[Aug-2021] Dumps Brief Outline Of The CGEIT Exam - Exam4PDF
CGEIT Training & Certification Get Latest Isaca Certificaton
NEW QUESTION 145
Following the rollout of an enterprise IT software solution that hosts sensitive data it was discovered that the application's role-based access control was not functioning as specified Which of the following is the BEST way to prevent reoccurrence in the future?
- A. Ensure supplier contracts include a provision for the right to audit on an annual basis
- B. Ensure procurement processes require the identification of alternate vendors to ensure business continuity.
- C. Ensure supplier contracts include penalties if solutions do not meet functional requirements
- D. Ensure the evaluation process requires independent assessment of solutions prior to implementation
Answer: D
NEW QUESTION 146
DRAG DROP
The Information Technology Infrastructure Library (ITIL) is a set of concepts and policies for managing information technology (IT) infrastructure, development, and operations. Drag and drop the ITIL processes that focus on service operation, i.e. operational processes in Service Support, in the correct places.
Select and Place:
Answer:
Explanation:
NEW QUESTION 147
Which of the following processes contained in the Value Governance domain of Val IT defines information requirements?
- A. VG3
- B. VG6
- C. VG4
- D. VG5
Answer: D
NEW QUESTION 148
In an enterprise that has worldwide business units and a centralized financial control model, which of the following is a barrier to strategic alignment of business and IT?
- A. The enterprise's CIO is a member of the executive committee.
- B. Uniform portfolio management is in place throughout the business units.
- C. Each business unit has its own steering committee for IT investment and prioritization.
- D. IT is the exclusive provider of IT services to the business units.
Answer: C
NEW QUESTION 149
Which of the following processes contained in the Portfolio Management domain of Val IT creates an overall portfolio view?
- A. PM7
- B. PM9
- C. PM8
- D. PM10
Answer: B
Explanation:
Section: Volume C
NEW QUESTION 150
An enterprise is concerned with the potential for data leakage as a result of increased use of social media in the workplace, and wishes to establish a social media strategy. Which of the following should be the MOST important consideration in developing this strategy?
- A. The balance between business benefits and risk
- B. Data ownership
- C. Ensuring that the enterprise architecture (EA) is updated
- D. Criticality of the information
Answer: D
NEW QUESTION 151
Which of the following phases of IT lifecycle occurs during the concept and idea stages of basic research?
- A. IT project phase
- B. IT discovery phase
- C. IT asset phase
- D. IT process phase
Answer: B
NEW QUESTION 152
Which of the following is MOST critical to support IT governance cultural changes within an organization?
- A. Established IT monitoring and measuring
- B. Regularly scheduled governance training
- C. Demonstrated management commitment
- D. IT governance process manuals
Answer: A
NEW QUESTION 153
What project management plan is most likely to direct the quantitative risk analysis process for a project in a matrix environment?
- A. Risk analysis plan
- B. Risk management plan
- C. Staffing management plan
- D. Human resource management plan
Answer: B
NEW QUESTION 154
Which of the following strategic issues in the IFAC report highlight the underlying success and failure of enterprises? Each correct answer represents a complete solution.
Choose all that apply.
- A. Clarity of strategy
- B. Strategy execution
- C. Ability to undertake successful mergers and acquisitions
- D. Ability to provide service feedback to providers
Answer: A,B,C
NEW QUESTION 155
Which of the following types of IT organizational structures states that all IT decision making and the IT budget are in one place, much easier to manage, and require much less effort to organize?
- A. Project-based
- B. Centralized
- C. Federated
- D. Decentralized
Answer: B
NEW QUESTION 156
There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to the perform quantitative risk analysis process?
- A. Risk management plan
- B. Risk register
- C. Enterprise environmental factors
- D. Cost management plan
Answer: C
Explanation:
Section: Volume B
NEW QUESTION 157
Which of the following is the MOST effective approach to ensure senior management sponsorship of IT risk management?
- A. Periodically review the IT risk register entries.
- B. Integrate IT risk into enterprise risk management (ERM).
- C. Calculate financial impact for each IT risk finding.
- D. Benchmark risk framework against best practices.
Answer: A
NEW QUESTION 158
Which of the following concepts aims to limit errors to 1 per million units produced?
- A. TSM
- B. TQM
- C. Six Sigma
- D. BSC
Answer: B
Explanation:
Section: Volume C
NEW QUESTION 159
To successfully implement enterprise IT governance, which of the following should be the MAIN focus of IT policies?
- A. Enhancing organizational capability
- B. Limiting IT costs
- C. Providing business value
- D. Optimizing operational benefits
Answer: D
NEW QUESTION 160
Beth is a project team member on the JHG Project. Beth has added extra features to the project and this has introduced new risks to the project work. The project manager of the JHG project elects to remove the features Beth has added. The process of removing the extra features to remove the risks is called what?
- A. Preventive action
- B. Scope creep
- C. Corrective action
- D. Defect repair
Answer: A
NEW QUESTION 161
Which of the following individuals provides the funding, and want to see the return on their investment and strategic alignment with their strategic objectives?
- A. Internal auditors
- B. Product suppliers
- C. Compliance officers
- D. Business partners
Answer: D
NEW QUESTION 162
Shawn is the project manager of the WHT Project for his company. In this project Shawn's team reports that they have found a way to complete the project work for less cost than what was originally planned.
The project team presents a new software that will help to automate the project work. While the software and the associated training costs $25,000 it will save the project nearly $65,000 in total costs. Shawn agrees to the software and changes to the project management plan accordingly. What type of risk response has been used in this instance?
- A. Exploiting
- B. Avoidance
- C. Accepting
- D. Enhancing
Answer: A
NEW QUESTION 163
Which of the following functions are performed by the Future Orientation measure of the IT BSC management tool? Each correct answer represents a complete solution.
Choose all that apply.
- A. It focuses on professional learning and development.
- B. It manages operational service performance.
- C. It attracts and retains people with key competencies.
- D. It measures and rewards individual and team performance.
Answer: A,C,D
NEW QUESTION 164
An enterprise made a significant change to its business operating model that resulted in a new strategic direction. Which of the following should be reviewed FIRST to ensure IT congruence with the new business strategy?
- A. Enterprise project management framework
- B. IT investment portfolio
- C. Information systems architecture
- D. IT risk appetite
Answer: A
NEW QUESTION 165
Which of the following terms includes performance objectives and criteria (POCs), performance indicators, and any other means that evaluate the success in achieving a specified goal?
- A. Precision
- B. Performance Measure
- C. Performance Measurement System
- D. Performance Measurement Category
Answer: B
NEW QUESTION 166
An IT steering committee wants the enterprise's mobile workforce to use cloud-based file storage to save non- sensitive corporate data, removing the need for remote access to that information. Before this change is implemented, what should be included in the data management policy?
- A. A mandate for the encryption of all corporate data files at rest that contain sensitive data
- B. A requirement to scan approved cloud-based apps for inappropriate content
- C. A mandate for periodic employee training on how to classify corporate data files
- D. A process for blocking access to cloud-based apps if inappropriate content is discovered
Answer: A
NEW QUESTION 167
......
Certification Training for CGEIT Exam Dumps Test Engine: https://www.exam4pdf.com/CGEIT-dumps-torrent.html
Isaca Certificaton CGEIT Real Exam Questions and Answers FREE Updated: https://drive.google.com/open?id=1TY2w-9QEqJbKlvTLUQFDEK0iwpeN-F42
