The board of directors of an enterprise has questioned whether the business is focused on optimizing value. The IT strategy committees BEST action to address the board's concern is to:

initiate reporting and review of key IT performance metrics.

conduct a portfolio review to assess the benefits realization of IT investments.

conduct a benchmark to assess IT value relative to competitors.

form a technology council to monitor the efficiency of project implementation.

Which of the following activities MUST be completed before developing an IT strategic plan?

Review the enterprise business plan

Align the enterprise vision statement with business processes

Develop an enterprise architecture (EA) framework

Review the enterprise risk tolerance level

Which of the following is the BEST indication that information security requirements are taken into consideration when developing IT processes?

The information architecture incorporates data classification

The database is deployed in a distributed processing platform

The information architecture incorporates data classification

Customer profiles are stored with a domestic service provider

The integrity of sensitive information is periodically reviewed

To minimize the potential mishandling of customer personal information in a system located in a country with strict privacy regulations which of the following is the BEST action to take?

Update the information architecture

Implement data loss prevention (DLP)

Establish new IT key risk indicators (KRIs)

Which of the following is the MOST important consideration when developing a new IT service'?

Service level agreements (SLAs)

Which of the following BEST facilitates governance oversight of data protection measures?

Information life cycle management

An airline wants to launch a new program involving the use of artificial intelligence (Al) and machine learning The mam objective of the program is to use customer behavior to determine new routes and markets Which of the following should be done NEXT?

Consult with the enterprise privacy function

Define the critical success factors (CSFs)

Present the proposal to the IT strategy committee

Perform a business impact analysis (BIA)

Which of the following BEST facilitates the standardization of IT vendor selection?

Service level agreements (SLAs)

An IT governance committee is defining a risk management policy for a portfolio of !T-enabled investments Which of the following should be the PRIMARY consideration when developing the policy?

Risk appetite of the enterprise

Value obtained with minimum risk

Risk appetite of the enterprise

An internal audit revealed a widespread perception that the enterprise's IT governance reporting lacks transparency Which of the following should the CIO do FIRST?

Meet with key stakeholders to understand their concerns

Add stakeholder transparency metrics to the balanced scorecard

Develop a communication and awareness strategy

Meet with key stakeholders to understand their concerns

Adopt an industry-recognized template to standardize reports.

An enterprise has decided to execute a risk self-assessment to identify improvement opportunities for current IT services. Which of the following is MOST important to address in the assessment?

Mapping of business objectives to IT risk

IT capability and performance measures

Which of the following is MOST important for IT governance to have in place to ensure the enterprise can maintain operations during extensive system downtime?

A business continuity plan (BCP)

Which of the following is MOST important for an enterprise to review when classifying information assets?

Procedures for information handling

Requirements for information retention.

Media used for storage and backup

Which of the following is MOST important to document for a business ethics program?

Guiding principles and best practices

Whistle-blower protection protocols.

Employee awareness and training content

Which of the following is the BEST outcome measure to determine the effectiveness of IT nsk management processes?

Number of events impacting business processes due to delays in responding to risks

Frequency of updates to the IT risk register

Time lag between when IT risk is identified and the enterprise's response

Number of events impacting business processes due to delays in responding to risks

Percentage of business users satisfied with the quality of risk training

An IT department outsourced application support and negotiated service level agreements (SLAs) directly with the vendor Although the vendor met the SLAs business owner expectations are not met and senior management cancels the contract This situation can be avoided in the future by:

improving the business requirements gathering process

improving the negotiation process for service level agreements (SLAs)

implementing a vendor performance scorecard

assigning responsibility for vendor management

An IT value delivery framework PRIMARILY helps an enterprise

optimize value to the enterprise.

increase transparency of value to the enterprise

assist top management in approving IT projects

improve value of successful IT projects

optimize value to the enterprise.

Which of the following IT governance practices would BEST support IT and enterprise strategic alignment?

Senior management regularly reviews the IT portfolio

An IT communication plan is continuously updated

External consultants regularly review the IT portfolio

Senior management regularly reviews the IT portfolio

IT service level agreements (SLAs) are periodically updated

Which of the following is the BEST way for an organization to minimize the difference between expected and delivered services when acquiring resources?

Negotiate service level agreements (SLAs)

Measure service delivery using industry benchmarks

Require quarterly benefits realization reporting

Include a right-to-audit clause in the contract.

Which of the following is (he GREATEST benefit of using the life cycle approach to govern information assets'?

Operational costs are maintained

Information availability is improved

Compliance with regulatory requirements is ensured

An enterprise is planning a transformation initiative by leveraging emerging technology that will have a significant impact on existing products and services Which of the following is the BEST way for IT to prepare for this change?

Use a balanced scorecard to measure IT outcomes.

Analyze emerging technology products and related training needs.

Procure appropriate resources to support emerging technology

Assess the impact on the existing IT strategy

Which of the following would be MOST helpful to an enterprise that wants to standardize how sensitive corporate data is handled?

Enterprise risk management (ERM) framework

Information classification framework

Enterprise risk management (ERM) framework

When selecting a vendor to provide services associated with a critical application which of the following is the MOST important consideration with respect to business continuity planning (BCP)?

Testing the vendor's BCP and analyzing the results

Procuring a copy of the vendor's BCP during the contracting process

Testing the vendor's BCP and analyzing the results

Obtaining independent audit reports of the vendor's BCP

Evaluating whether the vendor's BCP aligns with the enterprise's BCP

IT management has reported difficulty retaining qualified IT personnel to support the organization's new strategy Given that outsourcing is not a viable approach, which of the following would be the BEST way for IT governance to address this situation?

Direct the development of a strategic HR plan for IT

Implement an incentive-based employee referral program

Direct the development of a strategic HR plan for IT

Recommend enhancements to the online recruiting platform specific to IT

Work with HR to enhance compensation packages for IT personnel

Before establishing IT key nsk indicators (KRls) which of the following should be defined FIRST?

IT key performance indicators (KPIs)

Which of the following should be the ClO's GREATEST consideration when making changes to the IT strategy'?

Have key stakeholders been consulted?

Has the impact to the enterprise architecture (EA) been assessed?

Has the investment portfolio been revised?

Have key stakeholders been consulted?

Have IT risk metrics been adjusted?

An independent consultant has been hired to conduct an ad hoc audit of an enterprise's information security office with results reported to the IT governance committee and the board Which of the following is MOST important to provide to the consultant before the audit begins?

The scope and stakeholders of the audit

Acceptance of the audit risks and opportunities

The scope and stakeholders of the audit

The organizational structure of the security office

The policies and framework used by the security office

Enterprise leadership is concerned with the potential for discnmination against certain demographic groups resulting from the use of machine learning models What should be done FIRST to address this concern?

Develop a machine learning policy articulating guidelines for machine learning use

Obtain stakeholders' input regarding the ethics associated with machine learning

Revise the code of conduct to discourage bias within automated processes

Develop a machine learning policy articulating guidelines for machine learning use

Assess recent case law related to the enterprise's machine learning business strategy

An enterprise will be adopting wearable technology to improve business performance Whtch of the following would be the BEST way for the CIO to validate IPs preparedness for this initiative?

Perform a baseline business value assessment

Request an enterprise architecture (EA) review.

Request reprioritization of the IT portfolio.

Perform a baseline business value assessment

Identify the penalties for noncompliance.

Which of the following is a responsibility of an IT strategy committee?

Advising the board on the development of IT goals

Providing oversight on enterprise strategy implementation

Approving the business strategy and its IT implications

Advising the board on the development of IT goals

Tracking projects in the IT investment portfolio

When establishing a risk management process which of the following should be the FIRST step?

Determine the probability of occurrence

Isaca CGEIT Practice Test 8 - Free Online Exam Questions 281-320

An enterprise is considering outsourcing non-core IT processes Which of the following should be the FIRST step?

Become a Premium Member for full access

Unlock Premium Member

Isaca CGEIT Practice Test 8

Question

Isaca CGEIT Practice Tests

Practice Tests