Which of the following will BEST enable an IT steering committee to monitor the achievement of overall IT objectives on a continuous basis?

Defined service level agreements (SLAs)

Key performance indicators (KPIs)

An enterprise has launched a series of critical new IT initiatives that are expected to produce substantial value Which of the following would BEST provide the board with an indication of progress of the IT initiatives?

Full life cycle cost-benefit analysis

Demonstration of prototype and user testing

Critical risk and issue walk-through

An enterprise wants to reduce the complexity of its data assets while ensuring impact to the business is minimized during the transition. Which of the following should be done FIRST?

Review the information architecture.

Remove applications that are not aligned with the information architecture.

Review the information classification and retention policies

Review the information architecture.

Assess current information ownership.

When developing a business case for an enterprise resource planning (ERP) implementation, which of the following, if overlooked, causes the GREATEST impact to the enterprise?

Salvage value of legacy hardware

The PRIMARY objective of IT resource planning within an enterprise should be to:

maximize value received from IT.

determine risk associated with IT resources.

maximize value received from IT.

determine IT outsourcing options.

finalize service level agreements (SLAs) for IT

An enterprise is replacing its customer relationship management (CRM) system with a cloud-based system. Which of the following should be done FIRST when preparing for data migration'*

Review the enterprise data architecture.

Consult the quality assurance (QA) function.

A business has outsourced IT operations to several third-party providers, but service level agreements (SLAs) are not clearly defined in all cases. Which of the following is the GREATEST risk to the business?

Quality of services is not enforceable.

Third parties could provide overlapping services.

The scope of work is not clearly defined.

Quality of services is not enforceable.

An enterprise has committed to the implementation of a new IT governance model. The BEST way to begin this implementation is to:

define policies for data, applications, and organization of infrastructure.

identify IT services that currently support the enterprise's capability.

define policies for data, applications, and organization of infrastructure.

identify the role of IT in supporting the business.

prioritize how much and where to invest in IT.

Which of the following should be the PRIMARY governance objective for selecting key risk indicators (KRIs) related to legal and regulatory compliance?

Measuring IT alignment with enterprise risk management (ERM)

Identifying the risk of noncompliance

Demonstrating sound risk management practices

Measuring IT alignment with enterprise risk management (ERM)

Ensuring the effectiveness of IT compliance controls

In a large enterprise, which of the following should be responsible for the implementation of an IT balanced scorecard?

Chief information officer (CIO)

A newly appointed CIO has been tasked with the responsibility of developing an effective IT enterprise roadmap that meets business requirements. Which of the following is the BEST way to ensure that the business needs have been taken into consideration?

Involve process owners in requirements gathering.

Implement a balanced scorecard.

Include user acceptance testing (UAT) as part of the resulting IT solutions.

Right-to-audit clauses are intended to ensure the vendor:

addresses compliance requirements.

aligns staff skill sets adequately.

maintains adequate budget for risk management.

addresses compliance requirements.

optimizes IT operations for service delivery

Which of the following should be the FIRST step for executive management to take in communicating what is considered acceptable use with regard to personally owned devices for company business?

Develop and disseminate an applicable policy.

Require employees to read and sign a disclaimer.

Develop and disseminate an applicable policy.

Post awareness messages throughout the facility.

Provide training on how to protect data on personal devices.

When updating an IT governance framework to support an outsourcing strategy, which of the following is MOST important?

Verifying the vendor has developed standard operation procedures for outsourced functions

Evaluating the choice of underlying technology platforms used by the service provider

Ensuring the outsource provider's IT function is aligned with its business function

Verifying the vendor has developed standard operation procedures for outsourced functions

Ensuring the effective management of contracts with third-party providers

An organization is evaluating vendors to provide mobile device management (MDM) services. Which of the following is a KEY governance consideration for the IT steering committee?

Service level targets align with business requirements.

Employee-owned devices will be covered by the service.

The MDM services are delivered via a cloud.

IT senior management has just received a survey report indicating that more than one third of the organization's key IT staff plan to retire within the next 12 months. Which of the following is the MOST important governance action to prepare for this possibility?

Request the development of a succession plan.

Engage human resources (HR) for recruitment of new staff.

Request the development of a succession plan.

Review motivation drivers for key IT staff.

Evaluate lower-level staff as succession candidates.

A CEO wants to establish a governance framework to facilitate the alignment of IT and business strategies. Which of the following should be a KEY requirement of this framework?

A defined enterprise architecture (EA)

Which of the following BEST supports enterprise decision making for IT resource allocation?

IT-related regulatory requirements

Which of the following is the PRIMARY responsibility of a data steward?

Classifying and labeling organizational data assets

Ensuring the appropriate users have access to the right data

Developing policies for data governance

Reporting data analysis to the board

Classifying and labeling organizational data assets

Which of the following is MOST important for an IT strategy committee to ensure before initiating the development of an IT strategic plan?

Committee members are apprised of business needs

A risk assessment has been conducted.

Committee members are independent from business units.

IT initiatives are fully supported by the business.

Which of the following should senior management do FIRST when developing and managing digital applications for a new enterprise?

Establish an architecture review board.

Develop key risk indicators (KRIs).

To successfully implement enterprise IT governance, which of the following should be the MAIN focus of IT policies?

Optimizing operational benefits

Enhancing organizational capability

An IT steering committee has received a report that supports the economic and service benefits of moving infrastructure hosting to an external cloud provider. Business leadership is very concerned about the security risk and potential loss of customer data. What is the BEST way for the committee to address these concerns?

Include compliance with the enterprise's data governance policy in the contract.

Mandate there will be no customer data at rest stored on cloud servers used by the vendor.

Include compliance with the enterprise's data governance policy in the contract.

Ensure reporting and penalty clauses are included in the contract for any loss of data.

Require an encrypted connection between the cloud and enterprise servers.

Which of the following metrics would provide senior management with the BEST indication of the success of IT investments?

Percentage of IT investments that meet expected benefits

Number of IT investments tracked in the balanced scorecard

Percentage of IT investments recorded in the enterprise architecture (EA)

Number of IT investments impacted by business-related incidents

Percentage of IT investments that meet expected benefits

Which of the following would BEST help a CIO enhance the competencies of an IT business analytics team?

Understanding current staff skill sets and identifying gaps

Creating operational processes and identifying resources

Defining the IT architecture and identifying training areas

Establishing team goals and identifying the proper structure

IT senior management is concerned that IT service levels consistently fall below those outlined in the service level agreement (SLA). Which of the following would BEST enable the CIO to build a corrective action plan?

Performing a root cause analysis

Assessing the impact of the SLA failure

Conducting an IT performance evaluation

Reviewing the IT staff training plan

Performing a root cause analysis

A newly hired IT director of a large international enterprise has been asked to provide periodic updates regarding IT risk to the board. Which of the following is the MOST effective way to initially address this request?

Include key IT risks in a dashboard submitted to the board quarterly.

Include a complete IT risk register in the monthly letter given to each board member.

Include key IT risks in a dashboard submitted to the board quarterly.

Submit a register of all IT audit findings to board members monthly.

Schedule quarterly meetings to discuss all open IT risks.

An assessment reveals that enterprise risk management (ERM) practices are being applied inconsistently by IT staff. Which of the following would be the MOST effective corrective action?

Require ERM orientation sessions

Request the development of an IT risk register template.

Request a complete skills reassessment for all IT staff.

An enterprise's global IT program management office (PMO) has recently discovered that several IT projects are being run within a specific region without knowledge of the PMO. The projects are on time, on budget, and will deliver the proposed benefits to the specific region. Which of the following should be the PRIMARY concern of the PMO?

Lack of control and impact to the overall PMO budget

Inability to reduce the impact to the risk level of the global portfolio

Projects may not follow system development life cycle (SDLC)

Lack of control and impact to the overall PMO budget

To evaluate IT resource management, it is MOST important to define:

responsibilities for executing resource management.

principles for the IT strategy.

IT resource utilization reporting procedures.

A newly appointed CIO has issued a new IT strategic plan. Which of the following is the MOST effective way for the CIO to ensure the IT management team is held accountable for the delivery of the plan?

Update the IT balanced scorecard with key objectives.

Enforce disciplinary action for managers if the plan is not delivered.

Revise the managers' performance goals to include key objectives.

An enterprise has entered into a new market which brings additional regulatory compliance requirements. What should be done FIRST to address these requirements?

Update the organization's risk profile.

Outsource the compliance process.

Update the organization's risk profile.

Have executive management monitor compliance.

Which of the following is the MOST important benefit of effective IT governance reporting?

Business executives better understand IT's value contribution to the enterprise

The enterprise balanced scorecard is aligned with IT dashboards.

Business executives better understand IT's value contribution to the enterprise

IT key performance indicators (KPIs) are included in the enterprise-level KPI dashboard.

IT processes are improved in line with business requirements.

A large enterprise has been experiencing high turnover of skilled IT personnel, resulting in a significant loss of knowledge within the IT department. Which of the following is the BEST governance action to address this concern?

Update the IT resource management plan.

Revise IT strategic objectives.

Update IT employee compensation packages.

Mandate the use of employee contracts.

The PRIMARY reason a CIO and IT senior management should stay aware of the business environment is to:

revisit prioritization of IT projects.

measure efficiency of IT resources.

re-assess the IT investment portfolio.

Isaca CGEIT Practice Test 11 - Free Online Exam Questions 401-440

The risk committee is overwhelmed by the number of false positives included in risk reports. What action would BEST address this situation?

Become a Premium Member for full access

Unlock Premium Member

Isaca CGEIT Practice Test 11

Question

Isaca CGEIT Practice Tests

Practice Tests