QUESTION 41
Which of the following will BEST help to ensure enterprise risk is effectively managed?
A. Establishing an audit committee that reports to the board
B. Establishing roles and responsibilities for IT risk at the senior management level
C. Identifying the lowest IT risks and outsourcing the related IT functions
D. Assigning a project sponsor and project manager to implement an IT risk register
Correct Answer: B
QUESTION 42
To support robust information governance, which of the following roles is MOST important for an enterprise to keep in-house?
A. Information steward
B. Enterprise architect (EA)
C. Data scientist
D. Information systems auditor
Correct Answer: A
QUESTION 43
A healthcare enterprise is creating a strategy for its future outsourcing of IT processes. Which of the following should be the MOST important consideration for the CIO?
A. Number of services defined in the service level agreement (SLA)
B. Regulatory compliance requirements
C. Number of IT resources displaced by the contract
D. Complexity of IT processes
Correct Answer: B
QUESTION 44
A CEO wants to ensure that IT is meeting business needs. Which of the following would BEST enable this validation?
A. Reviewing audit reports
B. Comparing IT strategy to industry peers
C. Assessing stakeholder satisfaction with IT services through focus groups
D. Establishing key risk indicators (KRIs) to measure the financial risks of IT projects
Correct Answer: C
QUESTION 45
To define the risk management strategy, which of the following MUST be set by the board of directors?
A. Risk identification plan
B. Risk treatment plan
C. Risk management process
D. Risk appetite
Correct Answer: D
QUESTION 46
Senior management finds that too many projects are currently in-progress and all are experiencing expensive project overruns due to lack of resources. Many of the projects also appear to overlap in their objectives and expected outcomes. Which of the following would BEST streamline the process of evaluating and selecting funding priorities?
A. Value governance
B. Business case development
C. Portfolio management
D. Project management
Correct Answer: C
QUESTION 47
The FIRST step of stakeholder analysis is to obtain a thorough understanding of.
A. internal and external requirements.
B. functional key strengths and weaknesses.
C. business risk appetite.
D. industry benchmarks.
Correct Answer: A
QUESTION 48
Which of the following MUST be defined at the highest level within an enterprise in order to effectively implement an IT governance framework?
A. IT governance procedures
B. IT controls
C. Accountability
D. Enterprise architecture (EA)
Correct Answer: C
QUESTION 49
A multi-disciplinary committee has been tasked to define an information governance process that will guide data management practices throughout the enterprise. Which of the following should the committee do FIRST?
A. Implement technology to support and automate data management and disposal.
B. Create policies and procedures to govern content generation, storage, and disposal.
C. Engage the enterprise architect to map existing data and ensure data minimization.
D. Perform an assessment of current data life cycle management practices.
Correct Answer: D
QUESTION 50
Which of the following would provide the MOST useful information to understand the associated risks when implementing a new digital transformation strategy?
A. Risk heat map
B. Risk policy
C. Risk framework
D. Risk register
Correct Answer: D
QUESTION 51
An enterprise in the second year of a five-year IT roadmap implementation is now faced with budget cuts. What should be the NEXT course of action?
A. Reduce headcount.
B. Review the IT strategic plan.
C. Implement chargeback mechanism.
D. Review key risk indicators (KRIs).
Correct Answer: B
QUESTION 52
Senior management recently learned of several duplicate purchases made by IT and the business. Which of the following is the BE ST way to address this issue?
A. Reevaluate budget allocation for IT and each business unit
B. Establish a centralized procurement approval process.
C. Provide enterprise-wide training on procurement decision making.
D. Align IT objectives to the business procurement process.
Correct Answer: B
QUESTION 53
An enterprise made a significant change to its business operating model to incorporate business intelligence. Which of the following should be reviewed FIRST to ensure IT alignment with this new business strategy?
A. Enterprise project management framework
B. Business impact analysis (BIA)
C. Information architecture
D. Information security assessment
Correct Answer: C
QUESTION 54
Which of the following is the BEST way for IT governance to ensure the performance outcomes defined in the business case for a key IT system are being achieved?
A. Review the total cost of ownership (TCO) returns.
B. Track the system in the enterprise architecture (EA) repository.
C. Define responsible individuals in a RACI chart.
D. Require an annual operational analysis.
Correct Answer: D
QUESTION 55
Which of the following is the BEST way to determine if IT governance has helped a business achieve intended long-term benefits of IT investments?
A. Periodically review return on investment (ROI) figures.
B. Conduct a capability maturity model assessment.
C. Review performance measures for IT objectives.
D. Calculate current net present value (NPV).
Correct Answer: A
QUESTION 56
A new CIO is concerned that an existing vendor’s performance is defined by the vendor’s own measures. What should be the FIR ST governance directive?
A. Modify IT strategic objectives with new measures.
B. Align performance measures to business targets.
C. Develop new IT strategic performance measures with the vendor.
D. Renegotiate service level agreements (SLAs) with the business.
Correct Answer: B
QUESTION 57
Recent audit findings reveal several security issues caused by various business units’ use of cloud computing services without the CIO’s knowledge. Which of the following should be done FIRST to help resolve this issue?
A. Establish IT policies and standards for cloud computing services.
B. Define clear roles and responsibilities for IT and business stakeholders.
C. Establish a procurement committee for cloud computing services.
D. Implement processes to monitor for use of unauthorized cloud computing services.
Correct Answer: A
QUESTION 58
A board of directors wants to ensure the enterprise is responsive to changes in its environment that would directly impact critical business processes. Which of the following will BEST facilitate meeting this objective?
A. Implementing a competitive intelligence tool
B. Regularly reviewing the enterprise risk appetite
C. Scheduling frequent threat analyses
D. Monitoring key risk indicators (KRIs)
Correct Answer: D
QUESTION 59
Which of the following should be the PRIMARY input when developing a quantitative risk assessment approach?
A. Data classification
B. Cost of ownership
C. Root cause analysis
D. Cost-benefit analysis
Correct Answer: D
QUESTION 60
CIO of an enterprise is concerned that IT and the business have different priorities. Which of the following would BEST demonstrate the current state of strategic alignment?
A. IT maturity model
B. Balanced scorecard
C. Business case
D. IT investment status
Correct Answer: B