Reviewing which of the following should be the FIRST step when evaluating the possibility of outsourcing an IT system?

Service level agreements (SLAs)

To enable the development of required IT skill sets for the enterprise, it is MOST important to define skill requirements based on:

each role within the IT department.

one set of skills applicable to all IT staff.

each role within the IT department.

The CIO of a global technology company is considering introducing a bring your own device (BYOD) program. What should the CIO do FIRST?

Ensure the infrastructure can meet BYOD requirements.

Define a clear and inclusive BYOD policy.

Focus on securing data and access to data.

What is the BEST way for an IT governance board to establish standards of behavior for the adoption of artificial intelligence (Al)?

Include specific ethics clauses in vendor agreements and contracts.

Direct the creation and approval of an ethical use policy.

Review and update the data privacy policy to align with industry standards.

Include specific ethics clauses in vendor agreements and contracts.

Include ethics topics within onboarding and awareness training.

An IT steering committee is preparing to review proposals for projects that implement emerging technologies. In anticipation of the review, the committee should FIRST:

understand how the emerging technologies will influence risk across the enterprise.

determine if the IT staff can support the emerging technologies.

understand how the emerging technologies will influence risk across the enterprise.

require a capacity plan and framework review for the emerging technologies,

require a review of the enterprise risk management framework.

Establishing a uniform definition for likelihood and impact BEST enables an enterprise to:

reduce variance in the assessment of risk.

develop key risk indicators (KRIs).

reduce risk appetite and tolerance levels.

An enterprise is concerned with the potential for data leakage as a result of increased use of social media in the workplace, and wishes to establish a social media strategy. Which of the following should be the MOST important consideration in developing this strategy?

Ensuring that the enterprise architecture (EA) is updated

The balance between business benefits and risk

The CIO of an international enterprise is considering the use of an offshore cloud service provider to store customer data. Which of the following should be the MOST important consideration when making this decision?

Compliance with applicable legislation

IT service delivery roles and responsibilities

Compliance with applicable legislation

Likelihood of natural disasters

The cloud service provider's reputation

Which of the following BEST indicates the success of an enterprise's IT governance framework after implementation?

A high percentage of IT investments delivering expected benefits

A high percentage of business owners involved with the approval of the IT strategic plan

A high percentage of IT systems complying with corporate information security standards

A high percentage of IT projects delivered on time and on budget

A high percentage of IT investments delivering expected benefits

After shifting from lease to purchase of IT infrastructure and software licenses, an enterprise has to pay for unexpected lease extensions causing significant cost overruns. The BEST direction for the IT steering committee would be to establish;

an end-of-life program to remove aging infrastructure from the environment.

budget cuts to compensate for the cost overruns.

a program to annually review financial policy on overruns.

a policy to consider total cost of ownership (TCO) in investment decisions.

Which of the following is MOST important to the successful implementation of enterprise architecture (EA)?

Managing the challenge of change

Reducing the cost of IT investments

Establishing key performance indicators (KPIs)

The BEST time to identity metrics to measure the performance of an IT-enabled investment is during:

investment feasibility analysis

To meet the growing demands of a newly established business unit, IT senior management has been tasked with changing the current IT organization model to service-oriented. With significant growth expected of the IT organization, which of the following is the MOST important consideration when planning for long-term IT service delivery?

IT is able to provide a comprehensive service catalog to the business.

The IT service delivery model is approved by the business.

An IT risk management process is in place.

IT is able to provide a comprehensive service catalog to the business.

The IT organization is able to sustain business requirements.

When preparing a new IT strategic plan for board approval, the MOST important consideration is to ensure the plan identifies:

roles and responsibilities that link to IT objectives.

specific resourcing requirements for identified IT projects.

frameworks that will be aligned to IT programs.

implications of the strategy on the procurement process.

Which of the following should be done FIRST when defining responsibilities for ownership of information and systems?

Require an inventory of information assets.

Require an information risk assessment.

Identify systems that are outsourced.

Ensure information is classified.

Require an inventory of information assets.

An enterprise is about to complete a major acquisition, and a decision has been made that both companies will be using the parent company's IT infrastructure. Which of the following should be done NEXT?

Update the enterprise architecture (EA).

Perform a business impact analysis (BIA.

Develop a communication plan to support the merger.

Following a strategic planning session, new IT objectives were announced. Which of the following is the MOST effective way for the CIO to ensure these objectives are cascaded to IT personnel?

Define individual performance measures related to the IT objectives.

Communicate the new IT objectives during a staff meeting.

Define individual performance measures related to the IT objectives.

Establish IT management's performance measures based on the IT objectives.

Update the IT balanced scorecard to align with the new IT objectives.

When deciding to develop a system with sensitive data, which of the following is MOST important to include in a business case?

The additional cost of encrypting sensitive data

A risk assessment to determine the appropriate controls

Updated enterprise architecture (EA)

The additional cost of encrypting sensitive data

Which of the following provides the BEST evidence of an IT risk-aware culture across an enterprise?

Business staff report identified IT risks.

IT risks are communicated to the business.

IT risk-related policies are published.

The IT infrastructure is resilient.

An IT strategy committee wants to evaluate how well the IT department supports the business strategy. Which of the following is the BEST method for making this determination?

IT balanced scorecard reporting

The MOST effective way to ensure that IT supports the agile needs of an enterprise is to:

develop a robust enterprise architecture (EA).

outsource infrastructure management.

develop a robust enterprise architecture (EA).

Which of the following provides the BEST evidence of effective IT governance?

Business value and customer satisfaction

Cost savings and human resource optimization

Business value and customer satisfaction

IT risk identification and mitigation

Comprehensive IT policies and procedures

A business is considering a policy to anonymize personal data in enterprise systems. Before making a decision, which of the following is MOST important for the IT steering committee to consider?

Business impact analysis (BIA) results

Sustainability costs to the enterprise

Potential implementation barriers

An enterprise is contracting with an outsourcing partner for a long-term engagement. The BEST time for the enterprise to plan for the event of contract termination is when:

developing the initial contract.

planning for the contract as part of business continuity.

issues surface in the contractual relationship.

developing the initial contract.

either party decides to terminate the contract.

The BEST way to decide how to prioritize issues identified in an IT risk and control self-assessment (CSA) is to understand the risk and:

criticality of IT services affected.

funds required for remediation.

Which of the following is MOST critical to support IT governance cultural changes within an organization?

Demonstrated management commitment

Established IT monitoring and measuring

Regularly scheduled governance training

Demonstrated management commitment

Which of the following is the PRIMARY purpose of information governance?

To develop control procedures that help ensure information is adequately protected throughout its life cycle

To monitor the processes that deliver and enhance the value of information assets

To set direction for information management capabilities through prioritization and decision making

To ensure regulatory compliance is maintained while optimizing the utilization of information

Communicating which of the following to staff BEST demonstrates senior management's commitment to IT governance?

Objectives and responsibilities

Legal and regulatory requirements

Approved IT investment opportunities

Objectives and responsibilities

Need for enterprise architecture (EA)

Which of the following is the PRIMARY purpose of an effective set of key risk indicators (KRIs)?

Identifying possible future adverse impacts on the enterprise

Evaluating existing technology for risk monitoring capabilities

Establishing executive level buy-in of the risk program

Quantifying the productivity of the risk management team

An enterprise is planning to outsource data processing for personally identifiable information (Pll). When is the MOST appropriate time to define the requirements for security and privacy of information?

When issuing requests for proposals (RFPs)

After an assessment of the current information architecture .

When developing service level agreements (SLAs)

During the initial vendor selection process

Which of the following is the MOST important aspect of business ethics?

Protecting stakeholders' interests

Ensuring fair and consistent vendor management practices

Providing equal opportunities to employees

Protecting stakeholders' interests

Complying with legal and regulatory requirements

Which of the following is the BEST way to ensure all enterprise employees understand the corporate code of business conduct?

Mandate annual ethics training that includes an exam.

Conduct scheduled and random compliance audits.

Mandate annual ethics training that includes an exam.

Require external business activities be documented and reported.

Distribute a copy of the code and require a signature.

A newly hired CIO has been told the enterprise has an established IT governance process, but finds it is not being followed. To address this problem, the CIO should FIRST

gain an understanding of the existing governance process and corporate culture.

replace the current governance process with one the CIO has successfully used before.

establish personal relationships with executive-level peers to leverage goodwill,

engage audit to review current governance processes and validate the ClO's concerns.

Isaca CGEIT Practice Test 6 - Free Online Exam Questions 201-240

An enterprise is developing an ethics program, and the ethical standards have been defined. Which of the following should the enterprise do NEXT?

Become a Premium Member for full access

Unlock Premium Member

Isaca CGEIT Practice Test 6

Question

Isaca CGEIT Practice Tests

Practice Tests