Question 1

Which of the following is the PRIMARY purpose of an effective set of key risk indicators (KRIs)?

Options :

A : Identifying possible future adverse impacts on the enterprise

B : Evaluating existing technology for risk monitoring capabilities

C : Establishing executive level buy-in of the risk program

D : Quantifying the productivity of the risk management team

Answer: A

Question 2

The CIO of a financial and insurance company is considering the projects and portfolio for the coming year Which of the following projects is a non-discretionary project?

Options :

A : Data center relocation

B : Compliance with statutory regulations

C : Actuarial application system analysis and design

D : Core banking applications scalability assessment

Answer: B

Question 3

A large enterprise is implementing an information security policy exception process. The BEST way to ensure that security risk is properly addressed is to:

Options :

A : confirm process owners' acceptance of residual risk.

B : perform an internal and external network penetration test.

C : obtain IT security approval on security policy exceptions.

D : benchmark policy against industry best practice.

Answer: A

Question 4

IT governance within an enterprise is attempting to drive a cultural shift to enhance compliance with IT security policies. The BEST way to support this objective is to ensure that enterprise IT policies are:

Options :

A : communicated on a regular basis.

B : acknowledged and signed by each employee.

C : centrally posted and contain detailed instructions.

D : integrated into individual performance objectives.

Answer: D

Question 5

Which of the following is the MOST effective way of assessing enterprise risk?

Options :

A : Business impact analysis (BIA)

B : Business vulnerability assessment

C : Likelihood of threat analysis

D : Operational risk assessment

Answer: D

Confidently Practice Online with Free CGEIT Exam Cram

Buying Options: