QUESTION 161
Which of the following is the PRIMARY objective of quantum computing architecture when addressing complex problems in a short amount of time using specialized algorithms?
A. To increase revenue
B. To minimize operating costs
C. To reduce cyberattacks
D. To optimize efficiency
Correct Answer: D
QUESTION 162
Which of the following are the MOST critical enablers for implementing IT governance in an enterprise?
A. Prioritizing IT projects and funding for IT governance
B. Commitment and promotion by senior management
C. Involvement of IT strategy and steering committees
D. Assigning roles and responsibilities for IT governance
Correct Answer: B
QUESTION 163
An enterprise’s IT strategy committee has no way to link successful business processes to the technologies that support them. To begin to understand this linkage, the committee MUST:
A. track the performance outcomes of the processes.
B. create an IT strategic vision and plan.
C. establish a portfolio management office.
D. select an enterprise architecture (EA) framework.
Correct Answer: D
QUESTION 164
Which of the following is the GREATEST driver of ethical decision making in an IT enterprise?
A. Code of conduct
B. Training and awareness programs
C. Process and control environment
D. Corporate culture
Correct Answer: D
QUESTION 165
Which of the following is the MOST important consideration related to Al architecture design?
A. Specification of access privileges
B. Adequacy of in-house skill sets
C. Enforcement of ethical boundaries
D. Establishment of oversight role
Correct Answer: C
QUESTION 166
New legislation requires an enterprise to report cybersecurity incidents to government agency within a defined timeline. Which of the following should be the FIRST course of action?
A. Understand requirements and definitions for reportable incidents.
B. Establish an incident reporting system and hotline.
C. Establish a cybersecurity incident manager role.
D. Require automation of incident reporting to agencies.
Correct Answer: A
QUESTION 167
Which of the following is the BEST way for a CIO to provide senior business management with increased visibility to the overall performance of the IT operation?
A. Develop key risk indicators (KRIs).
B. Develop key performance indicators (KPIs).
C. Provide service level agreement (SLA) performance statistics.
D. Provide return on investment (ROI) reports.
Correct Answer: B
QUESTION 168
An enterprise has received an audit report indicating significant security gaps across the IT environment. From a governance perspective, what is the BEST way to resolve this problem?
A. Implement a patch management process.
B. Establish an incident management process.
C. Adopt: risk management framework.
D. Implement change control procedures.
Correct Answer: C
QUESTION 169
Which of the following is the PRIMARY reason that the complexity of information risk management increases when an enterprise acquires services from a cloud service provider?
A. Risk associated with legal and regulatory noncompliance increases.
B. The enterprise lacks visibility to the effectiveness of implemented controls.
C. Periodic audits are not possible.
D. Responsibilities for controls are shared.
Correct Answer: D
QUESTION 170
An enterprise has identified data quality issues that have impacted all business units. A data quality strategy has been developed in collaboration with the business and has been approved by executive management. Which of the following should the IT steering committee do NEXT?
A. Mandate the inclusion of data quality processes in the system development life cycle (SDLC).
B. Request the development of data quality policies, processes, and guidelines.
C. Verify stakeholder expectations of data quality and ideas for improvement.
D. Require an action plan for data quality improvement across the enterprise.
Correct Answer: D
QUESTION 171
A publicly traded enterprise wants to demonstrate that its board of directors is providing adequate is strategic oversight of IT. Which of the following BEST supports this objective?
A. Annual IT governance communication to all staff
B. Press releases targeted at large investors
C. Annual presentation of IT performance metrics
D. Inclusion of IT governance reporting in the annual report
Correct Answer: D
QUESTION 172
A local government has a large volume of stored data that is tied to both legacy and ongoing legal cases. The government needs to protect information integrity and ensure chain of custody is maintained. Which of the following is the BEST way to address these requirements?
A. Develop a digital rights management policy.
B. Establish controls to prevent unauthorized access.
C. Provide training to staff on data evidence protection.
D. Implement a data governance framework.
Correct Answer: D
QUESTION 173
A CIO observes that many information assets are hosted on legacy technology that can no longer be patched or updated. The systems are not currently in use, but business units are reluctant to decommission assets due to information retention requirements. Which of the following is the BEST strategic response to this situation?
A. Apply legacy system surcharges to the to business units.
B. Develop and enforce life cycle policies in consultation with business.
C. Ensure the legacy systems are behind a secure firewall
D. Isolate the legacy systems and disconnect them from the internet.
Correct Answer: B
QUESTION 174
The PRIMARY objective for the creation of an IT strategy committee is to help ensure:
A. IT strategy implementation.
B. value from the enterprise architecture (EA).
C. business value delivery.
D. Cost alignment to IT budget.
Correct Answer: C
QUESTION 175
A domestic healthcare provider has informed IT governance that it is updating its strategy to include telemedicine and teleconsulting for international locations. Which of the following is the PRIMARY governance concern for the enterprise?
A. The need to update enterprise risk tolerance
B. Classification of new data by level of sensitivity
C. Conflicts between regulations in different countries
D. The ability of the IT infrastructure to support global expansion
Correct Answer: C
QUESTION 176
To support a shift to a new, more risk-averse business strategy, an IT department has identified new process-based security controls that will be implemented over the next two months. Which of the following should be updated FIRST to ensure the controls are implemented correctly?
A. Data classification tiers
B. Key risk indicators (KRSs)
C. Policies and procedures
D. Training materials
Correct Answer: C
QUESTION 177
Which of the following is the FIRST consideration for a CISO when implementing Zero Trust architecture?
A. Refining relevant business goals.
B. Limiting the number of privileged accounts.
C. Defining security projects to address identified control gaps.
D. Selecting a security framework that is relevant to the business.
Correct Answer: D
QUESTION 178
Which of the following should be the FIRST course of action when recent private blockchain acquisitions fail to yield the desired outcomes?
A. Manage technological risks.
B. Prohibit private blockchains.
C. Reassess value propositions.
D. Update business cases.
Correct Answer: C
QUESTION 179
Which of the following should be the PRIMARY consideration when developing an IT strategy for the global implementation of Internet of Things (IoT) solutions?
A. Addressing security and privacy
B. Hiring additional IT staff with IoT expertise
C. Maintaining compatibility with legacy systems
D. Identifying cost-effective IoT devices
Correct Answer: A
QUESTION 180
Which of the following will BEST enable an enterprise to convey IT governance direction and objectives?
A. Skills and competencies
B. Business processes
C. Corporate culture
D. Principles and policies
Correct Answer: D