies and extensive testing.

Memory trick: Test, plan, and roll back to keep things on track.

A network security device that monitors and filters incoming and outgoing network traffic based on an organization's security policies.

• Establishes a barrier between trusted and untrusted networks.
• Can be hardware, software, or cloud-based.
• Essential for network security and segmentation.

Memory trick: Firewalls Fight Intruders.

A formal document used in IT change management to propose, describe, and gain approval for a modification to an IT system, service, or project component. It typically includes details on impact, justification, and rollback plans.

• Initiates the formal change management process.
• Ensures controlled and documented modifications.
• Critical for minimizing risk and communication during IT changes.

Memory trick: Communicate Changes Clearly and Completely.