An enterprise has performed a business impact analysis (BIA) considering a number of risk scenarios Which of the following should the enterpnse do NEXT?

Perform a risk controls gap analysis

Update the disaster recovery plan (DRP)

Verify compliance with relevant legislation

Assess risk mitigation strategies

An enterprise has finalized a major acquisition and a new business strategy in line with stakeholder needs has been introduced To help ensure continuous alignment of IT with the new business strategy the CiO should FIRST

review the existing IT strategy against the new business strategy

revise the existing IT strategy to align with the new business strategy

establish a new IT strategy committee for the new enterprise

assess the IT cultural aspects of the acquired entity

An enterprise has decided to implement an IT risk management program After establishing stakeholder desired outcomes, the MAIN goal of the IT strategy committee should be to:

ensure IT risk alignment with enterprise risk

identify business data that requires protection.

perform a risk analysis on key IT processes

implement controls to address high risk areas

ensure IT risk alignment with enterprise risk

An enterprise has learned of a new regulation that may impact delivery of one of its core technology services Which of the following should the done FIRST?

Assess the risk associated with the new regulation

Update the risk management framework

Determine whether the board wants to comply with the regulation

Assess the risk associated with the new regulation

Request an action plan from the risk team

The BEST way for a CIO to monitor the alignment between the business and IT strategy is to regularly review

IT services supporting business processes

The FIRST step in aligning resource management to the enterprise's IT strategic plan would be to

develop a responsible, accountable, consulted and informed (RACI) chart

assign appropriate roles and responsibilities

identify outsourcing opportunities

Which of the following should a new CIO do FIRST to ensure information assets are effectively governed?

Review information classification procedures

Quantify the business value of information assets

Perform an information gap analysis

Review information classification procedures

Evaluate information access methods

An enterprise incurred penalties for noncompliance with privacy regulations. Which of the following is MOST important to ensure appropriate ownership of access controls to address this deficiency?

Authenticating access to information assets based on roles or business rules

Granting access to information based on information architecture

Engaging an audit of logical access controls and related security policies

Implementing multi-factor authentication controls

Authenticating access to information assets based on roles or business rules

Which of the following would BEST support an enterprise's initiative to incorporate desired organizational behaviors into the IT governance framework?

Risk mitigation strategies and action plans

Documented consequences for noncompliance

To develop appropriate measures to improve organizational performance, the measures MUST be:

accepted by and meaningful to the stakeholders.

a result of benchmarking and comparative analysis.

accepted by and meaningful to the stakeholders.

based on existing and validated data sources.

approved by the IT steering committee.

When considering an IT change that would enable a potential new line of business, the FIRST strategic step for IT governance would be to ensure agreement among the stakeholders regarding:

metrics to measure effectiveness

Which of the following should be the PRIMARY consideration for an enterprise when prioritizing IT projects?

Impact on the business due to expected project outcomes

Technical capability of the enterprise to execute the projects

Process owner expectations based on operational benefits

Results of IT performance benchmarks against competitors

Impact on the business due to expected project outcomes

An enterprise is planning to migrate its IT infrastructure to a cloud-based solution but does not have experience with this technology Which of the following should be done FIRST to reduce the risk of IT service disruptions when using this new technology?

Reflect the change in the enterprise architecture (EA).

Implement key performance indicators (KPIs).

Reflect the change in the enterprise architecture (EA).

Engage an experienced IT consultant to perform the migration.

As part of the implementation of IT governance, the board of an enterprise should establish an IT strategy committee to:

provide input to and ensure alignment of the enterprise and IT strategies.

ensure IT risks inherent in the enterprise strategy implementation are managed

drive IT strategy development and take responsibility for implementing the IT strategy.

assume governance accountability for the business strategy on behalf of the board

An enterprise has identified potential environmental disasters that could occur in the area where its data center is located. Which of the following should be done NEXT?

Assess the likelihood and impact on the data center.

Implement an early warning detection and notification system.

Assess the likelihood and impact on the data center.

Relocate the data center to minimize the threat.

Assess how the data center is protected against the threat.

Which of the following should IT governance mandate before any transition of data from a legacy system to a new technology platform?

Control totals of key transaction values are matched with data converted for migration.

Data conversion has documented approvals from business process data owners.

Data conversion is performed in a test environment to confirm correctness

Control totals of key transaction values are matched with data converted for migration.

A crisis management plan has been approved by the IT steering committee

Which of the following would a CIO use to present the overall view of IT performance to the board of directors?

Key performance indicators (KPIs)

Which of the following is the BEST justification for a procurement manager to agree to purchase IT equipment from a specific vendor during a sales promotion?

The business profit surpasses the IT cost for the equipment.

The IT benefit surpasses the business benefit from the purchase.

The equipment adds value to the enterprise.

The business profit surpasses the IT cost for the equipment.

The product is offered at the lowest price.

When evaluating the process for acquiring third-party IT resources, management identified several suppliers with repeated downtime issues impacting the enterprise. Which of the following is the BEST approach to help ensure future service delivery in accordance with business objectives?

Establish key performance indicators (KPls)

Appoint a procurement oversight committee

Establish key risk indicators (KRIs).

Which of the following should be the PRIMARY input when developing IT strategy?

Process and capability maturity

Due to the recent introduction of personal data protection regulations, an enterprise is required to maintain its employee data in production systems only for a limited time. Which of the following is MOST important to review?

Data backup and restoration policies

A data governance strategy has been defined by the IT strategy committee which includes privacy objectives related to access controls, authorized use. and data collection. Which of the following should the committee do NEXT?

Mandate the creation of a data privacy policy.

Mandate data privacy training for employees.

Establish a data privacy budget

Perform a data privacy impact assessment.

Mandate the creation of a data privacy policy.

Which of the following is the MOST appropriate mechanism for measuring overall IT organizational performance?

IT portfolio return on investment (ROI)

A large enterprise has decided to use an emerging technology that needs to be integrated with the current IT infrastructure. Which of the following is the BEST way to prevent adverse effects to the enterprise resulting from the new technology?

Develop key risk indicators (KRIs).

Develop key performance indicators (KPIs).

Update the risk appetite statement

Develop key risk indicators (KRIs).

Implement service level agreements (SLAs)

Which of the following would be the BEST way for an IT steering committee to monitor the adoption of a new enterprise IT strategy?

Establish key performance indicators (KPIs).

Establish key risk indicators (KRIs).

Schedule ongoing audit reviews.

Implement service level agreements (SLAs)

Which of the following is the MOST important input for the development of a human resources strategy to address IT skill gaps?

Training budget allocated for IT staff

Technology direction of the enterprise

An enterprise wishes to establish key risk indicators (KRIs) in an effort to better manage IT risk. Which of the following should be identified FIRST?

Enterprise architecture (EA) components

Which of the following would be the BEST way to facilitate the successful adoption of a new technology across the enterprise?

Ensure the use of a business case

Establish an IT balanced scorecard.

Highlight the risk the new technology will address.

Which of the following should be the FIRST consideration for an enterprise faced with a pandemic situation resulting in a mandatory remote work environment?

Ensuring remote work policies are updated and communicated

Reviewing and testing disaster recovery plans (DRPs)

Ensuring staff has the necessary technology to be productive

Ensuring remote work policies are updated and communicated

Revising IT performance monitoring metrics

The MAIN responsibility of the board of directors regarding the management of enterprise risk is to:

ensure a risk process exists which addresses the risk appetite.

sustain investment in staff training regarding IT risk.

promote a benefits-driven culture throughout the enterprise.

maintain awareness of IT risk to the business.

Which of the following BEST supports an enterprise's ability to comply with privacy laws and regulations?

Accurate classification of enterprise data

Complete inventory of enterprise data

Implementation of a breach notification process

Accurate classification of enterprise data

Robust enterprise policy related to data retention

Which of the following roles should approve major IT purchases to help prevent conflicts of interest?

Chief information officer (CIO)

Project management office (PMO)

From an IT governance perspective, establishing performance measurements is PRIMARILY the responsibility of:

the IT architecture review board.

enterprise risk management (ERM).

Business management is seeking assurance from the CIO that controls are in place to help minimize the risk of critical IT systems being unavailable during month-end financial processing. What is the BEST way to address this concern?

Develop key risk indicators (KRIs) and action plans.

Create a communication plan with risk owners.

Outsource infrastructure hosting.

Restrict and monitor user access.

Develop key risk indicators (KRIs) and action plans.

Isaca CGEIT Practice Test 9 - Free Online Exam Questions 321-360

Which of the following would be the BEST long-term solution to address the concern regarding loss of expenenced staff?

Become a Premium Member for full access

Unlock Premium Member

Isaca CGEIT Practice Test 9

Question

Isaca CGEIT Practice Tests

Practice Tests