ExamGecko
Home Home / Isaca / CGEIT

Isaca CGEIT Practice Test - Questions Answers, Page 24

Question list
Search
Search

List of questions

Search

Related questions











Which of the following is MOST critical to support IT governance cultural changes within an organization?

A.
Established IT monitoring and measuring
A.
Established IT monitoring and measuring
Answers
B.
Regularly scheduled governance training
B.
Regularly scheduled governance training
Answers
C.
Demonstrated management commitment
C.
Demonstrated management commitment
Answers
D.
IT governance process manuals
D.
IT governance process manuals
Answers
Suggested answer: C

Which of the following is the PRIMARY purpose of information governance?

A.
To develop control procedures that help ensure information is adequately protected throughout its life cycle
A.
To develop control procedures that help ensure information is adequately protected throughout its life cycle
Answers
B.
To monitor the processes that deliver and enhance the value of information assets
B.
To monitor the processes that deliver and enhance the value of information assets
Answers
C.
To set direction for information management capabilities through prioritization and decision making
C.
To set direction for information management capabilities through prioritization and decision making
Answers
D.
To ensure regulatory compliance is maintained while optimizing the utilization of information
D.
To ensure regulatory compliance is maintained while optimizing the utilization of information
Answers
Suggested answer: A

Communicating which of the following to staff BEST demonstrates senior management's commitment to IT governance?

A.
Legal and regulatory requirements
A.
Legal and regulatory requirements
Answers
B.
Approved IT investment opportunities
B.
Approved IT investment opportunities
Answers
C.
Objectives and responsibilities
C.
Objectives and responsibilities
Answers
D.
Need for enterprise architecture (EA)
D.
Need for enterprise architecture (EA)
Answers
Suggested answer: C

Which of the following is the PRIMARY purpose of an effective set of key risk indicators (KRIs)?

A.
Identifying possible future adverse impacts on the enterprise
A.
Identifying possible future adverse impacts on the enterprise
Answers
B.
Evaluating existing technology for risk monitoring capabilities
B.
Evaluating existing technology for risk monitoring capabilities
Answers
C.
Establishing executive level buy-in of the risk program
C.
Establishing executive level buy-in of the risk program
Answers
D.
Quantifying the productivity of the risk management team
D.
Quantifying the productivity of the risk management team
Answers
Suggested answer: A

A multinational enterprise is planning to migrate to cloud-based systems. Which of the following should be of MOST concern to the risk management committee?

A.
Cost considerations
A.
Cost considerations
Answers
B.
Regulatory compliance
B.
Regulatory compliance
Answers
C.
Resource alignment
C.
Resource alignment
Answers
D.
Security breaches
D.
Security breaches
Answers
Suggested answer: B

An enterprise is planning to outsource data processing for personally identifiable information (Pll). When is the MOST appropriate time to define the requirements for security and privacy of information?

A.
When issuing requests for proposals (RFPs)
A.
When issuing requests for proposals (RFPs)
Answers
B.
After an assessment of the current information architecture .
B.
After an assessment of the current information architecture .
Answers
C.
When developing service level agreements (SLAs)
C.
When developing service level agreements (SLAs)
Answers
D.
During the initial vendor selection process
D.
During the initial vendor selection process
Answers
Suggested answer: A

Which of the following is the MOST important aspect of business ethics?

A.
Ensuring fair and consistent vendor management practices
A.
Ensuring fair and consistent vendor management practices
Answers
B.
Providing equal opportunities to employees
B.
Providing equal opportunities to employees
Answers
C.
Protecting stakeholders' interests
C.
Protecting stakeholders' interests
Answers
D.
Complying with legal and regulatory requirements
D.
Complying with legal and regulatory requirements
Answers
Suggested answer: C

Which of the following is the BEST way to ensure all enterprise employees understand the corporate code of business conduct?

A.
Conduct scheduled and random compliance audits.
A.
Conduct scheduled and random compliance audits.
Answers
B.
Mandate annual ethics training that includes an exam.
B.
Mandate annual ethics training that includes an exam.
Answers
C.
Require external business activities be documented and reported.
C.
Require external business activities be documented and reported.
Answers
D.
Distribute a copy of the code and require a signature.
D.
Distribute a copy of the code and require a signature.
Answers
Suggested answer: B

A major data leakage incident at an enterprise has resulted in a mandate to strengthen and enforce current data governance practices. Which of the following should be done FIRST to achieve this objective?

A.
Assess data security controls.
A.
Assess data security controls.
Answers
B.
Review data logs.
B.
Review data logs.
Answers
C.
Analyze data quality.
C.
Analyze data quality.
Answers
D.
Verify data owners.
D.
Verify data owners.
Answers
Suggested answer: A

A newly hired CIO has been told the enterprise has an established IT governance process, but finds it is not being followed. To address this problem, the CIO should FIRST

A.
gain an understanding of the existing governance process and corporate culture.
A.
gain an understanding of the existing governance process and corporate culture.
Answers
B.
replace the current governance process with one the CIO has successfully used before.
B.
replace the current governance process with one the CIO has successfully used before.
Answers
C.
establish personal relationships with executive-level peers to leverage goodwill,
C.
establish personal relationships with executive-level peers to leverage goodwill,
Answers
D.
engage audit to review current governance processes and validate the ClO's concerns.
D.
engage audit to review current governance processes and validate the ClO's concerns.
Answers
Suggested answer: A
Total 577 questions
Go to page: of 58