Question 1

The CIO of a financial services company is tasked with ensuring IT processes are in compliance with recently instituted regulatory changes. The FIRST course of action should be to:

Options :

A : align IT project portfolio with regulatory requirements.

B : create an IT balanced scorecard.

C : identify the penalties for noncompliance.

D : perform a current state assessment.

Answer: D

Question 2

An IT steering committee has received a report that supports the economic and service benefits of moving infrastructure hosting to an external cloud provider. Business leadership is very concerned about the security risk and potential loss of customer data. What is the BEST way for the committee to address these concerns?

Options :

A : Mandate there will be no customer data at rest stored on cloud servers used by the vendor.

B : Include compliance with the enterprise-s data governance policy in the contract.

C : Ensure reporting and penalty clauses are included in the contract for any loss of data.

D : Require an encrypted connection between the cloud and enterprise servers.

Answer: B

Question 3

Despite an adequate training budget. IT staff are not keeping skills current with emerging technologies critical to the business. Which of the following is the BEST way for the enterprise to address this situation?

Options :

A : Provide incentives for IT staff to attend outside conferences and training

B : Create a standard-setting center of excellence for IT.

C : Require human resources (HR) to recruit new talent using an established IT skills matrix.

D : Establish an agreed-upon skills development plan with each employee

Answer: D

Question 4

After experiencing poor recovery times following a catastrophic event, an enterprise is seeking to improve its disaster recovery capabilities. Which of the following would BEST enable the enterprise to accomplish this objective?

Options :

A : Continuous testing of disaster recovery capabilities with implementation of lessons learned

B : Increased training and monitoring for disaster recovery personnel who perform below expectations

C : Annual review and updates to the disaster recovery plan (DRP)

D : Increased outsourcing of disaster recovery capabilities to ensure reliability

Answer: A

Question 5

Which of the following is the GREATEST benefit of using a quantitative risk assessment method?

Options :

A : It uses resources more efficiently

B : It can be used to assess risks against non-tangible assets

C : It reduces subjectivity

D : It helps in prioritizing risk response action plans

Answer: C

Confidently Practice Online with Free CGEIT Exam Cram

Buying Options: