ExamGecko
Home Home / Isaca / CGEIT

Isaca CGEIT Practice Test - Questions Answers, Page 10

Question list
Search
Search

List of questions

Search

Related questions











Which of the following is MOST important to effectively initiate IT-enabled change?

A.
Establish a change management process.
A.
Establish a change management process.
Answers
B.
Obtain top management support and ownership.
B.
Obtain top management support and ownership.
Answers
C.
Ensure compliance with corporate policy.
C.
Ensure compliance with corporate policy.
Answers
D.
Benchmark against best practices.
D.
Benchmark against best practices.
Answers
Suggested answer: A

Which of the following would BEST help to improve an enterprise's ability to manage large IT investment projects?

A.
Creating a change management board
A.
Creating a change management board
Answers
B.
Reviewing and evaluating existing business cases
B.
Reviewing and evaluating existing business cases
Answers
C.
Implementing a review and approval process for each phase
C.
Implementing a review and approval process for each phase
Answers
D.
Publishing the IT approval process online for wider scrutiny
D.
Publishing the IT approval process online for wider scrutiny
Answers
Suggested answer: C

A business case indicates an enterprise would reduce costs by implementing a bring your own device (BYOD) program allowing employees to use personal devices for email. Which of the following should be the FIRST governance action?

A.
Assess the enterprise architecture (EA).
A.
Assess the enterprise architecture (EA).
Answers
B.
Update the network infrastructure.
B.
Update the network infrastructure.
Answers
C.
Update the BYOD policy.
C.
Update the BYOD policy.
Answers
D.
Assess the BYOD risk.
D.
Assess the BYOD risk.
Answers
Suggested answer: D

The CIO of a financial services company is tasked with ensuring IT processes are in compliance with recently instituted regulatory changes. The FIRST course of action should be to:

A.
align IT project portfolio with regulatory requirements.
A.
align IT project portfolio with regulatory requirements.
Answers
B.
create an IT balanced scorecard.
B.
create an IT balanced scorecard.
Answers
C.
identify the penalties for noncompliance.
C.
identify the penalties for noncompliance.
Answers
D.
perform a current state assessment.
D.
perform a current state assessment.
Answers
Suggested answer: D

The CIO of an enterprise learns the payroll server of a competitor has been the victim of ransomware. To help plan for the possibility of ransomed corporate data, what should be the ClO's FIRST course of action?

A.
Require development of key risk indicators (KRls).
A.
Require development of key risk indicators (KRls).
Answers
B.
Develop a policy to address ransomware.
B.
Develop a policy to address ransomware.
Answers
C.
Request a targeted risk assessment.
C.
Request a targeted risk assessment.
Answers
D.
Back up corporate data to a secure location.
D.
Back up corporate data to a secure location.
Answers
Suggested answer: C

Which of the following aspects of the transition from X-rays to digital images would be BEST addressed by implementing information security policy and procedures?

A.
Establishing data retention procedures
A.
Establishing data retention procedures
Answers
B.
Training technicians on acceptable use policy
B.
Training technicians on acceptable use policy
Answers
C.
Minimizing the impact of hospital operation disruptions on patient care
C.
Minimizing the impact of hospital operation disruptions on patient care
Answers
D.
Protecting personal health information
D.
Protecting personal health information
Answers
Suggested answer: D

Prior to decommissioning an IT system, it is MOST important to:

A.
assess compliance with environmental regulations.
A.
assess compliance with environmental regulations.
Answers
B.
assess compliance with the retention policy.
B.
assess compliance with the retention policy.
Answers
C.
review the media disposal records.
C.
review the media disposal records.
Answers
D.
review the data sanitation records.
D.
review the data sanitation records.
Answers
Suggested answer: B

A CEO determines the enterprise is lagging behind its competitors in consumer mobile offerings, and mandates an aggressive rollout of several new mobile services within the next 12 months. To ensure the IT organization is capable of supporting this business objective, what should the CIO do FIRST?

A.
Request an assessment of current in-house mobile technology skills.
A.
Request an assessment of current in-house mobile technology skills.
Answers
B.
Create a sense of urgency with the IT team that mobile knowledge is mandatory.
B.
Create a sense of urgency with the IT team that mobile knowledge is mandatory.
Answers
C.
Procure contractors with experience in mobile application development.
C.
Procure contractors with experience in mobile application development.
Answers
D.
Task direct reports with creating training plans for their teams.
D.
Task direct reports with creating training plans for their teams.
Answers
Suggested answer: A

Which of the following is the MOST effective way for a CIO to govern business unit deployment of shadow IT applications in a cloud environment?

A.
Implement controls to block the installation of unapproved applications.
A.
Implement controls to block the installation of unapproved applications.
Answers
B.
Educate the executive team about the risk associated with shadow IT applications.
B.
Educate the executive team about the risk associated with shadow IT applications.
Answers
C.
Provide training to the help desk to identify shadow IT applications.
C.
Provide training to the help desk to identify shadow IT applications.
Answers
D.
Review and update the application implementation process.
D.
Review and update the application implementation process.
Answers
Suggested answer: B

Before an IT strategy committee can approve an IT risk assessment framework, which of the following is MOST important to have established?

A.
An enterprise risk mitigation strategy
A.
An enterprise risk mitigation strategy
Answers
B.
Leading and lagging risk indicators
B.
Leading and lagging risk indicators
Answers
C.
IT performance metrics and standards
C.
IT performance metrics and standards
Answers
D.
Enterprise definitions for risk impact and probability
D.
Enterprise definitions for risk impact and probability
Answers
Suggested answer: D
Total 577 questions
Go to page: of 58