CGEIT practice questions 321–330

1. Question 321 · 363 in bank

   Which of the following is the GREATEST benefit of using the life cycle approach to govern information assets?

   • ACompliance with regulatory requirements is ensured.
   • BInformation availability is improved.
   • COverall costs are optimized.
   • DOperational costs are maintained.

   Show answer

   Answer: C

   Explanation

   The greatest benefit of using the life cycle approach to govern information assets is C. Overall costs are optimized. The life cycle approach to information governance is a systematic way of managing information throughout its lifecycle. This includes identifying, classifying, storing, protecting, and disposing of information. The life cycle approach helps to ensure that information is managed in a way that minimizes costs and maximizes benefits.

   Source: Adapted from community discussion — yihwen

   Next question

2. Question 322 · 363 in bank

   To minimize the potential mishandling of customer personal information in a system located in a country with strict privacy regulations, which of the following is the BEST action to take?

   • AEstablish new IT key risk indicators (KRIs).
   • BRevise the IT strategic plan.
   • CImplement data loss prevention (DLP).
   • DUpdate the information architecture.

   Show answer

   Answer: C

   Next question

3. Question 323 · 363 in bank

   An IT audit report indicates that a lack of IT employee risk awareness is creating serious security issues in application design and configuration. Which of the following would be the BEST key risk indicator (KRI) to show progress in IT employee behavior?

   • AResults of application security testing
   • BResults of application security awareness training quizzes
   • CNumber of reported security incidents
   • DNumber of IT employees attending security training sessions

   Show answer

   Answer: A

   Next question

4. Question 324 · 363 in bank

   Which of the following BEST defines the IT investment activities an enterprise will undertake when aligning to business goals?

   • APortfolio management
   • BProcurement management
   • CProject management
   • DRisk management

   Show answer

   Answer: A

   Explanation

   A -- APO05 (COBIT 2019) Managed Portfolio Execute the strategic direction set for investments in line with the enterprise architecture vision and I&T road map

   Source: Adapted from community discussion — sussp

   Next question

5. Question 325 · 363 in bank

   Which of the following is the MOST important objective of IT program portfolio management?

   • AReduced technology costs
   • BReduced project management costs
   • CImproved IT service delivery
   • DAppropriate investment mix

   Show answer

   Answer: D

   Explanation

   Reference: https://www.northeastern.edu/graduate/blog/project-management-vs-portfolio-management-vs-program-management/

   Next question

6. Question 326 · 363 in bank

   Despite an adequate training budget, IT staff are not keeping skills current with emerging technologies critical to the enterprise. The BEST way for the enterprise to address this situation would be to:

   • Aestablish an agreed-upon skills development plan with each employee.
   • Ballow staff to attend technology conferences.
   • Ccreate a standard-setting center of excellence.
   • Dassign human resources (HR) to develop an IT skills matrix.

   Show answer

   Answer: D

   Explanation

   The BEST way for the enterprise to address the situation of IT staff not keeping their skills current with emerging technologies critical to the enterprise would be A. establish an agreed-upon skills development plan with each employee. Here's why: Establish an agreed-upon skills development plan with each employee: By working with each IT staff member to create an individualized skills development plan, the enterprise can ensure that employees receive the necessary training and resources to keep their skills current. This approach acknowledges the unique needs and aspirations of each employee, allowing them to take ownership of their professional development. It also facilitates a targeted approach to address specific skills gaps and align training initiatives with the enterprise's strategic objectives.

   Source: Adapted from community discussion — Frank1480

   Next question

7. Question 327 · 363 in bank

   The PRIMARY reason a CIO and IT senior management should stay aware of the business environment is to:

   • Ameasure efficiency of IT resources.
   • Brevisit prioritization of IT projects.
   • Cre-assess the IT investment portfolio.
   • Dadjust IT strategy as needed.

   Show answer

   Answer: A

   Explanation

   The PRIMARY reason a CIO and IT senior management should stay aware of the business environment is D. adjust IT strategy as needed. Here's why: Adjust IT strategy as needed: The business environment is constantly evolving, and staying aware of these changes allows the CIO and IT senior management to adjust their IT strategy accordingly. By understanding the shifting business landscape, including market trends, customer demands, competitive forces, and regulatory changes, IT leaders can identify new opportunities and challenges that impact the organization's technology needs. They can then make informed decisions about adjusting the IT strategy to align with the evolving business goals and ensure that IT initiatives support the overall business objectives.

   Source: Adapted from community discussion — Frank1480

   Next question

8. Question 328 · 363 in bank

   To enable consistent assessment of candidate program investments for inclusion into the IT portfolio, it is MOST important to identify:

   • Aan IT balanced scorecard.
   • Bthe impact on enterprise architecture.
   • Ccommon selection criteria.
   • Dcurrently available resources.

   Show answer

   Answer: A

   Explanation

   Reference: http://businessit.biz/bit_share/VAL%20IT/VAL%20IT.pdf

   Source: Adapted from community discussion — Frank1480

   Next question

9. Question 329 · 363 in bank

   What information is MOST important to include when reporting key risk indicators to the board of directors?

   • AThe effect of emerging risk trends on current risk exposure
   • BRisk appetite, risk threshold and risk tolerance
   • CClassification of current business risk
   • DCosts and resource needs related to risk mitigation measures

   Show answer

   Answer: B

   Next question

10. Question 330 · 363 in bank

    An enterprise has a large backlog of IT projects. The current strategy is to execute projects as they are submitted, but executive management does not believe this method is optimal. Which of the following is the MOST important action to address this concern?

    • AEstablish a performance dashboard that determines business value.
    • BCreate a combined business/IT committee to determine project prioritization.
    • CImplement a methodology to prioritize projects based on resource availability.
    • DImplement stage-gating to determine the value of each project.

    Show answer

    Answer: D

    Explanation

    The most important action to address the concern of a large backlog of IT projects and the suboptimal execution strategy would be: B. Create a combined business/IT committee to determine project prioritization. By establishing a combined business/IT committee, the organization can bring together key stakeholders from both the business and IT departments. This committee can assess and prioritize projects based on various factors such as strategic alignment, business value, resource availability, and project feasibility. This collaborative approach ensures that project prioritization decisions are made with a holistic understanding of both business objectives and IT capabilities. It also helps in fostering communication, coordination, and consensus among different stakeholders, leading to better decision-making and more efficient allocation of resources.

    Source: Adapted from community discussion — Frank1480

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CGEIT practice, question 321. 363 questions available.