An enterprise has a large backlog of IT projects. The current strategy is to execute projects as they are submitted, but executive management does not believe this method is optimal. Which of the following is the MOST important action to address this concern?

Create a combined business/IT committee to determine project prioritization.

Implement stage-gating to determine the value of each project.

Establish a performance dashboard that determines business value.

Implement a methodology to prioritize projects based on resource availability.

Create a combined business/IT committee to determine project prioritization.

An IT strategy committee wants to ensure that a risk program is successfully implemented throughout the enterprise. Which of the following would BEST support this goal?

Commitment from senior management

Mandatory risk awareness courses for staff

A risk recognition and reporting policy

Commitment from senior management

Which of the following would be the PRIMARY impact on IT governance when a business strategy is changed?

Performance outcomes of IT objectives

Relationship level with IT outsourcers

The MOST successful IT performance metrics are those that:

are approved by the stakeholders.

When implementing an IT governance framework, which of the following would BEST ensure acceptance of the framework?

Factoring in the effects of enterprise culture

Using industry-accepted practices

Complying with regulatory requirements

An executive sponsor of a partially completed IT project has learned that the financial assumptions supporting the project have changed. Which of the following governance actions should be taken FIRST?

Schedule an interim project review.

Re-evaluate the project in the portfolio.

Request an update to the business case

As the required core competencies of the IT workforce are anticipated and identified, what is the NEXT step in strengthening the department's human resource assets?

Create an effective recruitment, retention, and training program.

Develop a responsible, accountable, consulted, and informed (RACI) chart.

Create an effective recruitment, retention, and training program.

Commit to the board performance metrics and bonus structure.

Develop personnel requirements for third-party assurance.

To generate value for the enterprise, it is MOST important that IT investments are:

consistent with the enterprise's business objectives.

aligned with the IT strategic objectives.

consistent with the enterprise's business objectives.

included in the balanced scorecard.

An enterprise plans to implement a business intelligence (Bl) tool with data sources from various enterprise applications. Which of the following is the GREATEST challenge to implementation?

Large volumes of data fed from enterprise applications

Interface issues between enterprise and Bl applications

Large volumes of data fed from enterprise applications

The need for staff to be trained on the new Bl tool

Data definition and mapping sources from applications

The use of new technology in an enterprise will require specific expertise and updated system development processes. There is concern that IT is not properly sourced. Which of the following should be the FIRST course of action?

Assess the gap between current and required staff competencies.

Perform a risk assessment on potential outsourcing.

Update the enterprise architecture (EA) with the new technology.

Review the IT balanced scorecard for sourcing opportunities.

Assess the gap between current and required staff competencies.

An enterprise is evaluating a Software as a Service (SaaS) solution to support a core business process. There is no outsourcing governance or vendor management in place. What should be the CEO's FIRST course of action?

Ensure the roles and responsibilities to manage service providers are defined.

Establish a contract with the SaaS solution provider.

Instruct management to use the standard procurement process.

Ensure the service level agreements (SLAs) for service providers are defined.

An IT steering committee wants the enterprise's mobile workforce to use cloud-based file storage to save non-sensitive corporate data, removing the need for remote access to that information. Before this change is implemented, what should be included in the data management policy?

A mandate for periodic employee training on how to classify corporate data files

A mandate for the encryption of all corporate data files at rest that contain sensitive data

A process for blocking access to cloud-based apps if inappropriate content is discovered

A requirement to scan approved cloud-based apps for inappropriate content

An enterprise incurred penalties for noncompliance with privacy regulations. Which of the following is MOST important to ensure appropriate ownership of access controls to address this deficiency?

Authenticating access to information assets based on roles or business rules.

Implementing multi-factor authentication controls

Granting access to information based on information architecture

Engaging an audit of logical access controls and related security policies

Which of the following would be of MOST concern regarding the effectiveness of risk management processes?

Key risk indicators (KRIs) are not established.

Risk management requirements are not included in performance reviews.

The plans and procedures are not updated on an annual basis.

There is no framework to ensure effective reporting of risk events.

An enterprise has a zero-tolerance policy regarding security. This policy is causing a large number of email attachments to be blocked and is a disruption to enterprise. Which of the following should be the FIRST governance step to address this email issue?

Obtain senior management input based on identified risk.

Direct the development of an email usage policy.

Obtain senior management input based on identified risk.

Recommend business sign-off on the zero-tolerance policy.

Introduce an exception process.

Which of the following is the BEST method for determining an enterprise's current appetite for risk?

Evaluating the balanced scorecard

Reviewing recent audit findings

Assessing social media adoption

Which of the following is the MOST effective approach to ensure senior management sponsorship of IT risk management?

Periodically review the IT risk register entries.

Benchmark risk framework against best practices.

Calculate financial impact for each IT risk finding.

Periodically review the IT risk register entries.

Integrate IT risk into enterprise risk management (ERM).

Which of the following is the PRIMARY benefit of communicating the IT strategy across the enterprise?

Reduced organizational resistance during strategy execution

On-time and on-budget delivery of strategic projects

Improvement in IT balanced scorecard performance

Optimization of IT investment in supporting business objectives

Reduced organizational resistance during strategy execution

The BEST way to ensure an IT steering committee meets enterprise objectives is to:

have key business stakeholders represented on the committee.

require a member of the committee to have IT governance expertise.

benchmark against industry best practices.

establish key performance indicators (KPIs).

have key business stakeholders represented on the committee.

Establishing a uniform definition for likelihood and impact through risk management standards PRIMARILY addresses which of the following concerns?

Conflicting interpretations of risk levels

Inconsistent categories of vulnerabilities

Conflicting interpretations of risk levels

Inconsistent data classification

An enterprise embarked on an aggressive strategy requiring the implementation of several large IT projects impacting multiple business processes across all departments. Initially employees were supportive of the strategy, but there is growing fatigue and frustration with the ongoing new capabilities which must be learned. Which of the following would be the BEST action performed by senior management?

Establish 'Reward and Recognition' efforts to boost employee morale.

Incorporate an organizational change management program.

Establish 'Reward and Recognition' efforts to boost employee morale.

Improve the system development life cycle (SDLC) process.

Assess current business and IT competencies.

An enterprise decides to accept the IT risk of a subsidiary located in another country even though it exceeds the enterprise's risk appetite. Which of the following would be the BEST justification for this decision?

Compliance with local regulations

Technical gaps among subsidiaries

Which of the following is the MOST valuable input when quantifying the loss associated with a major risk event?

Business impact analysis (BIA) report

Recovery time objectives (RTOs)

To reduce the risk of reputational damage through inappropriate use of social media by employees outside of the workplace, the enterprise approach regarding social media should PRIMARILY focus on;

developing policies on social media.

implementing preventative controls.

developing policies on social media.

implementing a review of processes utilizing social media.

ensuring each use of social media is approved by management.

An enterprise's internal audit group has scheduled a control review of a payroll system project but has been told to wait until the system is implemented. Which of the following is the GREATEST risk associated with the delay?

Increased cost to mitigate deficiencies

delay in the development of new key performance indicators (KPIs)

Continued dependency on compliant legacy systems

Increased cost to mitigate deficiencies

Lack of adherence to industry best practices

Which of the following provides the STRONGEST indication that IT governance is well established within an organizational culture?

IT performance metrics are defined in the balanced scorecard.

Benefits of IT governance are realized throughout the organization.

There is awareness of IT metrics throughout the organization.

IT governance defines how IT projects should be assessed.

A board of directors has just received a report indicating that only a small number of IT initiatives have been completed on time and within budget, A third of the projects were cancelled prior to completion, and more than half will cost almost double their original estimates. An analysis has determined that no one is held responsible for the completion of investment initiatives, and there is no consistency in execution. Which of the following would BEST help the enterprise address these problems?

Assigning business management to an IT investment review board

Establishing a project governance framework

Assigning business management to an IT investment review board

Establishing an IT risk management plan

Aligning IT investment priorities to the business

An enterprise is trying to increase the maturity of its IT process from being ad hoc to being repeatable. Which of the following is the PRIMARY benefit of this change?

Required outcomes are more frequently achieved.

Process optimization is embedded across the organization.

Required outcomes are mapped to business objectives.

Process performance is measured in business terms.

Required outcomes are more frequently achieved.

A new chief information officer (CIO) of an enterprise recommends implementing portfolio management after realizing there is no process in place for evaluating investments prior to selection. What should be the PRIMARY strategic goal driving this decision?

Maximize value from the combined investments.

Standardize processes for investment evaluation.

Align investments to the enterprise architecture (EA).

Enable transparency within the investment process.

Supply chain management has established a supplier policy requiring multiple technology suppliers. What is the BEST way to ensure the success of this policy?

Align enterprise architecture (EA) and procurement strategies.

Identity and select suppliers based on cost.

Align the vendor selection process with the security policy.

Implement a master service agreement.

Align enterprise architecture (EA) and procurement strategies.

When establishing an enterprise data model, the BEST way to ensure the integrity of data is to:

implement a data loss prevention (DLP) program.

classify information using an agreed-upon schema.

implement the highest level of protection to data across the enterprise.

establish a privileged access management platform.

implement a data loss prevention (DLP) program.

Which of the following is the BEST indication that enterprise value is being derived from IT?

IT services enable business strategy.

IT strategy supports continuous improvement initiatives

Metrics are established for IT performance.

Rate of return for projects is achieved.

IT services enable business strategy.

Which of the following should be the FIRST step in planning an IT governance implementation?

Assign decision-making responsibilities.

Obtain necessary business funding.

Define key business performance indicators.

A CIO just received a final audit report that indicates there is inconsistent enforcement of the enterprise's mobile device acceptable use policy throughout all business units. Which of the following should be the FIRST step to address this issue?

Review the relevance of existing policy.

Incorporate compliance metrics into performance goals.

Review the relevance of existing policy.

Mandate awareness training for all mobile device users.

Implement controls to enforce the policy.

Isaca CGEIT Practice Test 5 - Free Online Exam Questions 161-200

A rail transport company has the worst on-time arrival record in the industry due to an antiquated IT system that controls scheduling. Despite employee resistance, an initiative lo upgrade the technology and related processes has been approved. To maximize employee engagement throughout the project, which of the following should be in place prior to the start of the initiative?

Become a Premium Member for full access

Unlock Premium Member

Isaca CGEIT Practice Test 5

Question

Isaca CGEIT Practice Tests

Practice Tests