QUESTION 181
Which of the following BEST enables an enterprise to determine an appropriate retention policy for its information assets?

A. External customer data retention requirements
B. Business storage and processing needs
C. Business and compliance requirements
D. Backup and restoration capabilities

Correct Answer: C

QUESTION 182
Which of the following is the BEST indication that information security requirements are taken into consideration when developing IT processes?

A. Customer profiles are stored with a domestic service provider.
B. The information architecture incorporates data classification.
C. The integrity of sensitive information is periodically reviewed.
D. The information is stored on distributed systems.

Correct Answer: B

QUESTION 183
Which of the following is MOST important to consider when selecting an Al solution?

A. Volume of training data
B. Data flow
C. Data dictionary
D. Quality of training data

Correct Answer: D

QUESTION 184
Following a recent change to enterprise strategy, which of the following would be MOST important for the CIO to review?

A. The enterprise SWOT analysis
B. Existing performance and capacity plans
C. Historical IT budget allocations
D. A list of current and planned IT projects

Correct Answer: D

QUESTION 185
The PRIMARY reason for involving business management when developing performance measures for IT value delivery is:

A. because business management is the customer of IT services.
B. to ensure reliable information is available for business management.
C. to ensure the IT investment achieves IT goals.
D. because different strategies require different indicators of value.

Correct Answer: D

QUESTION 186
A CIO engages a consulting firm to conduct a benchmark analysis of the organization’s IT governance framework against industry best practices. Several recommendations to improve the maturity of the framework are identified. Which of the following should be the CIO’s NEXT course of action?

A. Appoint a project manager to implement the recommendations.
B. Develop a plan to integrate the recommendations.
C. Obtain approval from the IT steering committee to implement the recommendations.
D. Evaluate the feasibility of the recommendations.

Correct Answer: D

QUESTION 187
Which of the following is MOST important to have in place to ensure a business continuity plan (BCP) can be executed?

A. Defined roles
B. Replicated systems
C. Budget allocation
D. A risk register

Correct Answer: A

QUESTION 188
A healthcare enterprise is procuring Internet of Things (IoT) devices to be used across its facilities. Which of the following is MOST important to establish before vendors are engaged to provide the devices?

A. Patient training
B. Physical security audits
C. Product compliance criteria
D. Vendor delivery timelines

Correct Answer: C

QUESTION 189
Which of the following is MOST important to consider when monitoring the performance of IT resources?

A. End-user feedback
B. Centralized log analysis
C. Service level requirements
D. Business impact analysis (BIA)

Correct Answer: C

QUESTION 190
Which method BEST enables an enterprise to estimate the benefits of a new Software as a Service (SaaS) application?

A. Total cost of ownership (TCO)
B. Heuristic methods
C. Expected monetary value
D. Monte Carlo analysis

Correct Answer: C

QUESTION 191
An IT enterprise is experiencing a high turnover rate of staff supporting key business processes due to inadequate training. From a governance perspective, which of the following is the BEST way to address this problem?

A. Update performance goals to align to with business objectives.
B. Accelerate the hiring of skilled replacement IT staff.
C. Hire contractors to address the gap in IT staffing.
D. Implement an T staff development policy.

Correct Answer: D

QUESTION 192
Which of the following is MOST important to effectively incorporate innovation and emerging technologies into an enterprise’s IT strategy?

A. Maintaining an IT strategy based on traditional technologies, supplemented by
B. Performing quarterly feedback reviews with focus groups representing the enterprise’s customer base
C. Implementing new technologies based on maturity roadmaps according to reputable consulting entities
D. Establishing a formal innovation management process that involves IT and business stakeholders

Correct Answer: D

QUESTION 193
Executive management is concerned that IT has not achieved its performance targets. At the end of the fiscal year, it was noted the reason was largely due to insufficient spending on key IT initiatives. Which of the following would help to alleviate the issue for the coming year?

A. Lead indicators
B. Key risk indicators (KRIs)
C. Lag indicators
D. Stage gate reviews

Correct Answer: A

QUESTION 194
Which of the following is the MOST important consideration when developing an IT strategy to adopt Zero Trust architecture?

A. User-friendly authentication mechanisms
B. User knowledge of business rules
C. Automation of access management
D. Understanding business risks

Correct Answer: D

QUESTION 195
An enterprise’s board of directors is concerned about the ongoing costs of a large inventory of Internet of Things (IoT) devices. Which of the following should the CIO do FIRST?

A. Reduce the budget for IoT capability to meet stakeholder expectations.
B. Assess the benefits of IoT capabilities.
C. Suggest replacing IoT devices that are too expensive.
D. Implement performance measures for each IoT device.

Correct Answer: B

QUESTION 196
The board directed the CIO to ensure that required IT resources are available to execute a new enterprise strategy. Which of the following should be done FIRST to support this initiative?

A. Develop a resource management plan.
B. Develop a capacity management plan.
C. Perform a gap analysis.
D. Implement an IT capability strategy.

Correct Answer: C

QUESTION 197
A regulator has expressed concerns about the timeliness of information reported from an enterprise. Which of the following should be done FIRST to address this issue?

A. Assess the reporting delivery process.
B. Negotiate an exception process with the regulator.
C. Automate the reporting process.
D. Evaluate the implications of risk acceptance.

Correct Answer: A

QUESTION 198
An enterprise is approaching the escalation date of a major IT risk. The IT steering committee wants to ascertain who is responsible for the risk response. Where should the committee find this information?

A. RACI chart

B. Risk management plan
C. Risk register
D. Resource management plan

Correct Answer: C

QUESTION 199
When an enterprise plans to deploy mobile device technologies. it is MOST important for IT leadership to ensure that:

A. the project management office (PMO) is engaged.
B. appropriate controls are implemented.
C. the IT policy addresses mobile devices.
D. users agree to an acceptable use policy.

Correct Answer: B

QUESTION 200
Which of the following would be MOST helpful to an enterprise that wants ta standardize how sensitive corporate data is handled?

A. Enterprise risk management (ERM) framework
B. Enterprise risk policy
C. Information classification framework
D. Information security policy

Correct Answer: C