mcAfee Secure Website
23

PMI PMP Bundle

Exam Code: PMP

Exam Name Project Management Professional (PMBOK 8)

Certification Provider: PMI

Corresponding Certification: PMP

PMP Training Materials $19.99

Reliable & Actual Study Materials for PMP Exam Success

The Latest PMP Exam Questions as Experienced in the Actual Test!

  • 24
    Questions & Answers

    PMP Questions & Answers

    677 Questions & Answers

    Includes questions types found on actual exam such as drag and drop, simulation, type in, and fill in the blank.

  • exam =30
    Study Guide

    PMP Study Guide

    255 PDF Pages

    Study Guide developed by industry experts who have written exams in the past. They are technology-specific IT certification researchers with at least a decade of experience at Fortune 500 companies.

exam =32

Project Management Professional (PMBOK 8) (PMP) Practice Tests

Guarantee

Satisfaction Guaranteed

Pass4sure has a remarkable PMI Candidate Success record. We're confident of our products and provide no hassle product exchange. That's how confident we are!

99.3% Pass Rate
Total Cost: $154.98
Bundle Price: $134.99

Purchase Individually

  • exam =34
    Questions & Answers

    Questions & Answers

    677 Questions

    $124.99
    exam =35
  • exam =36
    Study Guide

    Study Guide

    255 PDF Pages

    $29.99

PMI PMP Practice Test 37

Question 360

During a project governance review on an adaptive/agile initiative, an agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes. Which indicator would most directly show whether this specific situation is improving?

  1. Track supplier delivery variance and repeat missed recovery promises.
  2. Track accepted customer-value increments rather than purchased velocity points.
  3. Track change claims and safety deviations after award relative to bid assumptions.
  4. Track acceptance milestones missing escrow or repository deliverables.

Explanation

Correct Answer

B:

Track accepted customer-value increments rather than purchased velocity points. The indicator reflects the underlying outcome or remaining exposure rather than a nearby but different activity. In this case, paying for effort measures alone can obscure whether outsourced work creates value. The stated constraint is: An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes. The chosen measurement is the most direct response under these conditions.

Incorrect Answers

A:

Track supplier delivery variance and repeat missed recovery promises. This response addresses another situation in the same task area: A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. There, vendor performance must be evaluated against enforceable commitments and evidence. For the current situation—An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes—this option would leave the specific need unresolved: paying for effort measures alone can obscure whether outsourced work creates value.

C:

Track change claims and safety deviations after award relative to bid assumptions. This response addresses another situation in the same task area: A construction project manager is asked to select a contractor solely on the lowest initial bid. There, lowest upfront price is not necessarily the lowest delivery risk or total cost. For the current situation—An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes—this option would leave the specific need unresolved: paying for effort measures alone can obscure whether outsourced work creates value.

D:

Track acceptance milestones missing escrow or repository deliverables. This response addresses another situation in the same task area: A remote software supplier fails to transfer source code despite meeting reported delivery milestones. There, supplier deliverables include maintainable assets needed to operate the product. For the current situation—An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes—this option would leave the specific need unresolved: paying for effort measures alone can obscure whether outsourced work creates value.

Question 361

In a discussion with the delivery team on an adaptive/agile initiative, an agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes. Which evidence would best substantiate that the intended outcome is actually achieved?

  1. Review delivered user outcomes and contract acceptance evidence.
  2. Verify repository access, build reproducibility, and contractual handover records.
  3. Inspect subcontract terms and assurance evidence for the actual processing chain.
  4. Review scope maturity and contract clauses against potential change scenarios.

Explanation

Correct Answer

A:

Review delivered user outcomes and contract acceptance evidence. The evidence tests whether the intended behavior or acceptance occurred instead of relying on unsupported assurances. In this case, paying for effort measures alone can obscure whether outsourced work creates value. The stated constraint is: An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes. The chosen assurance is the most direct response under these conditions.

Incorrect Answers

B:

Verify repository access, build reproducibility, and contractual handover records. This response addresses another situation in the same task area: A remote software supplier fails to transfer source code despite meeting reported delivery milestones. There, supplier deliverables include maintainable assets needed to operate the product. For the current situation—An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes—this option would leave the specific need unresolved: paying for effort measures alone can obscure whether outsourced work creates value.

C:

Inspect subcontract terms and assurance evidence for the actual processing chain. This response addresses another situation in the same task area: A global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing. There, subcontracting changes the exposure and obligations even when the prime contract is signed. For the current situation—An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes—this option would leave the specific need unresolved: paying for effort measures alone can obscure whether outsourced work creates value.

D:

Review scope maturity and contract clauses against potential change scenarios. This response addresses another situation in the same task area: An EPC contractor proposes a fixed-price agreement for a prototype with unresolved design requirements. There, commercial structure should fit scope certainty and risk ownership. For the current situation—An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes—this option would leave the specific need unresolved: paying for effort measures alone can obscure whether outsourced work creates value.

Question 362

While resolving an implementation issue on a hybrid initiative, a cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction. What should the project manager do first to address the specific problem?

  1. Evaluate total risk-adjusted cost, safety capability and execution evidence before ranking offers.
  2. Reject noncompliant bids or negotiate a compliant architecture before award.
  3. Negotiate measurable delivery acceptance criteria and transparent backlog collaboration.
  4. Invoke contract performance review and require credible recovery evidence before rebaseline.

Explanation

Correct Answer

B:

Reject noncompliant bids or negotiate a compliant architecture before award. The intervention directly targets the cause described in the scenario rather than creating an unrelated process change. In this case, procurement savings do not permit bypassing mandatory legal constraints. The stated constraint is: A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction. The chosen action is the most direct response under these conditions.

Incorrect Answers

A:

Evaluate total risk-adjusted cost, safety capability and execution evidence before ranking offers. This response addresses another situation in the same task area: A construction project manager is asked to select a contractor solely on the lowest initial bid. There, lowest upfront price is not necessarily the lowest delivery risk or total cost. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

C:

Negotiate measurable delivery acceptance criteria and transparent backlog collaboration. This response addresses another situation in the same task area: An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes. There, paying for effort measures alone can obscure whether outsourced work creates value. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

D:

Invoke contract performance review and require credible recovery evidence before rebaseline. This response addresses another situation in the same task area: A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. There, vendor performance must be evaluated against enforceable commitments and evidence. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

Question 363

In a project risk and outcome review on a hybrid initiative, a cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction. Which assignment establishes appropriate accountability for the affected decision?

  1. Have data-protection authority approve residency and procurement document selection.
  2. Have product owner accept outcomes and procurement oversee vendor obligation terms.
  3. Have procurement and technical sponsor agree commercial risk allocation before solicitation.
  4. Have the contract owner approve payment on receipt and validation of required assets.

Explanation

Correct Answer

A:

Have data-protection authority approve residency and procurement document selection. The selected owner has authority over the specific business decision instead of transferring responsibility to an unrelated function. In this case, procurement savings do not permit bypassing mandatory legal constraints. The stated constraint is: A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction. The chosen accountability is the most direct response under these conditions.

Incorrect Answers

B:

Have product owner accept outcomes and procurement oversee vendor obligation terms. This response addresses another situation in the same task area: An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes. There, paying for effort measures alone can obscure whether outsourced work creates value. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

C:

Have procurement and technical sponsor agree commercial risk allocation before solicitation. This response addresses another situation in the same task area: An EPC contractor proposes a fixed-price agreement for a prototype with unresolved design requirements. There, commercial structure should fit scope certainty and risk ownership. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

D:

Have the contract owner approve payment on receipt and validation of required assets. This response addresses another situation in the same task area: A remote software supplier fails to transfer source code despite meeting reported delivery milestones. There, supplier deliverables include maintainable assets needed to operate the product. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

Question 364

During a delivery checkpoint on a hybrid initiative, a cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction. Which indicator would most directly show whether this specific situation is improving?

  1. Track change claims and safety deviations after award relative to bid assumptions.
  2. Track variation claims caused by unpriced design changes.
  3. Track accepted customer-value increments rather than purchased velocity points.
  4. Track unverified data-location obligations in supplier commitments.

Explanation

Correct Answer

D:

Track unverified data-location obligations in supplier commitments. The indicator reflects the underlying outcome or remaining exposure rather than a nearby but different activity. In this case, procurement savings do not permit bypassing mandatory legal constraints. The stated constraint is: A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction. The chosen measurement is the most direct response under these conditions.

Incorrect Answers

A:

Track change claims and safety deviations after award relative to bid assumptions. This response addresses another situation in the same task area: A construction project manager is asked to select a contractor solely on the lowest initial bid. There, lowest upfront price is not necessarily the lowest delivery risk or total cost. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

B:

Track variation claims caused by unpriced design changes. This response addresses another situation in the same task area: An EPC contractor proposes a fixed-price agreement for a prototype with unresolved design requirements. There, commercial structure should fit scope certainty and risk ownership. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

C:

Track accepted customer-value increments rather than purchased velocity points. This response addresses another situation in the same task area: An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes. There, paying for effort measures alone can obscure whether outsourced work creates value. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

Question 365

During a project governance review on a hybrid initiative, a cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction. Which evidence would best substantiate that the intended outcome is actually achieved?

  1. Audit scoring sheets, due diligence findings, and signed evaluation criteria.
  2. Inspect subcontract terms and assurance evidence for the actual processing chain.
  3. Review milestone acceptance history and capacity-backed recovery plan.
  4. Review binding hosting terms and verified data residency evidence.

Explanation

Correct Answer

D:

Review binding hosting terms and verified data residency evidence. The evidence tests whether the intended behavior or acceptance occurred instead of relying on unsupported assurances. In this case, procurement savings do not permit bypassing mandatory legal constraints. The stated constraint is: A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction. The chosen assurance is the most direct response under these conditions.

Incorrect Answers

A:

Audit scoring sheets, due diligence findings, and signed evaluation criteria. This response addresses another situation in the same task area: A construction project manager is asked to select a contractor solely on the lowest initial bid. There, lowest upfront price is not necessarily the lowest delivery risk or total cost. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

B:

Inspect subcontract terms and assurance evidence for the actual processing chain. This response addresses another situation in the same task area: A global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing. There, subcontracting changes the exposure and obligations even when the prime contract is signed. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

C:

Review milestone acceptance history and capacity-backed recovery plan. This response addresses another situation in the same task area: A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. There, vendor performance must be evaluated against enforceable commitments and evidence. For the current situation—A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction—this option would leave the specific need unresolved: procurement savings do not permit bypassing mandatory legal constraints.

Question 366

At the next sponsor and team checkpoint on a predictive initiative, a supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. What should the project manager do first to address the specific problem?

  1. Reassess supplier and fourth-party controls before authorizing data access.
  2. Invoke contract performance review and require credible recovery evidence before rebaseline.
  3. Enforce contractual intellectual-property and handover acceptance before final payment.
  4. Choose a contracting strategy that accommodates evolving scope and explicitly allocates uncertainty.

Explanation

Correct Answer

B:

Invoke contract performance review and require credible recovery evidence before rebaseline. The intervention directly targets the cause described in the scenario rather than creating an unrelated process change. In this case, vendor performance must be evaluated against enforceable commitments and evidence. The stated constraint is: A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. The chosen action is the most direct response under these conditions.

Incorrect Answers

A:

Reassess supplier and fourth-party controls before authorizing data access. This response addresses another situation in the same task area: A global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing. There, subcontracting changes the exposure and obligations even when the prime contract is signed. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

C:

Enforce contractual intellectual-property and handover acceptance before final payment. This response addresses another situation in the same task area: A remote software supplier fails to transfer source code despite meeting reported delivery milestones. There, supplier deliverables include maintainable assets needed to operate the product. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

D:

Choose a contracting strategy that accommodates evolving scope and explicitly allocates uncertainty. This response addresses another situation in the same task area: An EPC contractor proposes a fixed-price agreement for a prototype with unresolved design requirements. There, commercial structure should fit scope certainty and risk ownership. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

Question 367

During an integrated project review on a predictive initiative, a supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. Which assignment establishes appropriate accountability for the affected decision?

  1. Have procurement and technical sponsor agree commercial risk allocation before solicitation.
  2. Have contract manager address remedies and operations lead validate recovery feasibility.
  3. Have vendor owner coordinate assessment and privacy owner approve exposure acceptance.
  4. Have data-protection authority approve residency and procurement document selection.

Explanation

Correct Answer

B:

Have contract manager address remedies and operations lead validate recovery feasibility. The selected owner has authority over the specific business decision instead of transferring responsibility to an unrelated function. In this case, vendor performance must be evaluated against enforceable commitments and evidence. The stated constraint is: A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. The chosen accountability is the most direct response under these conditions.

Incorrect Answers

A:

Have procurement and technical sponsor agree commercial risk allocation before solicitation. This response addresses another situation in the same task area: An EPC contractor proposes a fixed-price agreement for a prototype with unresolved design requirements. There, commercial structure should fit scope certainty and risk ownership. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

C:

Have vendor owner coordinate assessment and privacy owner approve exposure acceptance. This response addresses another situation in the same task area: A global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing. There, subcontracting changes the exposure and obligations even when the prime contract is signed. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

D:

Have data-protection authority approve residency and procurement document selection. This response addresses another situation in the same task area: A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction. There, procurement savings do not permit bypassing mandatory legal constraints. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

Question 368

In a project coordination meeting on a predictive initiative, a supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. Which indicator would most directly show whether this specific situation is improving?

  1. Track unassessed subcontractors with privileged or personal-data access.
  2. Track supplier delivery variance and repeat missed recovery promises.
  3. Track acceptance milestones missing escrow or repository deliverables.
  4. Track variation claims caused by unpriced design changes.

Explanation

Correct Answer

B:

Track supplier delivery variance and repeat missed recovery promises. The indicator reflects the underlying outcome or remaining exposure rather than a nearby but different activity. In this case, vendor performance must be evaluated against enforceable commitments and evidence. The stated constraint is: A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. The chosen measurement is the most direct response under these conditions.

Incorrect Answers

A:

Track unassessed subcontractors with privileged or personal-data access. This response addresses another situation in the same task area: A global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing. There, subcontracting changes the exposure and obligations even when the prime contract is signed. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

C:

Track acceptance milestones missing escrow or repository deliverables. This response addresses another situation in the same task area: A remote software supplier fails to transfer source code despite meeting reported delivery milestones. There, supplier deliverables include maintainable assets needed to operate the product. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

D:

Track variation claims caused by unpriced design changes. This response addresses another situation in the same task area: An EPC contractor proposes a fixed-price agreement for a prototype with unresolved design requirements. There, commercial structure should fit scope certainty and risk ownership. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

Question 369

While resolving an implementation issue on a predictive initiative, a supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. Which evidence would best substantiate that the intended outcome is actually achieved?

  1. Review delivered user outcomes and contract acceptance evidence.
  2. Review milestone acceptance history and capacity-backed recovery plan.
  3. Review binding hosting terms and verified data residency evidence.
  4. Inspect subcontract terms and assurance evidence for the actual processing chain.

Explanation

Correct Answer

B:

Review milestone acceptance history and capacity-backed recovery plan. The evidence tests whether the intended behavior or acceptance occurred instead of relying on unsupported assurances. In this case, vendor performance must be evaluated against enforceable commitments and evidence. The stated constraint is: A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. The chosen assurance is the most direct response under these conditions.

Incorrect Answers

A:

Review delivered user outcomes and contract acceptance evidence. This response addresses another situation in the same task area: An agile software initiative considers hiring a vendor whose contract promises story points rather than usable outcomes. There, paying for effort measures alone can obscure whether outsourced work creates value. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

C:

Review binding hosting terms and verified data residency evidence. This response addresses another situation in the same task area: A cloud service vendor offers lower price but cannot meet the required cross-border data-hosting restriction. There, procurement savings do not permit bypassing mandatory legal constraints. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

D:

Inspect subcontract terms and assurance evidence for the actual processing chain. This response addresses another situation in the same task area: A global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing. There, subcontracting changes the exposure and obligations even when the prime contract is signed. For the current situation—A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence—this option would leave the specific need unresolved: vendor performance must be evaluated against enforceable commitments and evidence.

Question 370

In a discussion with the delivery team on a predictive initiative, a global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing. What should the project manager do first to address the specific problem?

  1. Invoke contract performance review and require credible recovery evidence before rebaseline.
  2. Evaluate total risk-adjusted cost, safety capability and execution evidence before ranking offers.
  3. Reassess supplier and fourth-party controls before authorizing data access.
  4. Enforce contractual intellectual-property and handover acceptance before final payment.

Explanation

Correct Answer

C:

Reassess supplier and fourth-party controls before authorizing data access. The intervention directly targets the cause described in the scenario rather than creating an unrelated process change. In this case, subcontracting changes the exposure and obligations even when the prime contract is signed. The stated constraint is: A global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing. The chosen action is the most direct response under these conditions.

Incorrect Answers

A:

Invoke contract performance review and require credible recovery evidence before rebaseline. This response addresses another situation in the same task area: A supplier of safety equipment missed three milestones and proposes a new delivery date without root-cause evidence. There, vendor performance must be evaluated against enforceable commitments and evidence. For the current situation—A global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing—this option would leave the specific need unresolved: subcontracting changes the exposure and obligations even when the prime contract is signed.

B:

Evaluate total risk-adjusted cost, safety capability and execution evidence before ranking offers. This response addresses another situation in the same task area: A construction project manager is asked to select a contractor solely on the lowest initial bid. There, lowest upfront price is not necessarily the lowest delivery risk or total cost. For the current situation—A global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing—this option would leave the specific need unresolved: subcontracting changes the exposure and obligations even when the prime contract is signed.

D:

Enforce contractual intellectual-property and handover acceptance before final payment. This response addresses another situation in the same task area: A remote software supplier fails to transfer source code despite meeting reported delivery milestones. There, supplier deliverables include maintainable assets needed to operate the product. For the current situation—A global procurement project discovers its chosen partner uses an undisclosed subcontractor for personal-data processing—this option would leave the specific need unresolved: subcontracting changes the exposure and obligations even when the prime contract is signed.