CGEIT 시험 - ISACA실제시험문제와 답 - 279문항

Question No : 1

A large bank has completed several acquisitions in the last few years that have resulted in redundant IT applications. To align with the strategic initiative of providing integrated services to customers, the IT steering committee has decided to share data and integrate applications .
Which of the following would be MOST important to review in this situation?

A.Enterprise architecture (EA)
B.IT risk register
C.Balanced scorecard measures
D.IT strategic plan

정답:

Question No : 2

The use of new technology in an enterprise will require specific expertise and updated system development processes. There is concern that IT is not properly sourced .
Which of the following should be the FIRST course of action?

A.Perform a risk assessment on potential outsourcing.
B.Update the enterprise architecture (EA) with the new technology.
C.Review the IT balanced scorecard for sourcing opportunities.
D.Assess the gap between current and required staff competencies.

정답:

Question No : 3

An enterprise has established a new department to oversee the life cycle of activities that support data management objectives .
Which of the following should be done NEXT?

A.Develop a business continuity plan (BCP).
B.Assess the current data business model.
C.Review data privacy requirements.
D.Establish a RACI chart

정답:

Question No : 4

Which of the following provides the BEST evidence of an IT risk-aware culture across an enterprise?

A.Business staff report identified IT risks.
B.IT risks are communicated to the business.
C.IT risk-related policies are published.
D.The IT infrastructure is resilient.

정답:

Question No : 5

The BEST way to manage continuous improvement of governance-related processes is to:

A.assess existing process resource capacities.
B.define accountability based on roles and responsibilities.
C.apply effective quality management practices.
D.require third-party independent reviews.

정답:

Question No : 6

To meet the growing demands of a newly established business unit, IT senior management has been tasked with changing the current IT organization model to service-oriented.
With significant growth expected of the IT organization, which of the following is the MOST important consideration when planning for long-term IT service delivery?

A.The IT service delivery model is approved by the business.
B.An IT risk management process is in place.
C.IT is able to provide a comprehensive service catalog to the business.
D.The IT organization is able to sustain business requirements.

정답:

Question No : 7

The board of directors of a large organization has directed IT senior management to improve IT governance within the organization.
IT senior management's MOST important course of action should be to:

A.understand the driver that led to a desire to change.
B.assess the current slate of IT governance within the organization.
C.review IT strategy and direction.
D.analyze IT service levels and performance.

정답:

Question No : 8

When developing an IT training plan, which of the following is the BEST way to ensure that resource skills requirements are identified?

A.Extract training requirements from deficiencies reported in customer service satisfaction surveys.
B.Ask managers to determine IT training requirements annually.
C.Determine training needs based on the capabilities to support the IT strategy.
D.Survey employees for IT skills requirements based upon technology trends.

정답:

Question No : 9

A chief technology officer (CTO) wants to ensure IT governance practices adequately address risk management specific to mobile applications.
To create the appropriate risk policies for IT, it is MOST important for the CTO to:

A.understand the enterprise's risk tolerance.
B.create an IT risk scorecard.
C.map the business goals to IT risk processes.
D.identify the mobile technical requirements.

정답:

Question No : 10

The BEST way for a CIO to monitor the alignment between the business and IT strategy is to regularly review

A.key risk indicators (KRIs)
B.IT services supporting business processes
C.the balanced scorecard
D.the risk register

정답:

Question No : 11

Which of the following would be the BEST way to facilitate the adoption of strong IT governance practices throughout a multi-divisional enterprise?

A.Ensuring each divisional policy is consistent with corporate policy
B.Ensuring divisional governance fosters continuous improvement processes
C.Mandating data standardization across the distributed enterprise
D.Documenting and communicating key management practices across divisions

정답:

Question No : 12

The MAIN responsibility of the board of directors regarding the management of enterprise risk is to:

A.ensure a risk process exists which addresses the risk appetite.
B.sustain investment in staff training regarding IT risk.
C.promote a benefits-driven culture throughout the enterprise.
D.maintain awareness of IT risk to the business.

정답:

Question No : 13

An enterprise has decided to create its first mobile application. The IT director is concerned about the potential impact of this initiative .
Which of the following is the MOST important input for managing the risk associated with this initiative?

A.Enterprise architecture (EA)
B.IT risk scorecard
C.Enterprise risk appetite
D.Business requirements

정답:

Question No : 14

The use of an IT balanced scorecard enables the realization of business value of IT through:

A.business value and control mechanisms.
B.outcome measures and performance drivers.
C.financial measures and investment management.
D.vision and alignment with corporate programs.

정답:

Question No : 15

An enterprise plans to expand into new markets in countries lacking data privacy regulations, increasing risk exposure .
Which of the following is the BEST course of action for the CIO?

A.Identify business risk appetite and tolerance levels.
B.Quantify the risk impact and evaluate possible countermeasures.
C.Limit the personal data available to the high-risk countries.
D.Mandate the strengthening of user access controls.

정답:

ISACA CGEIT 시험