Isaca CGEIT Quiz 2 Topic 11 Questions 6-10

Question: 1

Which of the following activities MUST be completed before developing an IT strategic plan?

AReview the enterprise business plan

BAlign the enterprise vision statement with business processes

CDevelop an enterprise architecture (EA) framework

DReview the enterprise risk tolerance level

Show Answer

Question: 2

A strengthening the department's human resource assets?

ADevelop a responsible, accountable, consulted, and informed (RACI) chart.

BCreate an effective recruitment, retention, and training program.

CCommit to the board performance metrics and bonus structure.

DDevelop personnel requirements for third-party assurance.

Show Answer

Question: 3

An enterprise learns that a new privacy regulation was recently published to protect customers in the event of a breach involving personally identifiable information (Pll). The IT risk management team's FIRST course of action should be to:

Aevaluate the risk appetite for the new regulation.

Bdefine the risk tolerance for the new regulation.

Cdetermine if the new regulation introduces new risk.

Dassign a risk owner for the new regulation.

Show Answer

Question: 4

Which of the following would provide the MOST useful information to understand the associated risks when implementing a new digital transformation strategy?

ARisk policy

BRisk framework

CRisk heat map

DRisk register

Show Answer

Question: 5

Which of the following BEST reflects mature risk management in an enterprise?

AA regularly updated risk register

BOngoing risk assessment

COngoing investment in risk mitigation

DResponsive risk awareness culture

Show Answer

Isaca CGEIT Quiz:2 Topic:11 Questions:6-10