Isaca CISA Certification CGEIT Questions & Answers

• Question 41:

  Portfolio management in a large enterprise BEST enables which of the following?

  A. Performance management

  B. Risk reduction

  C. Value creation

  D. Human resource optimization

  Correct Answer: B

• Question 42:

  Senior management finds that too many projects are currently in-progress and all are experiencing expensive project overruns due to lack of resources. Many of the projects also appear to overlap in their objectives and expected outcomes.

  Which of the following would BEST streamline the process of evaluating and selecting funding priorities?

  A. Portfolio management

  B. Value governance

  C. Project management

  D. Business case development

  Correct Answer: D

  Reference: https://www.isaca.org/resources/news-and-trends/newsletters/cobit-focus/2016/ensuring-value-from-it-enabled-investments

• Question 43:

  Individual business units within an enterprise have been designing their own IT solutions without consulting the IT department. From a governance perspective, what is the GREATEST issue associated with this situation?

  A. Security controls may not meet IT requirements.

  B. The enterprise does not have the skills to manage the solutions.

  C. The solutions conflict with IT goals and objectives.

  D. The solution may conflict with existing enterprise goals.

  Correct Answer: D

• Question 44:

  Which of the following should be the MAIN reason for an enterprise to implement an IT risk management framework?

  A. The need to enable IT risk-aware decisions by executives

  B. The results of an external audit report concerning IT risk management processes.

  C. The need to address market regulations and internal compliance in IT risk

  D. The ability to benchmark IT risk policies against major competitors

  Correct Answer: A

• Question 45:

  Before establishing IT key nsk indicators (KRls) which of the following should be defined FIRST?

  A. IT resource strategy

  B. IT risk and secunty framework

  C. IT goals and objectives

  D. IT key performance indicators (KPIs)

  Correct Answer: C

• Question 46:

  Which of the following roles should be responsible for data normalization when it is found that a new system includes duplicates of data items?

  A. Business system owner

  B. Data steward

  C. Database administrator (DBA)

  D. Application manager

  Correct Answer: C

• Question 47:

  Which of the following is a responsibility of an IT strategy committee?

  A. Providing oversight on enterprise strategy implementation

  B. Approving the business strategy and its IT implications

  C. Advising the board on the development of IT goals

  D. Tracking projects in the IT investment portfolio

  Correct Answer: C

• Question 48:

  Which of the following is the MOST important consideration for data classification to be successfully implemented?

  A. Users should be provided with clear instructions that are easy to follow and understand.

  B. The data classification tools integrate with other tools that help manage the data.

  C. The classification scheme should be closely aligned with the IT strategic plan.

  D. Senior management should be properly trained in monitoring compliance.

  Correct Answer: B

• Question 49:

  Which of the following would be the BEST way to facilitate the successful adoption of a new technology across the enterprise?

  A. Ensure the use of a business case

  B. Review business goals.

  C. Establish an IT balanced scorecard.

  D. Highlight the risk the new technology will address.

  Correct Answer: A

• Question 50:

  Which of the following roles should approve major IT purchases to help prevent conflicts of interest?

  A. IT steering committee

  B. Chief information officer (CIO)

  C. Chief compliance officer

  D. Project management office (PMO)

  Correct Answer: A