Which of the following decisions would be made by the IT strategy committee?

Composition of the investment portfolio

Communication plan for a major IT initiative

Cloud implementation and support plan

Enterprise risk management (ERM) framework

Composition of the investment portfolio

The CIO of a financial and insurance company is considering the projects and portfolio for the coming year Which of the following projects is a non-discretionary project?

Compliance with statutory regulations

Actuarial application system analysis and design

A business unit is planning to replace an existing IT legacy solution with a hosted Software as a Service (SaaS) solution. However, business management is concerned that stored data will be at risk. Which of the following is the MOST effective way to reduce the risk associated with the SaaS solution?

Create key risk indicators (KRls) for the SaaS solution.

Research the technology and identify potential security threats.

Include risk-related requirements in the SaaS contract.

Create key risk indicators (KRls) for the SaaS solution.

Redefine the risk appetite and risk tolerance.

A project sponsor has circumvented the request for proposal (RFP) selection process. Which of the following is the MOST likely reason for this control gap?

Lack of accountability for policy adherence

Lack of a legal and regulatory review process

An enterprise is adopting a new governance framework. Of the following, the MOST effective method to help ensure that key activities are performed by appropriate resources is through the use of:

an organizational breakdown structure.

To enable IT to deliver adequate services and maintain availability of a web-facing infrastructure, an IT governance committee should FIRST establish:

key performance indicators (KPIs).

business continuity plans (BCPs).

key performance indicators (KPIs).

What should be an IT steering committee's FIRST course of action when an enterprise is considering establishing a virtual reality store to sell its products?

Request a resource gap analysis.

Request development of key risk indicators (KRIs).

Request a cost-benefit analysis.

Which of the following should occur FIRST in the IT investment process?

Select IT projects that will best support the enterprise's mission.

Assess each project's impact on the enterprise's investment plan.

Select IT projects that will best support the enterprise's mission.

Analyze IT investments based on past data.

Analyze the risks and benefits of the investment for each IT project.

Which of the following should be done FIRST when designing an IT balanced scorecard?

Develop key performance indicators (KPIs).

Which of the following are the MOST important processes for information asset life cycle management?

Business continuity management and disaster recovery management

Procurement management and third-party management

Configuration management and financial management

Vulnerability management and network management

Business continuity management and disaster recovery management

Which of the following is the BEST way to implement effective IT risk management?

Align with business risk management processes.

Establish a risk management function.

Minimize the number of IT risk management decision points.

Adopt risk management processes.

Which of the following is a PRIMARY responsibility of the CIO when an enterprise plans to replace its enterprise resource applications?

Ensuring IT architecture requirements are considered

Reviewing the IT application portfolio

Evaluating and selecting application vendors

Ensuring IT architecture requirements are considered

Establishing software quality criteria

Which of the following characteristics would BEST indicate that an IT process is a good candidate for outsourcing?

Operational processes that are well-defined

Strategic processes that require expert professionals

Processes with higher risk to the enterprise

Non-strategic processes that are not documented

Operational processes that are well-defined

An IT team is having difficulty meeting new demands placed on the department as a result of a major and radical shift in enterprise business strategy. Which of the following is the ClO's BEST course of action to address this situation?

Review the current IT strategy.

Utilize third parties for non-value-added processes.

Align the business strategy with the IT strategy.

Review the current IT strategy.

An organization has decided to integrate IT risk with the enterprise risk management (ERM) framework. The FIRST step to enable this integration is to establish:

a common risk management taxonomy.

common key risk indicators (KRIs).

common risk mitigation strategies.

An enterprise recently approved a bring your own device (BYOD) policy. The IT steering committee has directed IT management to develop a communication plan to disseminate information regarding the associated technical risks. Which of the following is MOST important to include in this communication plan?

Potential exposures and impacts using common terms

A link on the corporate intranet to the BYOD policy

Potential exposures and impacts using common terms

Schedule and content for mandatory training

Disciplinary actions for violation of the BYOD policy

Which of the following is the MOST important reason that IT strategic planning processes need to be adequately documented and communicated?

To ensure other departments are aligned with the direction set by IT

To justify spending on IT projects

To promote transparency to stakeholders

To ensure other departments are aligned with the direction set by IT

To inform business units of IT department achievements

Which of the following is the PRIMARY responsibility of a data steward at an enterprise with mature data management programs?

Establishing data quality requirements and metrics

Implementing processes for data collection and use

Ensuring compliance with data privacy laws and regulations

Establishing data quality requirements and metrics

Developing data-related policies and procedures

An enterprise recently implemented a significant change in its business strategy by moving to a technologically advanced product with considerable impact on the business. What should be the FINAL step in completing the changes to IT processes?

Ensuring a return to stabilized business operations

Updating the configuration management database (CMDB)

Empowering the business to embrace the changes

Ensuring a return to stabilized business operations

Updating the enterprise architecture (EA)

When selecting a cloud provider, which of the following provides the MOST comprehensive information regarding the current status and effectiveness of the provider's controls?

Globally recognized certification

Which of the following is the BEST way to encourage employees to raise ethics concerns in full confidence?

Establish and communicate a whistle-blower policy.

Publish and enforce a code of conduct policy.

Provide access to legal resource benefits.

Establish and communicate a whistle-blower policy.

Provide protection language in employment contracts.

What is the PRIMARY benefit of aligning information architecture with enterprise architecture (EA)?

It enables the tracing of data to business functions.

It improves communication with senior management and the business.

It ensures the adoption of enterprise data quality standards.

It enables the tracing of data to business functions.

It facilitates appropriate access to data consumers.

Which of the following is MOST important to include in the customer dimension of an IT balanced scorecard?

Support for corporate customers

A CIO has recently been made aware of a new regulatory requirement that may affect IT-enabled business activities. Which of the following should be the CIO s FIRST step in deciding the appropriate response to the new requirement?

Consult with legal and risk experts to understand the requirements.

Revise initiatives that are active to reflect the new requirements.

Confirm there are adequate resources to mitigate compliance requirements.

Consult with legal and risk experts to understand the requirements.

Which of the following BEST supports an IT staff restructure as part of an annual IT strategy review with senior management?

Established IT key performance indicators (KPIs)

IT staff training program requirements

External IT staffing benchmarks

An updated business case for IT resourcing

Which of the following is the BEST critical success factor (CSF) to use when changing an IT value management program in an enterprise?

Aligning the program to the business requirements

Documenting the process for the board of directors' approval

Adopting the program by using an incremental approach

Implementing the program through the enterprise's change plan

Aligning the program to the business requirements

What should be the FIRST action of a new CIO when considering an IT governance framework for an enterprise?

Understand corporate culture and IT'S role in providing business value.

Understand critical IT processes to define the scope of the IT governance framework.

Verify stakeholder sponsorship of the IT governance initiative.

Develop an IT balanced scorecard to monitor and track IT performance.

When a shortfall of IT resources is identified, the FIRST course of action is to;

perform a business impact analysis (BIA).

reallocate the budget to close the gap in resources.

negotiate best pricing for contracted resources.

Which of the following is the BEST way to address the risk associated with new IT investments?

Integrate security requirements at the beginning of projects

Develop security best practices to protect applications.

Integrate security requirements at the beginning of projects

Establish an enterprise-wide incident response process.

Implement an enterprise-wide security awareness program.

Isaca CGEIT Practice Test 12 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Isaca CGEIT Practice Test 12

Question

Isaca CGEIT Practice Tests

Practice Tests