CGEIT practice questions 181–190

1. Question 181 · 363 in bank

   An executive sponsor of a partially completed IT project has learned that the financial assumptions supporting the project have changed. Which of the following governance actions should be taken FIRST?

   • ASchedule an interim project review.
   • BRequest a risk assessment.
   • CRe-evaluate the project in the portfolio.
   • DRequest an update to the business case.

   Show answer

   Answer: D

   Explanation

   The answer is D. Request an update to the business case. The business case is the document that justifies the need for a project and outlines the expected benefits. When the financial assumptions supporting a project change, it is important to update the business case to reflect the new information. This will help to ensure that the project is still aligned with the organization's strategic goals and that it is still worth pursuing.

   Source: Adapted from community discussion — yihwen

   Next question

2. Question 182 · 363 in bank

   A business is considering a policy to anonymize personal data in enterprise systems. Before making a decision, which of the following is MOST important for the IT steering committee to consider?

   • ARegulatory requirements
   • BSustainability costs to the enterprise
   • CPotential implementation barriers
   • DBusiness impact analysis (BIA) results

   Show answer

   Answer: A

   Next question

3. Question 183 · 363 in bank

   An IT manager is trying to determine optimal IT service levels. Which of the following should be the PRIMARY consideration?

   • ACost-benefit analysis
   • BRecovery time objective (RTO)
   • CInternal rate of return
   • DResource utilization analysis

   Show answer

   Answer: A

   Next question

4. Question 184 · 363 in bank

   A newly hired CIO has been given projects of strategic importance along with operational responsibility for infrastructure. What are the two MOST important areas to be communicated to senior management?

   • AValue delivery and risks
   • BProject and change management
   • CROI and security accreditation
   • DOn-time and on-budget

   Show answer

   Answer: A

   Explanation

   The answer is A. Value delivery and risks. A newly hired CIO has been given projects of strategic importance along with operational responsibility for infrastructure. The two most important areas to be communicated to senior management are value delivery and risks. Value delivery refers to the extent to which the IT projects are meeting the organization's strategic goals. Risks refer to the potential negative consequences of the IT projects.

   Source: Adapted from community discussion — yihwen

   Next question

5. Question 185 · 363 in bank

   An enterprise incurred penalties for noncompliance with privacy regulations. Which of the following is MOST important to ensure appropriate ownership of access controls to address this deficiency?

   • AEngaging an audit of logical access controls and related security policies
   • BAuthenticating access to information assets based on roles or business rules
   • CImplementing multi-factor authentication controls
   • DGranting access to information based on information architecture

   Show answer

   Answer: A

   Explanation

   The answer is A. Engaging an audit of logical access controls and related security policies. When an enterprise incurs penalties for noncompliance with privacy regulations, it is important to ensure that appropriate ownership of access controls is in place to address this deficiency. This can be done by engaging an audit of logical access controls and related security policies. An audit will help to identify any gaps or weaknesses in the organization's access control framework. It will also help to ensure that the organization's security policies are being implemented and enforced correctly.

   Source: Adapted from community discussion — yihwen

   Next question

6. Question 186 · 363 in bank

   Following a re-prioritization of business objectives by management, which of the following should be performed FIRST to allocate resources to IT processes?

   • APerform a maturity assessment.
   • BImplement a RACI model.
   • CRefine the human resource management plan.
   • DUpdate the IT strategy.

   Show answer

   Answer: D

   Explanation

   The answer is D. Update the IT strategy. When business objectives are re-prioritized, the IT strategy needs to be updated to reflect the new priorities. This includes identifying the IT capabilities that are needed to support the new priorities and allocating resources to those capabilities.

   Source: Adapted from community discussion — yihwen

   Next question

7. Question 187 · 363 in bank

   When developing an IT strategic plan that supports an enterprise's business goals, which of the following should be done FIRST?

   • AUnderstand the current vision.
   • BPerform a business impact analysis.
   • CEnsure that IT drives business goals.
   • DAnalyze benchmarking data.

   Show answer

   Answer: B

   Explanation

   Reference: https://www.infoentrepreneurs.org/en/guides/strategic-planning/

   Source: Adapted from community discussion — John_Connor

   Next question

8. Question 188 · 363 in bank

   An enterprise made a significant change to its business operating model that resulted in a new strategic direction. Which of the following should be reviewed FIRST to ensure IT congruence with the new business strategy?

   • AIT investment portfolio
   • BInformation systems architecture
   • CEnterprise project management framework
   • DIT risk appetite

   Show answer

   Answer: A

   Explanation

   B. Information systems architecture should be reviewed FIRST to ensure IT congruence with the new business strategy. The information systems architecture is the blueprint of the organization's IT infrastructure, applications, and data. It defines how the different IT components are integrated and how they support the business processes and operations. Reviewing the information systems architecture will help ensure that the IT capabilities are aligned with the new business strategy and operating model. This will include reviewing the current state of the IT infrastructure, identifying gaps, and defining the target state of the IT architecture. The other options (A, C, and D) are also important, but they should be reviewed after the information systems architecture to ensure that the IT investments, project management framework, and risk management align with the updated IT architecture and the new business strategy.

   Source: Adapted from community discussion — Frank1480

   Next question

9. Question 189 · 363 in bank

   The PRIMARY objective of promoting business ethics within the IT enterprise should be to ensure:

   • Alegal and regulatory compliance.
   • Bcorporate social responsibility.
   • Cemployees act more responsibly.
   • Dtrust among internal and external stakeholders.

   Show answer

   Answer: D

   Explanation

   The PRIMARY objective of promoting business ethics within the IT enterprise should be to ensure trust among internal and external stakeholders (option D). While legal and regulatory compliance (option A) is important for any organization, the primary objective of promoting business ethics goes beyond mere compliance. It involves fostering a culture of trust, integrity, and responsible behavior within the IT enterprise.

   Source: Adapted from community discussion — yihwen

   Next question

10. Question 190 · 363 in bank

    IT security is concerned with employees' increasing use of personal equipment for work-related purposes, while employees claim it allows them to be more productive. A decision on whether to modify the enterprise information security policy should be based on:

    • Aaudit findings.
    • Buser access approval procedures.
    • Ca risk and benefit evaluation.
    • Dthe impact to security.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CGEIT practice, question 181. 363 questions available.