CGEIT practice questions 301–310

1. Question 301 · 363 in bank

   Which of the following roles is accountable for the confidentiality, integrity, and availability of information within an enterprise?

   • AData custodian
   • BRisk manager
   • CData owner
   • DLead legal counsel

   Show answer

   Answer: C

   Explanation

   The role that is accountable for the confidentiality, integrity, and availability of information within an enterprise is: C. Data owner. The data owner is responsible for the accountability and protection of information within an enterprise. This role typically holds the ultimate responsibility for the confidentiality, integrity, and availability of the data they own. The data owner determines the access rights, establishes security controls, and ensures that appropriate measures are in place to safeguard the information under their purview. They work closely with other stakeholders, such as data custodians (option A)

   Source: Adapted from community discussion — yihwen

   Next question

2. Question 302 · 363 in bank

   Which of the following IT governance practices would BEST support IT and enterprise strategic alignment?

   • AAn IT communication plan is continuously updated.
   • BIT service level agreements (SLAs) are periodically updated.
   • CSenior management regularly reviews the IT portfolio.
   • DExternal consultants regularly review the IT portfolio.

   Show answer

   Answer: C

   Next question

3. Question 303 · 363 in bank

   Which of the following is the MOST important consideration when developing a new IT service?

   • AReturn on investment (ROI)
   • BEconomies of scale
   • CService level agreements (SLAs)
   • DResource requirements

   Show answer

   Answer: C

   Explanation

   C. Service level agreements (SLAs). Service level agreements (SLAs) define the expectations and commitments between the IT service provider and the service recipient. They outline the agreed-upon levels of service quality, availability, performance, and other relevant metrics. SLAs help set clear expectations, establish accountability, and ensure that the new IT service meets the needs and requirements of the organization. A. Return on investment (ROI): ROI is an essential consideration in any IT investment decision, including the development of new services. However, ROI is typically assessed based on financial and business outcomes and may not capture the complete picture of service quality and customer satisfaction.

   Source: Adapted from community discussion — yihwen

   Next question

4. Question 304 · 363 in bank

   Which of the following is the GREATEST benefit of using a quantitative risk assessment method?

   • AIt helps in prioritizing risk response action plans.
   • BIt reduces subjectivity.
   • CIt uses resources more efficiently.
   • DIt can be used to assess risks against non-tangible assets.

   Show answer

   Answer: B

   Explanation

   Quantitative risk assessment methods involve assigning numerical values to various aspects of risks, such as likelihood and impact. This process helps to reduce subjectivity by providing a more objective and measurable basis for evaluating risks. This can lead to more informed decision-making and better prioritization of risk response actions.

   Source: Adapted from community discussion — Sathish5

   Next question

5. Question 305 · 363 in bank

   An enterprise has performed a business impact analysis (BIA) considering a number of risk scenarios. Which of the following should the enterprise do NEXT?

   • AAssess risk mitigation strategies
   • BVerify compliance with relevant legislation
   • CPerform a risk controls gap analysis
   • DUpdate the disaster recovery plan (DRP)

   Show answer

   Answer: A

   Next question

6. Question 306 · 363 in bank

   Enterprise leadership is concerned with the potential for discrimination against certain demographic groups resulting from the use of machine learning models. What should be done FIRST to address this concern?

   • ARevise the code of conduct to discourage bias within automated processes.
   • BObtain stakeholders' input regarding the ethics associated with machine learning.
   • CDevelop a machine learning policy articulating guidelines for machine learning use.
   • DAssess recent case law related to the enterprise's machine learning business strategy.

   Show answer

   Answer: B

   Next question

7. Question 307 · 363 in bank

   An IT department outsourced application support and negotiated service level agreements (SLAs) directly with the vendor. Although the vendor met the SLAs, business owner expectations are not met and senior management cancels the contract. This situation can be avoided in the future by:

   • Aimproving the negotiation process for service level agreements (SLAs).
   • Bimplementing a vendor performance scorecard.
   • Cassigning responsibility for vendor management.
   • Dimproving the business requirements gathering process.

   Show answer

   Answer: D

   Explanation

   D. improving the business requirements gathering process. Improving the business requirements gathering process ensures that the expectations of the business owners and senior management are accurately captured and communicated to the vendor. This process involves thorough communication between the IT department, business owners, and senior management to identify and document specific requirements, priorities, and desired outcomes from the outsourced application support.

   Source: Adapted from community discussion — SuperMax

   Next question

8. Question 308 · 363 in bank

   An IT value delivery framework PRIMARILY helps an enterprise:

   • Aassist top management in approving IT projects.
   • Bimprove value of successful IT projects.
   • Cincrease transparency of value to the enterprise.
   • Doptimize value to the enterprise.

   Show answer

   Answer: D

   Next question

9. Question 309 · 363 in bank

   An enterprise has decided to implement an enterprise resource planning (ERP) system to achieve operating and cost efficiencies through global IT standardization. The business units are resistant because they are used to operating autonomously. The CEO has instructed the CIO to move quickly with the implementation to force acceptance with business unit leaders. Which of the following should be the CIO's FIRST step?

   • ARequest funding from the CEO to hire ERP consultants.
   • BAsk the CEO to be the sponsor of the program.
   • CEngage a reluctant business unit to conduct a proof-of-concept pilot.
   • DBuild a governance framework for identifying non-standard processes.

   Show answer

   Answer: C

   Explanation

   business unit to experience firsthand the benefits of the ERP system and understand how it can improve their operations. It provides an opportunity for the business unit to address concerns and build confidence in the proposed solution. Engaging the business units early in the process through a pilot can help in gaining their acceptance and support for the broader implementation.

   Source: Adapted from community discussion — Sathish5

   Next question

10. Question 310 · 363 in bank

    Which of the following is MOST important to document for a business ethics program?

    • AViolation response matrix
    • BWhistle-blower protection protocols
    • CGuiding principles and best practices
    • DEmployee awareness and training content

    Show answer

    Answer: C

    Explanation

    C. Guiding principles and best practices. Documenting guiding principles and best practices forms the foundation of a business ethics program. These principles outline the organization's values, standards, and expectations regarding ethical behavior. They provide a framework for decision-making and behavior across the organization. While the other options are also crucial components of a robust business ethics program, without clear guiding principles and best practices, it becomes challenging to establish a cohesive and effective ethical framework within the organization. However, all aspects mentioned (violation response matrix, whistle-blower protection protocols, and employee awareness and training content) are important and should be documented as part of a comprehensive ethics program.

    Source: Adapted from community discussion — SuperMax

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CGEIT practice, question 301. 363 questions available.