A manufacturing company has recently decided to outsource portions of its IT operations. Which of the following would BEST justify this decision?

The business strategy requires significant IT resource scalability over the next five years.

Core legacy systems are not fully integrated with enterprise IT systems.

Business users are not able to decide upon IT service levels to be provided.

Increasing complexity of core business and IT processes have led to dramatic increasing costs.

The business strategy requires significant IT resource scalability over the next five years.

A CIO believes that a recent mission-critical IT decision by the board of directors is not in the best financial interest of all stakeholders. Which of the following is the MOST ethical course of action?

Request a meeting with the board.

Share concerns with the legal department.

Request a meeting with the board.

Engage an independent cost-benefit analysis.

Request an internal audit review of the board's decision.

A retail enterprise has cost reduction as its top priority. From a governance perspective, which of the following should be the MOST important consideration when evaluating different IT investment options?

Risk associated with each option

Which of the following is the MOST important consideration for data classification to be successfully implemented?

The data classification tools integrate with other tools that help manage the data.

Users should be provided with clear instructions that are easy to follow and understand.

The data classification tools integrate with other tools that help manage the data.

The classification scheme should be closely aligned with the IT strategic plan.

Senior management should be properly trained in monitoring compliance.

What is the PRIMARY objective for performing an IT due diligence review prior to the acquisition of a competitor?

Assess the status of the risk profile of the competitor.

Document the competitor's governance structure.

Ensure that the competitor understands significant IT risks.

Assess the status of the risk profile of the competitor.

Determine whether the competitor is using industry-accepted practices.

The IT program manager does not see the value of conducting risk assessments for a new major IT project. The manager is reluctant to cooperate with internal auditors and the newly formed steering committee. Midway through the project, program requirements were changed because the CEO is a friend of a vendor and wants to implement this vendor's new technology. This decision will cause the current IT program budget to be insufficient and will be shown as overspending.After the requirement change request, the IT program manager should FIRST:

report the matter to internal audit as a program deviation to be reviewed.

obtain confirmation from the business and a decision by the steering committee.

request additional funding from the business owner to cover the additional scope.

report the matter to internal audit as a program deviation to be reviewed.

align IT with the business and agree to the business request.

An enterprise is planning a change in business direction. As a result, IT risk will significantly increase. Which of the following should be the GO'S FIRST course of action?

Report the risk to executive management

Recommend delaying the business change.

Implement IT changes to align with the plan.

Report the risk to executive management

Plan for the corresponding IT reorganization.

Which of the following is MOST important to effectively initiate IT-enabled change?

Establish a change management process.

Obtain top management support and ownership.

Ensure compliance with corporate policy.

Benchmark against best practices.

Which of the following would BEST help to improve an enterprise's ability to manage large IT investment projects?

Implementing a review and approval process for each phase

Creating a change management board

Reviewing and evaluating existing business cases

Implementing a review and approval process for each phase

Publishing the IT approval process online for wider scrutiny

A business case indicates an enterprise would reduce costs by implementing a bring your own device (BYOD) program allowing employees to use personal devices for email. Which of the following should be the FIRST governance action?

Assess the enterprise architecture (EA).

Update the network infrastructure.

The CIO of a financial services company is tasked with ensuring IT processes are in compliance with recently instituted regulatory changes. The FIRST course of action should be to:

perform a current state assessment.

align IT project portfolio with regulatory requirements.

create an IT balanced scorecard.

identify the penalties for noncompliance.

perform a current state assessment.

The CIO of an enterprise learns the payroll server of a competitor has been the victim of ransomware. To help plan for the possibility of ransomed corporate data, what should be the ClO's FIRST course of action?

Request a targeted risk assessment.

Require development of key risk indicators (KRls).

Develop a policy to address ransomware.

Request a targeted risk assessment.

Back up corporate data to a secure location.

Which of the following aspects of the transition from X-rays to digital images would be BEST addressed by implementing information security policy and procedures?

Protecting personal health information

Establishing data retention procedures

Training technicians on acceptable use policy

Minimizing the impact of hospital operation disruptions on patient care

Protecting personal health information

Prior to decommissioning an IT system, it is MOST important to:

assess compliance with the retention policy.

assess compliance with environmental regulations.

assess compliance with the retention policy.

review the media disposal records.

review the data sanitation records.

A CEO determines the enterprise is lagging behind its competitors in consumer mobile offerings, and mandates an aggressive rollout of several new mobile services within the next 12 months. To ensure the IT organization is capable of supporting this business objective, what should the CIO do FIRST?

Request an assessment of current in-house mobile technology skills.

Create a sense of urgency with the IT team that mobile knowledge is mandatory.

Procure contractors with experience in mobile application development.

Task direct reports with creating training plans for their teams.

Which of the following is the MOST effective way for a CIO to govern business unit deployment of shadow IT applications in a cloud environment?

Educate the executive team about the risk associated with shadow IT applications.

Implement controls to block the installation of unapproved applications.

Educate the executive team about the risk associated with shadow IT applications.

Provide training to the help desk to identify shadow IT applications.

Review and update the application implementation process.

Before an IT strategy committee can approve an IT risk assessment framework, which of the following is MOST important to have established?

Enterprise definitions for risk impact and probability

An enterprise risk mitigation strategy

Leading and lagging risk indicators

IT performance metrics and standards

Enterprise definitions for risk impact and probability

An IT governance committee wants to ensure there is a clear description of the 'data owner' in the enterprise data policy. Which of the following would BEST define the owner of data stored in an external cloud?

The business leader who is most impacted by the loss of data.

The risk manager who is responsible for protecting data stored in the cloud.

The contract manager who monitors the security of the cloud provider.

The vendor who submits the data to the organization via online forms

A multinational enterprise recently purchased a large company located in a different country. When introducing the concept of governance to the new acquisition, it is MOST important that executive management recognize:

the impact of cultural changes.

the use of international standards.

the impact of cultural changes.

globally recognized good practices.

The results of an internal audit show that the business and IT acquire resources differently, which causes duplicate purchases. Which of the following is the BEST way to address this issue?

Define roles and responsibilities through a RAG chart

Align IT objectives to the business procurement process.

Involve business in IT procurement decisions.

Establish a centralized procurement approval process.

Define roles and responsibilities through a RAG chart

Which of the following is the MOST important benefit of developing an information architecture model consistent with enterprise strategy?

It support and facilitates decision making.

It identifies information architecture priorities.

It support and facilitates decision making.

It enables information architecture roadmap updates.

It optimizes information delivery and storage costs.

Which of the following is the BEST course of action to enable effective resource management?

Implement a cross-training program.

Conduct an enterprise risk assessment.

Implement a cross-training program.

Assign resources based on business priorities.

Assign resources based on risk appetite.

IT has launched new portfolio management policies and processes to improve the alignment of IT projects with enterprise goals. The latest audit report indicates that no improvement has been made due to confusion in the decision-making process. Which of the following is the BEST course of action for the CIO?

Develop and communicate an accountability matrix.

Deliver prioritization and facilitation training.

Implement a performance management framework.

Create an IT portfolio management risk framework.

Develop and communicate an accountability matrix.

Which of the following should be the MOST important consideration when defining an information architecture?

Access to and exchange of information

Frequency and quantity of information updates

Information to justify business cases

Incorporation of emerging technologies

Access to and exchange of information

Senior management is reviewing the results of a recent security incident with significant business impact. Which of the following findings should be of GREATEST concern?

Response decisions were made without consulting the appropriate authority.

Significant gaps are present m the incident documentation.

The incident was not logged in the ticketing system.

Response decisions were made without consulting the appropriate authority.

Response efforts had to be outsourced due to insufficient internal resources.

A large enterprise that is diversifying its business will be transitioning to a new software platform, which is expected to cause data changes. Which of the following should be done FIRST when developing the related metadata management process?

Validate against existing architecture.

Require an update to enterprise data policies.

Review documented data interdependence.

Validate against existing architecture.

From a governance perspective, the PRIMARY goal of an IT risk optimization process should be to ensure:

the impact of IT risk to the enterprise is managed.

IT risk thresholds are defined in the enterprise architecture (EA).

the IT risk mitigation strategy is approved by management.

IT risk is mapped to the balanced scorecard.

the impact of IT risk to the enterprise is managed.

Which of the following is the BEST way to ensure new systems can be adequately supported once in production?

Evaluate the operational requirements of the business stakeholders.

Establish a resource management framework.

Evaluate the operational requirements of the business stakeholders.

Identify key performance indicators (KPIs).

Require operational management be identified in the business case.

To benefit from economies of scale, a CIO is deciding whether to outsource some IT services. Which of the following would be the MOST important consideration during the decision-making process?

New service level agreements (SLAs)

The board and senior management of a new enterprise recently met to formalize an IT governance framework. The board of directors' FIRST step in implementing IT governance is to ensure that:

IT roles and responsibilities are established.

an IT balanced scorecard is implemented.

a portfolio of IT-enabled investments is developed.

IT roles and responsibilities are established.

IT policies and procedures are defined.

Which of the following should be the MAIN governance focus when implementing a newly approved bring your own device (BYOD) policy?

Educating employees on the increased IT security risk to the enterprise

Recommending mobile applications that will increase business productivity

Training employees on the enterprise's chosen mobile device management system

Educating employees on the increased IT security risk to the enterprise

Understanding knowledge gaps of IT employees to support different mobile platforms

Isaca CGEIT Practice Test 3 - Free Online Exam Questions 81-120

Due to continually missed service level agreements (SLAs), an enterprise plans to terminate its contract with a vendor providing IT help desk services. The enterprise s IT department will assume the help desk-related responsibilities. Which of the following would BEST facilitate this transition?

Requiring the enterprise architecture (EA) be updated

Validating that the balanced scorecard is still meaningful

Ensuring IT will operate at a lower cost than the vendor

Ensuring a change management plan is in place

Comment (0)

Isaca CGEIT Practice Test 3

Question

Isaca CGEIT Practice Tests

Practice Tests