Which of the following would be the MOST effective way to ensure IT capabilities are appropriately aligned with business requirements for specific business processes?

Issuing a management mandate that IT and business process stakeholders work together

Establishing key performance indicators {KPIs)

Requiring Internal IT architecture and design reviews

Requiring architecture and design reviews with business process stakeholders

Issuing a management mandate that IT and business process stakeholders work together

The use of an enterprise architecture (EA) framework BEST supports IT governance by providing:

business information for IT capacity planning.

key information for IT service level management.

reference models to align IT with business.

IT standards for application development

business information for IT capacity planning.

To ensure IT risk is managed in a consistent manner, it is MOST important for IT governance to establish a:

risk management committee to identify IT-related risks.

balanced scorecard that includes IT risks.

risk management reporting tool to ensure compliance.

Individual business units within an enterprise have been designing their own IT solutions without consulting the IT department. From a governance perspective, what is the GREATEST issue associated with this situation?

The solution may conflict with existing enterprise goals.

Security controls may not meet IT requirements.

The enterprise does not have the skills to manage the solutions.

The solutions conflict with IT goals and objectives.

The solution may conflict with existing enterprise goals.

Which of the following BEST demonstrates the effectiveness of enterprise IT governance?

An IT balanced scorecard is used.

Business objectives are achieved.

Business objectives are defined.

An IT steering committee is concerned that enterprise technologies have grown stagnant and are outdated. Which of the following is the BEST strategy to invest in modern technology?

Redefine the target architecture to define new technologies that can be incorporated into the infrastructure.

Decrease spending on steady state and increase spending on modernization and enhancements.

Redefine the target architecture to define new technologies that can be incorporated into the infrastructure.

Create a new investment category for innovation that becomes a new way for tracking investment decisions.

Update the IT human resource management plan to require training and development for emerging technologies.

The PRIMARY objective of building outcome measures is to:

monitor whether the chosen strategy is successful

visualize how the strategy will be achieved.

demonstrate commitment to IT governance.

clarify the cause-and-effect relationship of the strategy.

Once the strategic vision has been established, which of the following would be the BEST activity for supporting the implementation of performance measures?

Monitor service level performance.

Document strengths, weaknesses, opportunities, and threats.

Identify key performance indicators (KPIs).

Which of the following BEST supports the implementation of an effective data classification policy?

Clear guidelines adopted by the business

Monitoring with key performance indicators (KPIs)

Implementation of data loss prevention (DLP) tools

Clear guidelines adopted by the business

Classification policy approval by the board

An enterprise has lost an unencrypted backup tape of archived customer data. A data breach report is not mandatory in the relevant jurisdiction. From an ethical standpoint, what should the enterprise do NEXT?

Communicate the breach to customers.

Initiate disciplinary proceedings against relevant employees.

Mandate a review of backup tape inventory procedures.

Communicate the breach to customers.

Require an evaluation of storage facility vendors.

When developing an IT training plan, which of the following is the BEST way to ensure that resource skills requirements are identified?

Determine training needs based on the capabilities to support the IT strategy.

Extract training requirements from deficiencies reported in customer service satisfaction surveys.

Ask managers to determine IT training requirements annually.

Determine training needs based on the capabilities to support the IT strategy.

Survey employees for IT skills requirements based upon technology trends.

In which of the following situations is it MOST appropriate to use a quantitative risk assessment?

The objectivity of the risk assessment is of primary importance.

There is a lack of accurate and reliable past and present risk data.

The risk assessment needs to be completed in a short period of time.

The objectivity of the risk assessment is of primary importance.

The risk assessment is needed for an IT project business case.

An IT department has forwarded a request to the IT strategy committee for funding of a discretionary Investment. The committee's MOST important consideration should be to evaluate:

whether the investment supports corporate goals

the technical feasibility of the investment.

the business and technical scope of the investment *

whether the investment supports corporate goals

whether the investment aligns with the enterprise architecture (EA).

An IT risk committee is trying to mitigate the risk associated with a newly implemented bring your own device (BYOD) policy and supporting mobile device management (MDM) tools. Which of the following would be the BEST way to ensure employees understand how to protect sensitive corporate data on their mobile devices?

Require staff to complete security awareness training

Develop security procedures for mobile devices.

Distribute the BYOD policy on the company Intranet.

Require staff to review and sign nondisclosure agreements (NDAs)

What should be done FIRST when feedback indicates recently implemented software products are not meeting business unit expectations?

Confirm user acceptance testing (UAT) was completed.

Institute a new software training program

An IT steering committee is evaluating whether a third-party supplier is delivering the correct level of service Reviewing which of the following will provide the BEST information to the committee?

Key performance indicators (KPIs)

Operational cost reduction reports

Which of the following should be the PRIMARY goal of implementing service level agreements (SLAs) with an outsourcing vendor?

Achieving operational objectives

Gaining a competitive advantage

Establishing penalties for not meeting service levels

Achieving operational objectives

Complying with regulatory requirements

An enterprise's chief information officer (CIO) has been receiving complaints from business executives regarding the amount their units are being charged for IT services. To maintain a good relationship with business peers, the CIO wants to be responsive to these complaints. To address this issue, the FIRST step should be to:

quantify consumption and service level agreement (SLA) achievements per business unit.

agree to reduce charge rates and improve relationship management with the business.

look into outsourcing of support functions to drive down the cost structure.

ask the chief financial officer (CFO) about budget revisions for the business units' IT expenditures.

quantify consumption and service level agreement (SLA) achievements per business unit.

Which of the following should be the FIRST action taken by a newly formed IT governance committee to ensure reports are compliant with regulations and identify key IT risks?

Direct the development of a reporting communication plan.

Develop and monitor IT key risk indicator (KRI) triggers.

Train end users on regulation requirements.

Implement a mechanism to ensure reporting escalation.

When developing a framework to implement IT governance, which of the following BEST contributes to the successful implementation?

Practical and enforceable policies

Comprehensive and timely audit reviews

In a successful enterprise that is profitable in its marketplace and consistently growing in size, the non-IT workforce has grown by 50% in the last two years. The demand for IT staff in the marketplace is more than the supply, and the enterprise is losing staff to rival organizations. Due to the rapid growth. IT has struggled to keep up with the enterprise, and IT procedures and associated job roles are not well-defined. The MOST critical activity for reducing the impact caused by IT staff turnover is to:

document processes and procedures.

increase compensation for IT staff

Which of the following should be done FIRST when concerns have been identified regarding the financial viability of a potential software supplier?

Include a right-to-audit clause in the contract

License the intellectual property

Which of the following is the MOST significant challenge faced by an enterprise when establishing information stewardship?

Lack of role clarity and specific responsibilities

Lack of documented policies and procedures

Information requirements of regulatory authorities

Insufficient knowledge of IT practices and controls

Lack of role clarity and specific responsibilities

An enterprise has decided to implement an enterprise resource planning (ERP) system to achieve operating and cost efficiencies through global IT standardization. The business units are resistant because they are used to operating autonomously. The CEO has instructed the CIO to move quickly with the implementation to force acceptance with business unit leaders. Which of the following should be the ClO's FIRST step?

Engage a reluctant business unit to conduct a proof-of-concept pilot.

Build a governance framework for identifying non-standard processes.

Request funding from the CEO to hire ERP consultants.

Ask the CEO to be the sponsor of the program

Engage a reluctant business unit to conduct a proof-of-concept pilot.

Which of the following is MOST important to review during IT strategy development?

Data flows that indicate areas requiring IT support

During an IT strategy review, a new CIO determined that numerous important internal processes have not been updated for several years and should be reexamined. Which of the following would be the BEST approach to address this concern?

Verify that the processes are still needed

Implement a process review policy.

Verify that the processes are still needed

Map the processes to a capability maturity model.

When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should FIRST consider the:

readiness of IT systems to address

disruption to normal business operations.

risk profile of the enterprise.

readiness of IT systems to address

the risk cost burden to achieve compliance.

Facing financial struggles, a CEO mandated severe budget cuts. A decision was also made to immediately change the enterprise strategic focus to put more reliance on mobile, cloud, and wireless services in an effort to boost revenue. The IT steering committee has asked the CIO to suggest adjustments to the current IT project portfolio to allow support for the new direction despite fewer funds. What should the CIO advise the committee to do FIRST?

Conduct a risk assessment against the potential new services.

Ask business stakeholders to discuss their vision for the new strategy.

Cancel projects with a net present value (NPV) below a defined threshold.

Conduct a risk assessment against the potential new services.

Start re-allocating budget to projects involving mobile or cloud.

Which of the following IT governance actions would be the BEST way to minimize the likelihood of IT failures jeopardizing the corporate value of an IT-dependent organization?

Implement an IT risk management framework.

Install an IT continuous monitoring solution.

Define IT performance management measures.

Benchmark IT strategy against industry peers.

Isaca CGEIT Practice Test 10 - Free Online Exam Prep & Questions

A root-cause analysis indicates a major service disruption due to a lack of competency of newly hired IT system administrators. Who should be accountable for resolving the situation?

Become a Premium Member for full access

Unlock Premium Member

Isaca CGEIT Practice Test 10

Question

Isaca CGEIT Practice Tests

Practice Tests