Which of the following is the MOST important consideration regarding IT measures as part of an IT strategic plan?

The metrics can be traced to enterprise goals.

Data collection for the metrics is automated.

The metrics can be traced to enterprise goals.

Minimum target levels are realistic.

Thresholds align to key risk indicators (KRIs).

An enterprise wants to reduce the complexity of its data assets while ensuring impact to the business is minimized during the transition.Which of the following should be done FIRST?

Review the information architecture.

Remove applications that are not aligned with the information architecture.

Review the information classification and retention policies.

Review the information architecture.

Assess current information ownership.

An interna! health organization has been notified that a data breach has resulted in patient records being published online. Which of the following is MOST important consideration when determining the process for meeting the organization's legal and regulatory obligations?

Context of the breach, including data ownership and location

Organizational structure, including accountable partes

Data classification and related security policy

Context of the breach, including data ownership and location

Details of how the breach occurred and related incident response efforts

Which of the following BEST supports an IT strategy committee's objective to align employee competencies with planned initiatives?

Add achievement of competencies to employee performance goals.

Set management goals to hire cooperative work experience students.

Specify minimum training hours required for continuing professional education.

Require balanced scorecard concepts training of all employees.

Add achievement of competencies to employee performance goals.

Which of the following is a CIO's BEST approach to ensure IT executes against an approved strategy?

Request IT senior leaders to collectively plan tactics for execution

Ask project management to define the IT activities for accomplishing the strategy.

Request IT senior leaders to collectively plan tactics for execution

Have IT leaders independently develop goals for their teams.

Provide specific direction for execution of the tasks across IT.

An IT governance committee is reviewing its current risk management policy in light of increased usage of social media within an enterprise. The FIRST task for the governance committee is to:

initiate an assessment of the impact on the business.

recommend blocking access to social media.

review current level of social media usage.

initiate an assessment of the impact on the business.

reassess the enterprise's bring your own device (BYOD) policy.

An IT governance committee realizes there are antiquated technologies in use throughout the enterprise. Which of the following is the BEST group to evaluate the recommendations to address these shortcomings?

Enterprise architecture (EA) review board

Business process improvement workgroup

Which of the following would be an IT steering committee's BEST course of action upon learning business units have been independently procuring cloud services?

Define a procurement strategy based on business unit needs.

Require cancellation of cloud-based application services not vetted by IT leadership.

Include business unit leadership in the enterprise architecture (EA) review board.

Limit cloud-based application service usage to open source solutions.

Define a procurement strategy based on business unit needs.

Which of the following would be the BEST way for an enterprise to address new legal and regulatory requirements applicable to IT?

Treat as a risk to be assessed before developing a response.

Benchmark how other IT organizations are treating the new requirements.

Adopt a zero-tolerance approach for noncompliance with regulatory matters.

Use a cost-benefit analysis to determine if compliance is warranted.

A regulatory audit of an IT department has identified discrepancies between processes described in the procedures and what is actually done by system administrators.The discrepancies were caused by recent IT application changes. Which of the following would be the BEST way to prevent the recurrence of similar findings in the future?

Include the update of documentation within the change management framework.

Assign the responsibility for periodic revisions and changes to process owners.

Require each IT employee to confirm compliance with IT procedures on an annual basis.

Include the update of documentation within the change management framework.

Establish high-level procedures to minimize process changes.

An enterprise has made the strategic decision to begin a global expansion program which will require opening sales offices in countries across the world. Which of the following should be the FIRST consideration with regard to the IT service desk which will remain centralized?

The effect of regional differences On service delivery

Identification of IT service desk functions that can be outsourced

Enforcement Of a standardized policy across all regions

Availability of adequate resources to provide support for new users

In a large enterprise, which of the following is the BEST approach to enable effective communication to senior management regarding the project status for a strategic enterprise resource management system implementation?

A steering committee involving business and IT

Project management office with business and IT representatives

Weekly project reports reviewed by business and IT management

Project status updates on the intranet

A steering committee involving business and IT

An internal audit of a large financial institution found that financial data is being managed in a way that will negatively impact the enterprise's ability to support regulatory reporting. Which of the following should be the FIRST strategic action in addressing this situation?

Establish a data governance framework.

Assign data responsibilities through a RACI chart.

Review key risk indicators (KRIS) related to data management. Update data management policies.

An enterprise is exploring a new business opportunity. Which of the following is the BEST way to help ensure related IT projects deliver the business requirements?

Implement stage-gate reviews that require business sign-off.

Hire a business consultant to manage the projects.

Develop a policy to enforce the processes and procedures.

Implement stage-gate reviews that require business sign-off.

Focus on maturing processes and developing procedures.

Which of the following is MOST likely to have a negative impact on accountability for information risk ownership?

Information risk is assigned to a department, and an individual owner has not been assigned.

The risk owner is a department manager, and the control owner is a member of the risk owner's staff.

Information risk is assigned to a department, and an individual owner has not been assigned.

The risk owner and the control owner of the information do not work in the same department.

The same person is listed as both the control owner and the risk owner for the information.

Which of the following would be the GREATEST obstacle for effective implementation of an enterprise's information security policy?

Threats to corporate information

Utilization of cloud-based applications

From a governance perspective, which of the following functions MUST approve the agreed-upon criteria for a new technology-enabled service before submitting the final high-level design to project stakeholders?

Project management office (PMO)

An enterprise has decided to adopt cloud services. Which of the following should be established FIRST?

Service level agreements (SLAs)

Third-party management framework

When reporting key risk indicators (KRIs) to the board, what information BEST enables risk-based decision-making?

Risk appetite, risk threshold, and risk tolerance

Classification of current business risk

Emerging industry risk trends and benchmarks

Costs and resource needs related to risk mitigation measures

Which of the following is the FIRST step when developing an IT risk management framework?

Aligning to enterprise risk management (ERM)

Promoting a culture of risk awareness

Establishing a risk control library

Aligning to enterprise risk management (ERM)

Isaca CGEIT Practice Test 15 - Free Online Exam Questions 561-582

Which of the following is the GREATEST consideration when evaluating whether to comply with the new carbon footprint regulations impacted by blockchain technology?

Become a Premium Member for full access

Unlock Premium Member

Isaca CGEIT Practice Test 15

Question

Isaca CGEIT Practice Tests

Practice Tests