QUESTION 81
Which of the following would an IT steering committee do First when the business is about to implement robotics process automation (RPA)?

A. Direct the creation of an ethical use policy.
B. Update the data privacy policy to align with industry standards.
C. Include ethics topics within onboarding training.
D. Mandate ethics clauses in supplier agreements.

Correct Answer: A

QUESTION 82
From an enterprise perspective, monitoring IT governance should focus PRIMARILY on:

A. process maturity.
B. value delivery.
C. enterprise architecture (EA).
D. policy compliance.

Correct Answer: B

QUESTION 83
Which of the following BEST supports an enterprise strategy for managing IT risk?

A. Training senior management on risk identification and mitigation approaches
B. Ensuring business management is involved in defining risk appetite
C. Establishing IT key risk indicators (KRIs) and response triggers
D. Implementing an IT risk management framework

Correct Answer: D

QUESTION 84
When reporting key risk indicators (KRIs) to the board, what information BEST enables risk-based decision making?

A. Emerging industry risk trends and benchmarks
B. Costs and resource needs related to risk mitigation measures
C. Classification of current business risk
D. Risk appetite, risk threshold, and risk tolerance

Correct Answer: D

QUESTION 85
Winch of the following is MOST critical to have in place before management can establish an IT risk assessment and response approach?

A. Historic data on risk events
B. A portfolio of IT investments
C. A balanced scorecard
D. Defined roles and responsibilities

Correct Answer: D

QUESTION 86
A root cause analysis indicates a major service disruption to a financial system was due to lack of competency of newly hired system administrators. Who should have been responsible for properly assessing the candidates’ competencies?

A. Business process owner
B. IT manager
C. Chief information officer (CIO)
D. Chief information security officer (CISO)

Correct Answer: B

QUESTION 87
TWO large financial institutions with different corporate cultures are engaged in a merger. From a governance perspective, which of the following should be the GREATEST concern?

A. Risk appetite
B. Technology infrastructure
C. Combined cost of operations
D. Enterprise architecture (EA) integration

Correct Answer: D

QUESTION 88
Winch of the following should be established FIRST to ensure a comprehensive information architecture?

A. Information classification policy
B. Technology infrastructure
C. Encryption methodology
D. Business information owners

Correct Answer: A

QUESTION 89
Which of the following should be the MOST important consideration when defining an enterprise’s IT organizational structure?

A. IT skills are mapped to business requirements.
B. A resource management plan is established.
C. Enterprise objectives are supported by IT resources.
D. Clear job descriptions are defined for IT positions.

Correct Answer: C

QUESTION 90
To take advantage of market changes, the board of directors of a retail sales enterprise has directed management to undertake a program to transform its online sales business. The IT steering committee’s FIRST action is to review the:

A. IT key risk indicators (KRIs).
B. IT policies and procedures.
C. IT-enabled investment portfolio.
D. IT return on investment (ROI) indicators.

Correct Answer: C

QUESTION 91
The MOST appropriate method for evaluating the capability of IT governance is through the use of:

A. a maturity assessment.
B. a risk assessment.
C. benchmarking.
D. a cost-benefit analysis.

Correct Answer: A

QUESTION 92
Which of the following is the PRIMARY benefit of IT quality assurance (QA)?

A. IT costs and resources are optimized.
B. Operational problems are solved and risk is mitigated.
C. Management and customer confidence are maintained.
D. Production milestones and deadlines are met.

Correct Answer: C

QUESTION 93
Winch of the following is the PRIMARY responsibility of a data steward?

A. Establishing well-defined operational data sets
B. Identifying different types of data users and roles
C. Authorizing access to data
D. Maintaining and improving data quality

Correct Answer: D

QUESTION 94
Which of the following would BEST validate that an enterprise is receiving benefits from its IT portfolio post-implementation?

A. Enterprise architecture (EA) alignment
B. Key risk indicators (KRIs)
C. Annual operational assessments
D. Portfolio investment criteria

Correct Answer: C

QUESTION 95
Who is ULTIMATELY responsible for maintaining the accuracy of information during a cloud migration?

A. Executive management
B. Cloud provider
C. Security team
D. Data owners

Correct Answer: D

QUESTION 96
Following a recent update to an enterprise’s IT strategic plan, which of the following should the IT strategy committee require be developed to help communicate a five-year view of IT initiatives?

A. Key risk indicators (KRIs)
B. Critical success factors (CSFs)
C. IT governance dashboard
D. IT investment roadmap

Correct Answer: D

QUESTION 97
An enterprise that trades cryptocurrency has been made aware of a new regulation to restrict the use of cryptocurrencies by large companies. Which of the following should the enterprise do FIRST?

A. Confer with the legal department to assess the potential impact and make recommendations.
B. Update the enterprise risk management (ERM) policy.
C. Develop a risk response in alignment with the enterprise’s risk appetite and tolerance.
D. Revisit the business model for financial transactions.

Correct Answer: A

QUESTION 98
Winch of the following should be done FIRST when implementing best practices for procurement of IT services?

A. Gain an understanding of potential business benefits.
B. Establish provider service level agreements (SLAs).
C. Review for potential duplication of services.
D. Identify single-source IT service providers.

Correct Answer: A

QUESTION 99
A regional consumer bank is planning a major investment in digital transformation to improve the customer experience and gain competitive advantage. The initiative will completely revolutionize how the traditional bank business is conducted across the enterprise. Which of the following is MOST important to ensuring long-term Success of the digital transformation?

A. Proven technology architecture for the digital platforms
B. A comprehensive change management program
C. Current IT skills matrix is updated
D. Clearly defined performance and outcome measures

Correct Answer: B

QUESTION 100
Which of the following is the BEST indicator of a governance committee’s relevance and effective functioning?

A. Frequency of meetings
B. Timely agenda formation
C. Timely minutes and distribution
D. Key members’ attendance

Correct Answer: D