Home / Isaca / CGEIT

Isaca CGEIT Practice Test - Questions Answers, Page 38

Question list

List of questions

Question 371

(0)

The PRIMARY objective of building outcome measures is to:

Question 372

(0)

Once the strategic vision has been established, which of the following would be the BEST activity for supporting the implementation of performance measures?

Question 373

(0)

Which of the following BEST supports the implementation of an effective data classification policy?

Question 374

(0)

An enterprise has lost an unencrypted backup tape of archived customer dat a. A data breach report is not mandatory in the relevant jurisdiction. From an ethical standpoint, what should the enterpr

Question 375

(0)

When developing an IT training plan, which of the following is the BEST way to ensure that resource skills requirements are identified?

Question 376

(0)

In which of the following situations is it MOST appropriate to use a quantitative risk assessment?

Question 377

(0)

An IT department has forwarded a request to the IT strategy committee for funding of a discretionary Investment. The committee's MOST important consideration should be to evaluate:

Question 378

(0)

Which of the following should be identified FIRST when determining appropriate IT key risk indicators (KRIs)?

Question 379

(0)

An IT risk committee is trying to mitigate the risk associated with a newly implemented bring your own device (BYOD) policy and supporting mobile device management (MDM) tools. Which of the followin

Question 380

(0)

An enterprise's decision to move to a virtualized architecture will have the GREATEST impact on:

Question 371

The PRIMARY objective of building outcome measures is to:

monitor whether the chosen strategy is successful

visualize how the strategy will be achieved.

demonstrate commitment to IT governance.

clarify the cause-and-effect relationship of the strategy.

Show Answer Comment (0)

Question 372

Once the strategic vision has been established, which of the following would be the BEST activity for supporting the implementation of performance measures?

Monitor service level performance.

Document strengths, weaknesses, opportunities, and threats.

Document policy requirements

Identify key performance indicators (KPIs).

Show Answer Comment (0)

Question 373

Which of the following BEST supports the implementation of an effective data classification policy?

Monitoring with key performance indicators (KPIs)

Implementation of data loss prevention (DLP) tools

Clear guidelines adopted by the business

Classification policy approval by the board

Show Answer Comment (0)

Question 374

An enterprise has lost an unencrypted backup tape of archived customer dat

a. A data breach report is not mandatory in the relevant jurisdiction. From an ethical standpoint, what should the enterprise do NEXT?

Initiate disciplinary proceedings against relevant employees.

Mandate a review of backup tape inventory procedures.

Communicate the breach to customers.

Require an evaluation of storage facility vendors.

Show Answer Comment (0)

Question 375

When developing an IT training plan, which of the following is the BEST way to ensure that resource skills requirements are identified?

Extract training requirements from deficiencies reported in customer service satisfaction surveys.

Ask managers to determine IT training requirements annually.

Determine training needs based on the capabilities to support the IT strategy.

Survey employees for IT skills requirements based upon technology trends.

Show Answer Comment (0)

Question 376

In which of the following situations is it MOST appropriate to use a quantitative risk assessment?

There is a lack of accurate and reliable past and present risk data.

The risk assessment needs to be completed in a short period of time.

The objectivity of the risk assessment is of primary importance.

The risk assessment is needed for an IT project business case.

Show Answer Comment (0)

Question 377

An IT department has forwarded a request to the IT strategy committee for funding of a discretionary Investment. The committee's MOST important consideration should be to evaluate:

the technical feasibility of the investment.

the business and technical scope of the investment *

whether the investment supports corporate goals

whether the investment aligns with the enterprise architecture (EA).

Show Answer Comment (0)

Question 378

Which of the following should be identified FIRST when determining appropriate IT key risk indicators (KRIs)?

IT-related risk

IT controls

IT threats

IT objectives

Show Answer Comment (0)

An IT risk committee is trying to mitigate the risk associated with a newly implemented bring your own device (BYOD) policy and supporting mobile device management (MDM) tools. Which of the following would be the BEST way to ensure employees understand how to protect sensitive corporate data on their mobile devices?

Require staff to complete security awareness training

Develop security procedures for mobile devices.

Distribute the BYOD policy on the company Intranet.

Require staff to review and sign nondisclosure agreements (NDAs)

Show Answer Comment (0)