CGEIT practice questions 201–210

1. Question 201 · 363 in bank

   When establishing an enterprise data model, the BEST way to ensure the integrity of data is to:

   • Aimplement the highest level of protection to data across the enterprise.
   • Bclassify information using an agreed-upon schema.
   • Cimplement a data loss prevention (DLP) program.
   • Destablish a privileged access management platform.

   Show answer

   Answer: B

   Explanation

   The correct answer is B. classify information using an agreed-upon schema. When classifying information, an agreed-upon schema should be used to ensure that data is consistently classified across the enterprise. This will help to ensure that the data is protected in accordance with its sensitivity level.

   Source: Adapted from community discussion — yihwen

   Next question

2. Question 202 · 363 in bank

   An IT strategy committee wants to ensure that a risk program is successfully implemented throughout the enterprise. Which of the following would BEST support this goal?

   • ACommitment from senior management
   • BMandatory risk awareness courses for staff
   • CA risk management framework
   • DA risk recognition and reporting policy

   Show answer

   Answer: A

   Next question

3. Question 203 · 363 in bank

   Senior management is reviewing the results of a recent security incident with significant business impact. Which of the following findings should be of GREATEST concern?

   • AResponse efforts had to be outsourced due to insufficient internal resources.
   • BSignificant gaps are present in the incident documentation.
   • CResponse decisions were made without consulting the appropriate authority.
   • DThe incident was not logged in the ticketing system.

   Show answer

   Answer: C

   Explanation

   Option C, response decisions were made without consulting the appropriate authority, should be of GREATEST concern. When a security incident occurs, it is important to have a plan in place for how to respond. This plan should include a list of who should be involved in the response and who should make decisions. If decisions are made without consulting the appropriate authority, it could lead to further damage to the organization.

   Source: Adapted from community discussion — yihwen

   Next question

4. Question 204 · 363 in bank

   An enterprise is developing an ethics program, and the ethical standards have been defined. Which of the following should the enterprise do NEXT?

   • AOutline and document consequences for noncompliance.
   • BEstablish a training and awareness program focused on ethics.
   • CImplement an enterprise-wide employee monitoring program.
   • DDevelop key performance indicators (KPIs) for program implementation.

   Show answer

   Answer: B

   Explanation

   After defining ethical standards for an ethics program, the enterprise should NEXT establish a training and awareness program focused on ethics (Option B). Education and awareness are critical components of an effective ethics program, ensuring that employees understand the ethical standards, values, and expectations set by the organization.

   Source: Adapted from community discussion — Sathish5

   Next question

5. Question 205 · 363 in bank

   Which of the following is MOST important for the effective design of an IT balanced scorecard?

   • AOn-demand reporting and continuous monitoring
   • BConsulting with the CIO
   • CEmphasizing the financial results
   • DIdentifying appropriate key performance indicators (KPIs)

   Show answer

   Answer: D

   Next question

6. Question 206 · 363 in bank

   Establishing a uniform definition for likelihood and impact BEST enables an enterprise to:

   • Areduce risk appetite and tolerance levels.
   • Bdevelop key risk indicators (KRIs).
   • Creduce variance in the assessment of risk.
   • Dprioritize threat assessment.

   Show answer

   Answer: C

   Explanation

   The correct answer should be C. reduce variance in the assessment of risk. Establishing a uniform definition for likelihood and impact ensures that all risk assessments within an enterprise are conducted using the same criteria. This can help to reduce the variance in the assessment of risk, meaning that different people or teams within the organization are more likely to come to similar conclusions about the likelihood and impact of a particular risk. This, in turn, can lead to more consistent and reliable risk assessments, which can help the enterprise to make more informed decisions about risk management and mitigation. Reducing risk appetite and tolerance levels (Option A) is not necessarily a direct outcome of establishing a uniform definition for likelihood and impact. Developing key risk indicators (KRIs) (Option B) is a separate process that may be informed by consistent risk assessments but is not a direct outcome of establishing uniform definitions. Prioritizing threat assessment (Option D) may be an important aspect of risk management, but is not a direct outcome of establishing uniform definitions for likelihood and impact.

   Source: Adapted from community discussion — Frank1480

   Next question

7. Question 207 · 363 in bank

   Which of the following is the PRIMARY purpose of information governance?

   • ATo ensure regulatory compliance is maintained while optimizing the utilization of information
   • BTo set direction for information management capabilities through prioritization and decision making
   • CTo develop control procedures that help ensure information is adequately protected throughout its life cycle
   • DTo monitor the processes that deliver and enhance the value of information assets

   Show answer

   Answer: A

   Next question

8. Question 208 · 363 in bank

   Which of the following would be the PRIMARY impact on IT governance when a business strategy is changed?

   • ARelationship level with IT outsourcers
   • BPerformance outcomes of IT objectives
   • CIT governance structure
   • DMaturity level of IT processes

   Show answer

   Answer: C

   Next question

9. Question 209 · 363 in bank

   In a large enterprise, which of the following is the MOST effective way to understand the business activities associated with the enterprise's information architecture?

   • AAligning business objectives to organizational strategy
   • BReviewing IT design with business process managers
   • CReviewing business strategy with senior management
   • DMapping business processes within a framework

   Show answer

   Answer: D

   Next question

10. Question 210 · 363 in bank

    Which of the following entities is structured PRIMARILY to ensure goals and objectives are aligned between IT and the business?

    • ABoard of directors
    • BPortfolio management committee
    • CChange advisory board
    • DIT strategy committee

    Show answer

    Answer: D

    Explanation

    Reference: https://courses.lumenlearning.com/boundless-management/chapter/principles-of-management/

    Source: Adapted from community discussion — Frank1480

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CGEIT practice, question 201. 363 questions available.