Which of the following should be the FIRST step in updating an IT strategic plan?

Identify changes in enterprise goals.

Revise the enterprise architecture (EA).

Review IT performance objectives and indicators.

Evaluate IT capabilities and resources.

Identify changes in enterprise goals.

Which of the following is the BEST method to confirm whether a pilot project was successful?

Assess the results of the pilot project against the expected performance outcomes.

Determine whether the pilot aligns with the as-is enterprise architecture (EA).

Evaluate whether the pilot project achieved planned schedule and cost.

Assess the results of the pilot project against the expected performance outcomes.

Review the metrics recorded in the IT balanced scorecard.

The CIO of a large enterprise has taken the necessary steps to align IT objectives with business objectives. What is the BEST way for the CIO to ensure these objectives are delivered effectively by IT staff?

Enhance Ihe budget for training based on the IT objectives.

Map the IT objectives to an industry-accepted framework.

Enhance Ihe budget for training based on the IT objectives.

Include the IT objectives in staff performance plans.

Include CIO sign-off of the objectives as part of the IT strategic plan.

The CIO of a large enterprise has taken the necessary steps to align IT objectives with business objectives. What is the BEST way for the CIO to ensure these objectives are delivered effectively by IT staff?

Enhance the budget for training based on the IT objectives.

Map the IT objectives to an industry-accepted framework.

Enhance the budget for training based on the IT objectives.

Include the IT objectives in staff performance plans.

Include CIO sign-off of the objectives as part of the IT strategic plan.

The board of directors of a large organization has directed IT senior management to improve IT governance within the organization. IT senior management's MOST important course of action should be to:

assess the current slate of IT governance within the organization.

understand the driver that led to a desire to change.

assess the current slate of IT governance within the organization.

review IT strategy and direction.

analyze IT service levels and performance.

When assessing the impact of a new regulatory requirement, which of the following should be the FIRST course of action?

Map the regulation to business processes.

Assess the budget impact of the new regulation.

Map the regulation to business processes.

Implement new regulatory requirements.

An IT strategy committee has reviewed an audit report indicating sales employees are using personal smartphones to conduct corporate business. Although the committee appreciates the business benefits, it is also concerned with the security risk. To deliver the business benefit, what should be the committee's FIRST recommendation?

Improve training courses on securing corporate information.

Document procedures for securing personal devices.

Improve training courses on securing corporate information.

Perform a risk assessment on personal device data protection.

Update the corporate security policy to include personal devices.

An enterprise has made the strategic decision to reduce operating costs for the next year and is taking advantage of cost reductions offered by an external cloud service provider. Which of the following should be the IT steering committee's PRIMARY concern?

Calculating the cost of the current solution

Updating the business risk profile

Changing the IT steering committee charter

Revising the business's balanced scorecard

Which of the following should be the PRIMARY goal of implementing an IT strategic planning process?

Translating business needs into IT initiatives

Determining benefits from IT deployments

Optimizing IT resources to drive innovation

Directing business strategy to achieve goals

Translating business needs into IT initiatives

A health tech enterprise wants to ensure that its in-house developed mobile app for users complies with data privacy regulations. Which of the following should be identified FIRST when creating an inventory of information systems and data related to the mobile app?

Information classification scheme

Which of the following is the MOST important, characteristic of a well-defined information architecture?

It ensures compliance with regulations.

It addresses key stakeholder requirements.

It ensures compliance with regulations.

It enables achievement of service level agreements (SLAs).

It supports IT strategic goals.

An enterprise wants to address the human factors of social engineering risk within the organization. From a governance perspective, which of the following is the BEST way to mitigate this risk?

Mandate annual security awareness training.

Distribute the social media information security policy to staff.

Mandate annual security awareness training.

Restrict access to social media.

Mandate security requirements be included in employee contracts.

In an enterprise that has worldwide business units and a centralized financial control model, which of the following is a barrier to strategic alignment of business and IT?

Each business unit has its own steering committee for IT investment and prioritization.

Uniform portfolio management is in place throughout the business units.

IT is the exclusive provider of IT services to the business units.

The enterprise's CIO is a member of the executive committee.

An enterprise's executive team has recently released a new IT strategy and related objectives. Which of the following would be the MOST effective way for the CIO to ensure IT personnel are supporting the new strategy's objectives?

Require IT managers to assign activities aligned to the IT objectives.

Measure progress towards IT objectives and communicate the results to IT staff.

Incorporate IT objectives into individual performance evaluations.

Develop communication materials to promote the new IT strategy and objectives.

Require IT managers to assign activities aligned to the IT objectives.

The PRIMARY reason for using quantitative criteria in developing business cases for IT projects is to:

improve the process of evaluating returns after implementation.

benchmark project success with similar enterprises.

learn lessons from errors made in past projects.

apply other corporate standards to the development project.

Which of the following is the MOST important reason to include internal audit as a stakeholder when establishing clear roles for the governance of IT?

Internal audit provides input on relevant issues and control processes.

Internal audit has knowledge and technical expertise to advise on IT infrastructure.

Internal audit is accountable for the overall enterprise governance of IT.

Internal audit implements controls over IT risks and security.

Internal audit provides input on relevant issues and control processes.

When developing an IT governance framework, it is MOST important for an enterprise to consider:

information technology strategy.

To ensure that information can be traced to the originating event and accountable parties, an enterprise should FIRST:

review retention requirements for source information.

capture source information and supporting evidence.

improve business process controls.

review information event logs tor potential incidents.

review retention requirements for source information.

An enterprise has developed a new digital strategy to improve fraud detection. Which of the following is MOST important to consider when updating the information architecture?

The history of fraud incidents and their root causes

Resource constraints related to implementing the digital strategy.

The business use cases supporting the digital strategy

Changes to the legacy business and data architectures

The history of fraud incidents and their root causes

A software company's products have had significant quality issues in recent releases. As a result, market reputation and customer satisfaction ratings have been suffering. What should executive leadership do FIRST to address this concern?

Require a root cause analysis and review results.

Allocate budget to hire more software and quality assurance specialists

Implement a software development life cycle (SDLC) framework.

Mandate more robust software testing prior to release.

Require a root cause analysis and review results.

An enterprise's board of directors has determined that IT is not sufficiently supporting its corporate objectives, and has established a committee to address this problem. Which of the following should be the committees FIRST action?

Implement a continuous improvement plan.

Specify IT human resource performance measures.

Develop a service level management plan.

The CEO of an organization is concerned that there are inconsistencies in the way information assets are classified across the enterprise. Which of the following is be the BEST way for the CIO to address these concerns?

Implement enterprise data governance.

Include data assets in the IT inventory.

Identify data owners across the enterprise.

Require enterprise risk assessments.

Implement enterprise data governance.

The PRIMARY objective of promoting business ethics within the IT enterprise should be to ensure:

trust among internal and external stakeholders.

employees act more responsibly.

corporate social responsibility.

legal and regulatory compliance.

The PRIMARY reason for periodically evaluating IT resource staffing requirements is to:

ensure the enterprise has sufficient resources to address changing business and IT needs.

ascertain the IT function has sufficient skilled staff to maintain daily operations.

ensure the enterprise has sufficient resources to address changing business and IT needs.

verify that human resource recruitment and retention processes meet enterprise IT objectives.

confirm IT-related responsibilities are defined for the enterprise's business and IT staff.

Following a re-prioritization of business objectives by management, which of the following should be performed FIRST to allocate resources to IT processes?

Refine the human resource management plan.

IT security is concerned with employees' increasing use of personal equipment for work-related purposes, while employees claim it allows them to be more productive. A decision on whether to modify the enterprise information security policy should be based on:

user access approval procedures.

An enterprise is determining the objectives for an IT training improvement initiative from a governance prosoectic. it would be MOST important to ensure that:

policies and processes address both enterprise requirements and professional growth

courses of instruction that will maximize employee productivity are identified

several different training strategies are created for final approval by the CIO

IT employees are surveyed and interviewed to identify development needs

Which of the following is the BEST way to maximize the value of an enterprise's information aseet base?

Implement an automated information management platform

Seek additional opportunities to leverage existing information assets .

Facilitate widespread user access to ail information assets

Regularly purge information assets to minimize maintenance costs

Implement an automated information management platform

The PRIMARY benefit of using an IT service catalog as part of the IT governance program is that it.

ensures IT effectively meets future business needs,

provides a foundation for measuring IT performance,

improves the ability to allocate IT resources

establishes enterprise performance metrics per service

When developing an IT strategic plan that supports an enterprise's business goals which of the following should be done FIRST?

Ensure that IT drives business goals

Perform a business impact analysis (BIA)

The PRIMARY reason for implementing an IT governance program in an enterprise is to

balance the demand for information and the ability to deliver.

comply with regulatory requirements

reduce risks due to improved compensating controls.

decrease the scale of investment in information systems due to budgetary controls.

Which of the following is the BEST way to address an IT audit finding that many enterprise application updates lack appropriate documentation?

Conduct software quality audits

Enforce change control procedures.

Conduct software quality audits

Review the application development life cycle.

Add change control to the risk register.

Which of the following is the GREATEST benefit of using a quantitative risk assessment method?

It uses resources more efficiently

It can be used to assess risks against non-tangible assets

It helps in prioritizing risk response action plans

Following the rollout of an enterprise IT software solution that hosts sensitive data it was discovered that the application's role-based access control was not functioning as specified Which of the following is the BEST way to prevent reoccurrence in the future?

Ensure the evaluation process requires independent assessment of solutions prior to implementation

Ensure supplier contracts include penalties if solutions do not meet functional requirements

Ensure the evaluation process requires independent assessment of solutions prior to implementation

Ensure supplier contracts include a provision for the right to audit on an annual basis

Ensure procurement processes require the identification of alternate vendors to ensure business continuity.

Isaca CGEIT Practice Test 7 - Free Online Exam Questions 241-280

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Isaca CGEIT Practice Test 7

Question

Isaca CGEIT Practice Tests

Practice Tests