The questions are OK ... but the answers are surely self-evident.
Rather than launch into (yet another) essay on this topic - which has been batted about on this forum for at least the last twenty years - can I suggest that your student spends some time with the Search function on this website. There is a wealth of stuff available on line, too.
You see, we (at this end) don't yet know how much your student already knows about PM, Risk-Based PM, computer databases, assigning priorities ... and all the rest. Are we dealing with a novice, or someone already having some experience in such matters?
Perhaps I should also add (by way of enquiry), what is the purpose of projects of this type? Are they simply a requirement of the course (that is, that a "research" project be undertaken)? Are topics assigned, or does the student get to choose? What does the lecturer seek to establish from the work turned in? What use is actually made of the findings?