CGEIT practice questions 21–30

1. Question 21 · 363 in bank

   Maintaining a list of all potential IT initiatives for implementing the business strategy should be the responsibility of the:

   • Aportfolio management function.
   • Bindividual business units.
   • Cchief executive officer (CEO).
   • Dchief operating officer (COO).

   Show answer

   Answer: A

   Explanation

   It should be A - Maintaining a list of all potential IT initiatives for implementing the business strategy should be the responsibility of the portfolio management function. The portfolio management function is responsible for managing the organization's portfolio of IT investments and ensuring that the portfolio aligns with the organization's business strategy. Maintaining a list of all potential IT initiatives for implementing the business strategy is a critical component of portfolio management, as it helps to ensure that all potential initiatives are identified, evaluated, and prioritized based on their alignment with the organization's strategy.

   Source: Adapted from community discussion — Frank1480

   Next question

2. Question 22 · 363 in bank

   A large enterprise has decided to use an emerging technology that needs to be integrated with the current IT infrastructure. Which of the following is the BEST way to prevent adverse effects to the enterprise resulting from the new technology?

   • ADevelop key risk indicators (KRIs).
   • BDevelop key performance indicators (KPIs).
   • CImplement service level agreements (SLAs).
   • DUpdate the risk appetite statement.

   Show answer

   Answer: A

   Next question

3. Question 23 · 363 in bank

   An enterprise recognizes that a large percentage of its IT employees are eligible for retirement in the next five years. A significant amount of institutional knowledge resides with retirement-eligible staff. From the board's perspective, which of the following is the GREATEST concern for the enterprise in this situation?

   • AService delivery to the business
   • BLoss of key IT personnel
   • CLack of timeline for succession plan
   • DLack of process documentation

   Show answer

   Answer: D

   Explanation

   The option D, "Lack of process documentation," is seen as the greatest concern because when key personnel retire, their institutional knowledge and experience retire with them. If this knowledge is not well-documented, the organization could face difficulties in maintaining the quality and continuity of IT services, which could in turn impact service delivery to the business. Therefore, the lack of process documentation could have a domino effect leading to broader issues including service delivery disruptions. On the other hand, option A, "Service delivery to the business," is more of a direct concern that could arise from several underlying issues, one of which could be the loss of key IT personnel due to retirement. However, with proper documentation and a solid succession plan, service delivery issues could be mitigated even with the retirement of key personnel.

   Source: Adapted from community discussion — Broesweelies

   Next question

4. Question 24 · 363 in bank

   Which of the following groups would be MOST appropriate to decide whether to proceed with an IT-enabled investment at the individual program level?

   • ABusiness sponsors
   • BProgram management office
   • CIT steering committee
   • DBoard of directors

   Show answer

   Answer: C

   Next question

5. Question 25 · 363 in bank

   A large enterprise's IT department has identified a new risk management solution that would significantly enhance IT risk monitoring processes. However, there is a business perception that the new solution would not provide a visible benefit to the enterprise. Which of the following is the BEST way to gain business support?

   • AArticulate the business value of the new solution.
   • BPromote the IT benefits and the streamlining of processes.
   • CProvide real time risk reporting to the business.
   • DObtain sign-off on a reduced headcount over the next five years.

   Show answer

   Answer: A

   Explanation

   It should be A - To gain business support, it is essential to articulate the business value of the new solution, highlighting how it will improve the enterprise's overall risk management capabilities, reduce risk exposure, and enhance business continuity. This may involve demonstrating how the new solution can address specific business risks or compliance requirements, increase operational efficiency, or support strategic objectives.

   Source: Adapted from community discussion — Frank1480

   Next question

6. Question 26 · 363 in bank

   When assessing the impact of a new regulatory requirement, which of the following should be the FIRST course of action?

   • AUpdate affected IT policies.
   • BImplement new regulatory requirements.
   • CAssess the budget impact of the new regulation.
   • DMap the regulation to business processes.

   Show answer

   Answer: D

   Explanation

   Mapping the new regulation to business processes should be the first course of action because it allows the organization to understand how the regulation affects its operations and what areas of the business are impacted. This step is crucial for determining what changes need to be made to comply with the regulation.

   Source: Adapted from community discussion — Broesweelies

   Next question

7. Question 27 · 363 in bank

   Before establishing IT key risk indicators, which of the following should be defined FIRST?

   • AIT risk and security framework
   • BIT key performance indicators
   • CIT goals and objectives
   • DIT resource strategy

   Show answer

   Answer: A

   Explanation

   Reference: https://bernardmarr.com/default.asp?contentID=1515

   Next question

8. Question 28 · 363 in bank

   Which of the following should be the FIRST step for executive management to take in communicating what is considered acceptable use with regard to personally owned devices for company business?

   • APost awareness messages throughout the facility.
   • BDevelop and disseminate an applicable policy.
   • CProvide training on how to protect data on personal devices.
   • DRequire employees to read and sign a disclaimer.

   Show answer

   Answer: B

   Explanation

   B. Develop and disseminate an applicable policy. Developing and disseminating a clear policy establishes guidelines and expectations for employees regarding the protection of data on personal devices. It provides a foundation for understanding the organization's stance on this matter and sets the stage for further actions, such as training and awareness initiatives. While other options, such as training and disclaimers, are also important, having a well-communicated policy is a fundamental step in establishing a framework for data protection.

   Source: Adapted from community discussion — SuperMax

   Next question

9. Question 29 · 363 in bank

   An enterprise's strategic change requires an IT strategic initiative re-evaluation. Which of the following BEST indicates that an established IT governance framework could handle the re-evaluation?

   • ACreation of an IT steering committee to align the IT strategic initiatives to the recent change
   • BInclusion of IT portfolio management procedures with strategic change review activities
   • CDevelopment of a business case to evaluate the impact of the strategic change
   • DHolding IT investments until an analysis of the strategic change impact was complete

   Show answer

   Answer: B

   Explanation

   Incorporating IT portfolio management procedures with strategic change review activities suggests a structured and integrated approach to reassessing IT strategic initiatives in light of organizational changes.

   Source: Adapted from community discussion — Broesweelies

   Next question

10. Question 30 · 363 in bank

    Which of the following BEST indicates that a change management process has been implemented successfully?

    • ADegree of control
    • BOutcome measures
    • CProcess performance
    • DMaturity levels

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CGEIT practice, question 21. 363 questions available.