Isaca CISA Certification CGEIT Questions & Answers

• Question 21:

  Which of the following is a PRIMARY responsibility of the CIO when an enterprise plans to replace its enterprise resource applications?

  A. Ensuring IT architecture requirements are considered

  B. Selecting and vetting application vendors

  C. Determining critical success factors for related projects

  D. Establishing software quality criteria

  Correct Answer: A

• Question 22:

  Senior leadership is concerned about a recent trend of excessive exceptions to existing controls. Which of the following should be implemented to address this concern?

  A. Continuous monitoring

  B. Independent audits

  C. A control library

  D. Risk awareness training

  Correct Answer: A

• Question 23:

  An enterprise is undertaking a multi-year portfolio of IT initiatives to replace core accounting systems. The program management team has developed a business case and is defining a roadmap for the initiatives. Of the following, who should be responsible for defining the optimization criteria for the portfolio?

  A. Project management office

  B. Board of directors

  C. Program management team

  D. IT steering committee

  Correct Answer: C

• Question 24:

  A government agency plans to use predictive analytics to improve the quality of its services. The IT director is confident they have selected the right tool and can acquire appropriate resources to support the business need. Which of the following should be the director's NEXT course of action?

  A. Ensure job descriptions are available for newly-hired IT resources.

  B. Ensure IT has the appropriate processes in place.

  C. Implement a balanced scorecard to measure service quality.

  D. Establish a data governance council that includes IT senior management.

  Correct Answer: C

• Question 25:

  Which of the following would BEST help to ensure timely reporting on risk events and responses to appropriate levels of management?

  A. Corporate directory

  B. Key personnel interviews

  C. Emergency response team

  D. Escalation procedures

  Correct Answer: A

  Reference: https://books.google.com.pk/books?id=k_hgAwAAQBAJandpg=PA43andlpg=PA43anddq=cobit+help+to+ensure+timely+reporting+on+risk+events+and+responses+to+appropriate+levels+of +managementandsource=blandots=f2MF7tvMQBandsig=ACfU3U1F_qwMA3wQlZ2tpcb8bvzR3eUTywandhl=enandsa=Xandved=2ahUKEwj4kajJq_zpAhUrDWMBHQu2BWoQ6AEwB3oECAoQAQ#v=onepageandq=cobit%20help%20to%20ensure% 20timely%20reporting%20on%20risk%20events%20and%20responses%20to%20appropriate%20levels%20of%20managementandf=false

• Question 26:

  A large enterprise has been experiencing high turnover of skilled IT personnel, resulting in a significant loss of knowledge within the IT department. Which of the following should be done FIRST to address this problem?

  A. Conduct a survey of current IT staff.

  B. Revise the IT resource management plan.

  C. Update human resources policies and practices.

  D. Develop an incentive scheme for IT employees.

  Correct Answer: A

• Question 27:

  An enterprise has decided to use third-party software for a business process which is hosted and supported by the same third party. The BEST way to provide quality of service oversight would be to establish a process:

  A. to qualify service providers.

  B. for enterprise architecture updates.

  C. for robust change management.

  D. for periodic service provider audits.

  Correct Answer: A

• Question 28:

  Several experienced IT resources have been hired away by a competitor. These individuals created and managed a business critical system that gave the enterprise a market advantage. Which of the following should be the PRIMARY concern of the system's business owner?

  A. The impact on morale of the remaining IT employees

  B. The competitor hiring additional IT employees from the enterprise

  C. Whether access to the system and data has been adequately revoked

  D. Whether remaining staff are able to maintain the quality of the system

  Correct Answer: D

• Question 29:

  The PRIMARY reason a CIO and IT senior management should stay aware of the business environment is to:

  A. measure efficiency of IT resources.

  B. revisit prioritization of IT projects.

  C. re-assess the IT investment portfolio.

  D. adjust IT strategy as needed.

  Correct Answer: A

• Question 30:

  What information is MOST important to include when reporting key risk indicators to the board of directors?

  A. The effect of emerging risk trends on current risk exposure

  B. Risk appetite, risk threshold and risk tolerance

  C. Classification of current business risk

  D. Costs and resource needs related to risk mitigation measures

  Correct Answer: A