A CIO was notified that a new employee was observed wearing a headset with an optical lens at the organization's data center. The individual was entering voice commands into the device. When approached, the employee explained the device is a new personal technology serving as a hands-free version of a smart phone. The CIO is concerned with potential security vulnerabilities of allowing such devices, and whether they should be banned from the facility. What should be the NEXT course of action in response to the ClO's concern?

Assess the risk associated with the device.

Define a risk mitigation strategy.

Update the acceptable use policy.

Research competitor usage of similar devices.

Assess the risk associated with the device.

Which of the following is the BEST way for a CIO to ensure that the work of IT employees is aligned with approved IT directives?

Include relevant IT goals in individual performance objectives.

Mandate technical training related to the IT objectives.

Have business leaders present their departments' objectives.

Include relevant IT goals in individual performance objectives.

Request a progress review of IT objectives by internal audit.

An enterprise is assessing whether to utilize wearable technology. The enterprise has no prior experience with this technology and has asked the chief technology officer (CTO) to assess the impact to the enterprise. The CTO should FIRST:

understand the enterprise's risk tolerance.

prioritize wearable technology risk.

An internal auditor conducts an assessment of a two-year-old IT risk management program. Which of the following findings should be of MOST concern to the CIO?

Organizational responsibility for IT risk management is not clearly defined.

None of the members of the IT risk management team have risk management-related certifications.

Only a few key risk indicators (KRIs) identified by the IT risk management team are being monitored and the rest will be on a phased schedule.

The accountability for a business continuity program for business-critical systems is BEST assigned to the:

chief information officer (CIO).

An enterprise plans to migrate its applications and data to an external cloud environment. Which of the following should be the ClO's PRIMARY focus before the migration?

Reviewing the information governance framework

Selecting best-of-breed cloud offerings

Updates the enterprise architecture (EA) repository

Conducting IT staff training to manage cloud workloads

Which of the following is the MOST important consideration when integrating a new vendor with an enterprise resource planning (ERP) system?

A vendor risk assessment is conducted

IT senior management selects the vendor.

A vendor risk assessment is conducted

ERP data mapping is approved by the enterprise architect.

Procurement provides the terms of the contract.

Which of the following is the MOST important consideration when integrating a new vendor with an enterprise resource planning (ERP) system?

A vendor risk assessment is conducted

IT senior management selects the vendor.

A vendor risk assessment is conducted

ERP data mapping is approved by the enterprise architect.

Procurement provides the terms of the contract.

Which of the following is MOST important for a data steward to verify when a system's data is edited by an automated tool to fix an incident?

The change maintains consistency among databases and has no other impacts.

The change has been requested by the business department and approved by the data owner.

The change is documented in preparation for future audits.

The change maintains consistency among databases and has no other impacts.

The change is a temporary fix for the incident, and the permanent solution is addressed by problem management.

What is the BEST way for IT to achieve compliance with regulatory requirements?

Enforce IT policies and procedures.

Create an IT project portfolio.

Review an IT performance dashboard.

Report on IT audit findings and action plans.

Which of the following is the PRIMARY role of the governance function in enabling an enterprise to achieve its business objectives?

Providing a means to effectively manage stakeholders

Determining risk thresholds that the enterprise can sustain

Preparing business continuity and resiliency plans

Providing a means to effectively manage stakeholders

Monitoring strategic plans to reach the desired target state

A new and expanding enterprise has recently received a report indicating 90% of its data has been collected in just the last six months, triggering data breach and privacy concerns. What should be the IT steering committee's FIRST course of action to ensure new data is managed effectively?

Define data protection and privacy practices.

Mitigate and track data-related issues and risks.

Modify legal and regulatory data requirements.

Define data protection and privacy practices.

Assess the information governance framework.

From a governance perspective, the PRIMARY goal of an IT risk optimization process should be to ensure:

the impact of IT risk to the enterprise is managed.

IT risk thresholds are defined in the enterprise architecture (EA).

the IT risk mitigation strategy is approved by management.

IT risk is mapped to the balanced scorecard.

the impact of IT risk to the enterprise is managed.

An enterprise is planning to outsource data processing for personally identifiable information (Pll). When is the MOST appropriate time to define the requirements for security and privacy of information?

When issuing requests for proposals (RFPs)

After an assessment of the current information architecture .

When developing service level agreements (SLAs)

During the initial vendor selection process

Which of the following BEST helps to ensure that IT policies are aligned with organizational strategies?

The policies are developed using a top-down approach.

The policies are approved by the board of directors.

The policies are developed using a top-down approach.

The policies are updated annually.

The policies are periodically audited.

What should be an IT steering committee's FIRST course of action when an enterprise is considering establishing a virtual reality store to sell its products?

Request a cost-benefit analysis.

Request a resource gap analysis.

Request a cost-benefit analysis.

Request development of key risk indicators (KRIs).

Within a governance structure for risk management, which of the following activities should be performed by the second line of defense?

Conducting internal and external audits

Implementing controls to manage risk

Following a re-prioritization of business objectives by management, which of the following should be performed FIRST to allocate resources to IT processes?

Refine the human resource management plan.

Which of the following is the PRIMARY benefit to an enterprise when risk management is practiced effectively throughout the organization?

Decisions are made with an awareness of probability and impact.

IT objectives and goals are aligned to business objectives and goals.

Business opportunity losses are minimized.

Innovative strategic initiatives are encouraged.

Which of the following is the BEST way to manage the risk associated with outsourcing critical IT services?

Define controls within service level agreements (SLAs).

Ensure vendors hold information security certifications.

Define controls within service level agreements (SLAs).

Conduct quarterly performance reviews.

Ensure exit clauses are added to the contract.

Which of the following should be the PRIMARY consideration when implementing an emerging technology with unclear regulatory and compliance requirements?

Enterprise architecture (EA) alignment

Business impact analysis (BIA) results

To help ensure the IT portfolio provides maximum value to an organization, IT projects are BEST prioritized based on:

alignment with business strategy.

recommendation Of business owners.

alignment with IT architecture.

When establishing a methodology for business cases, it would be MOST beneficial for an enterprise to include procedures for:

updating the business case throughout its life cycle.

addressing required changes outside the business case.

identifying metrics post-implementation to measure project success.

entering the business case into the enterprise architecture (EA).

Which of the following is the GREATEST expected strategic organizational benefit from the standardization of technical platforms?

Optimizes infrastructure investments

Reduces IT operational training costs

Optimizes infrastructure investments

Meets regulatory compliance requirements

To measure the value of IT-enabled investments, an enterprise needs to identify its drivers as defined by its:

service level agreements (SLAs).

The BEST way for a CIO to justify maintaining and supporting social media platforms is by demonstrating:

the value derived from investment in social media technologies.

how social media technology fits into the IT investment management process.

that service level agreements (SLAs) for social media technologies have been met.

the IT performance Of social media technologies.

the value derived from investment in social media technologies.

Which of the following should a new CIO do FIRST to set the strategic direction for IT?

Review existing enterprise strategic objectives.

Develop well-defined business cases that include strategic outcomes.

Remap stakeholder analysis and desired expectations.

Review existing enterprise strategic objectives.

Redesign detailed RACI charts of the IT function.

When an enterprise is evaluating potential IT service vendors, which of the following BEST enables a clear understanding of the vendor's capabilities that will be critical to the enterprise's strategy?

Historical service level agreements (SLAs)

An enterprise has an ongoing issue of corporate applications not delivering the expected benefits due to missing key functionality. As a result, many groups are using spreadsheets and databases instead of approved enterprise applications to store and manipulate information. Which of the following will BEST improve the success rate of future IT initiatives?

Engage stakeholders to identify and validate business requirements.

Engage the business user community in acceptance testing Of acquired applications.

Engage stakeholders to identify and validate business requirements.

Establish a process for risk and value management.

Prohibit the use of non-approved alternate software solutions.

Which of the following is necessary for effective risk management in IT governance?

Risk evaluation is embedded in the management processes.

IT risk management is separate from enterprise risk management (ERM).

Local managers are solely responsible for risk evaluation.

Risk management strategy is approved by the audit committee.

An enterprise has a centralized IT function but also allows business units to have their own technology operations, resulting in duplicate technologies and conflicting priorities. Which of the following should be done FIRST to reduce the complexity of the IT landscape?

Conduct strategic planning with business units.

Promote automation tools used by the business units.

Conduct strategic planning with business units.

Migrate all in-house systems to an external cloud environment.

Standardize technology architecture on common products.

Of the following, who is responsible for the achievement of IT strategic objectives?

Chief information officer (CIO)

An enterprise has decided to use third-party software for a business process which is hosted and supported by the same third party. The BEST way to provide quality of service oversight would be to establish a process:

for periodic service provider audits.

for enterprise architecture (EA) updates.

Which of the following is the BEST approach to ensure global regulatory compliance when implementing a new business process?

Ensure the appropriate involvement Of the legal department.

Use a balanced scorecard to track the business process.

Ensure the appropriate involvement Of the legal department.

Review and revise the business architecture.

Seek approval from the change management board.

Isaca CGEIT Practice Test 13 - Free Online Exam Prep & Questions

Which of the following BEST enables an enterprise to achieve the benefits of implementing new Internet of Things (loT) technology?

Become a Premium Member for full access

Unlock Premium Member

Isaca CGEIT Practice Test 13

Question

Isaca CGEIT Practice Tests

Practice Tests