Which of the following is the BEST method to monitor IT governance effectiveness?

Risk control self-assessment (CSA)

An IT audit reveals inconsistent maintenance of data privacy in enterprise systems primarily due to a lack of data sensitivity categorizations. Once the categorizations are defined, what is the BEST long-term strategic response by IT governance to address this problem?

Standardize data classification processes throughout the enterprise.

Incorporate enterprise privacy categorizations into contracts.

Require business impact analyses (BIAs) for enterprise systems.

Reassess the data governance policy.

A new and expanding enterprise has recently received a report indicating 90% of its data has been collected in just the last six months, triggering data breach and privacy concerns. What should be the IT steering committee's FIRST course of action to ensure new data is managed effectively?

Define data protection and privacy practices.

Mitigate and track data-related issues and risks.

Modify legal and regulatory data requirements.

Define data protection and privacy practices.

Assess the information governance framework.

An enterprise is planning to replace multiple enterprise resource planning (ERP) systems at various regions with one company-wide ERP system. The main objective of this change is to achieve economies of scale efficiencies resulting in cost reductions. To meet this objective, what is the BEST approach in the planning phase of the project?

Minimize customization by standardizing ERP processes across regions.

Implement an ERP system on shared resources with the lowest cost.

Minimize customization by standardizing ERP processes across regions.

Adopt a best in breed web-based architecture for the ERP system.

Use a service provider to evaluate and implement the new ERP processes.

While monitoring an enterprise's IT projects portfolio, it is discovered that a project is 75% complete, but all budgeted resources have been expended. Which of the following is the MOST important task to perform?

Reorganize the IT projects portfolio.

Review the IT governance structure.

An enterprise is evaluating a possible strategic initiative for which IT would be the main driver. There are several risk scenarios associated with the initiative that have been identified. Which of the following should be done FIRST to facilitate a decision?

Assess the impact of each risk.

Define the risk mitigation strategy.

Assess the impact of each risk.

Establish a baseline for each initiative.

Select qualified personnel to manage the project.

Enterprise IT has overseen the implementation of an array of data services with overlapping functionality leading to business inefficiencies. Which of the following is the MOST likely cause of this situation?

insufficient information architecture

An outdated service level agreement (SLA)

An incomplete cost-benefit analysis

Which of the following would be the BEST way to facilitate the adoption of strong IT governance practices throughout a multi-divisional enterprise?

Documenting and communicating key management practices across divisions

Ensuring each divisional policy is consistent with corporate policy

Ensuring divisional governance fosters continuous improvement processes

Mandating data standardization across the distributed enterprise

Documenting and communicating key management practices across divisions

An enterprise considers implementing a system that uses a technology that is not in line with its IT strategy. The business case indicates significant benefit to the enterprise. Which of the following is the BEST way to manage this situation within an IT governance framework?

Initiate an operational change request.

Update the IT strategy to align with the new technology.

Initiate an operational change request.

Address as part of an architecture exception process.

An enterprise can BEST assess the benefits of a new IT project through its life cycle by:

calculation of the total cost of ownership.

periodic review of the business case.

periodic measurement of the project slip rate.

calculation of the net present value (NPV).

The PRIMARY reason for an enterprise to adopt an IT governance framework is to:

assure IT sustains and extends the enterprise strategies and objectives.

expedite IT investments among other competing business investments.

establish IT initiatives focused on the business strategy.

allow IT to optimize confidentiality, integrity, and availability of information assets.

Which of the following is the BEST approach when reviewing The security status of a new business acquisition?

Integrate IT risk assessment into the overall due diligence process.

Embed IT risk management strategies in service level agreements (SLAs).

Establish a committee to oversee the alignment of IT security in new businesses.

Incorporate IT security objectives to cover additional risks associated with new businesses.

Integrate IT risk assessment into the overall due diligence process.

The board of directors of an enterprise has approved a three-year IT strategic program to centralize the core business processes of its global entities into one core system. Which of the following should be the ClO's NEXT step?

Require the development of a program roadmap.

Engage a team to perform a business impact analysis (BIA).

Require the development of a risk management plan.

Determine resource requirements for program implementation.

Require the development of a program roadmap.

A global enterprise is experiencing an economic downturn and is rapidly losing market share. IT senior management is reassessing the core activities of the business, including IT, and the associated resource implications. Management has decided to focus on its local market and to close international operations. A critical issue from a resource management perspective is to retain the most capable staff. This is BEST achieved by:

retaining capable staff exclusively from the local market.

reviewing current goals-based performance appraisals across the enterprise.

ranking employees across the enterprise based on their compensation.

ranking employees across the enterprise based on length of service.

retaining capable staff exclusively from the local market.

An IT steering committee is presented with an audit finding that new software applications are delivered on time but consistently have unacceptable levels of defects. Which of the following would be the BEST direction from the committee?

Evaluate the quality assurance process.

Implement performance indicators.

Evaluate the change management process.

Evaluate the quality assurance process.

The BEST way to manage continuous improvement of governance-related processes is to:

apply effective quality management practices.

assess existing process resource capacities.

define accountability based on roles and responsibilities.

apply effective quality management practices.

require third-party independent reviews.

Which of the following would BEST enable business innovation through IT?

IT participation in business strategy development

Outsourcing of IT to a strategic business partner

Business participation in IT strategy development

Adoption of a standardized business development life cycle

IT participation in business strategy development

Acceptance of an enterprise's newly implemented IT governance initiatives has been resisted by a functional group requesting more autonomy over technology choices. Which of the following is MOST important to accommodate this need for autonomy?

Continuous improvement processes

Documentation of key management practices

An exception management process

A board of directors wants to ensure the enterprise is responsive to changes in its environment that would directly impact critical business processes. Which of the following will BEST facilitate meeting this objective?

Monitoring key risk indicators (KRIs)

Scheduling frequent threat analyses

Monitoring key risk indicators (KRIs)

Regularly reviewing the enterprise risk appetite

Implementing a competitive intelligence tool

An enterprise has established a new department to oversee the life cycle of activities that support data management objectives. Which of the following should be done NEXT?

Develop a business continuity plan (BCP).

Assess the current data business model.

Review data privacy requirements.

Which of the following is the MOST important attribute of an information steward?

The information steward manages the systems that process the relevant data.

The information steward has expertise in managing data quality systems.

The information steward is closely aligned with the business function.

The information steward is part of the information architecture group.

An enterprise learns that a new privacy regulation was recently published to protect customers in the event of a breach involving personally identifiable information (Pll). The IT risk management team's FIRST course of action should be to:

determine if the new regulation introduces new risk.

evaluate the risk appetite for the new regulation.

define the risk tolerance for the new regulation.

determine if the new regulation introduces new risk.

assign a risk owner for the new regulation.

An enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating in-house email capabilities. Which of the following IT strategic actions should be triggered by this decision?

Develop a data protection awareness education training program.

Monitor outgoing email traffic for malware.

Implement a data classification and storage management tool.

Update and communicate data storage and transmission policies.

An enterprise has made the strategic decision to reduce operating costs for the next year and is taking advantage of cost reductions offered by an external cloud service provider. Which of the following should be the IT steering committee's PRIMARY concern?

Updating the business risk profile

Revising the business $ balanced storecard

Updating the business risk profile

Changing the IT steering committee charter

Calculating the cost of the current solution

An IT investment review board wants to ensure that IT will be able to support business initiatives. Each initiative is comprised of several interrelated IT projects. Which of the following would help ensure that the initiatives meet their goals?

Review of the business case for each initiative

Review of project management methodology

Review of the business case for each initiative

Establishment of portfolio management

Verification of initiatives against the architecture

Results of an enterprise's customer survey indicate customers prefer using mobile applications. However, this same survey shows the enterprise's mobile applications are considered inferior compared to legacy browser-based applications. Which of the following should be the FIRST step in creating an effective long-term mobile application strategy?

Identify business requirements concerning mobile applications.

Establish service level agreements (SLAs) with the development team.

Identify key risks and mitigation strategies for mobile applications.

Implement key performance indicators (KPIs) that include application quality.

Identify business requirements concerning mobile applications.

An enterprise experiencing issues with data protection and least privilege is implementing enterprise-wide data encryption in response. Which of the following is the BEST approach to ensure all business units work toward remediating these issues?

Integrate data encryption requirements into existing and planned projects.

Develop key performance indicators (KPIs) to measure enterprise adoption.

Integrate data encryption requirements into existing and planned projects.

Assign owners for data governance initiatives.

Mandate the creation of a data governance framework.

Senior management wants to promote investment in IT, but is uncertain that associated risks are being properly identified. The BEST way to address this concern is to:

ensure business cases are developed by IT.

engage an external consultant to develop risk scenarios.

appoint an IT representative to the business risk committee.

assign an IT cost controller to the finance department.

ensure business cases are developed by IT.

Isaca CGEIT Practice Test 1 - Free Online Exam Questions 1-40

A newly established IT steering committee is concerned whether a system is meeting availability objectives. Which of the following will provide the BEST information to make an assessment?

Balanced scorecard

Capability maturity levels

Performance indicators

Critical success factors (CSFs)

Comment (0)

Isaca CGEIT Practice Test 1

Question

Isaca CGEIT Practice Tests

Practice Tests