[2023年12月20日] 信頼され続けるCGEIT試験のコツがあるPDF試験材料 [Q11-Q26]

質問11、 Which of the following frameworks defines ERM as the discipline by which an organization in any industry assesses, controls, exploits, finances, and monitors risks from all sources for the purpose of increasing the organization’s short- and long-term value to its stakeholders?

質問12、 Which of the following concepts is the business practice of developing and implementing comprehensive risk management and security practices for a firm’s entire value chain?

質問13、 Which of the following provides the MOST comprehensive insight into the effectiveness of IT?

質問14、 An IT steering committee wants the enterprise’s mobile workforce to use cloud-based file storage to save non-sensitive corporate data, removing the need for remote access to that information. Before this change is implemented, what should be included in the data management policy?

質問15、 Which of the following guides provides guidance on how COBIT is useful in supporting a variety of assurance tasks, along with the recommended testing steps that are aligned with the control practices?

質問16、 Which of the following techniques builds various plausible views of possible futures for a business?

質問17、 Which of the following BEST supports an IT strategy committee’s objective to align employee competencies with planned initiatives?

質問18、 A multinational enterprise recently purchased a large company located in a different country. When introducing the concept of governance to the new acquisition, it is MOST important that executive management recognize:

質問19、 Which of the following is the PRIMARY ongoing responsibility of the IT governance function related to risk?

質問20、 An enterprise has a zero-tolerance policy regarding security. This policy is causing a large number of email attachments to be blocked and is a disruption to the enterprise. Which of the following should be the FIRST governance step to address this email issue?

質問21、 Service Level Management provides for continual identification, monitoring and review of the levels of IT services specified in the service level agreements (SLAs). What are the responsibilities of Service Level Management? Each correct answer represents a part of the solution. Choose all that apply.

質問22、 Beth is an HR Professional for her organization and she’s been alerted by management that the company will be outsourcing a large portion of operations. This outsourcing will likely cause several employees to lose employment with the organization. Which of the following is the best course of action that Beth can take in regard to communicating with the employees about the outsourcing change?

質問23、 Lisa is the project manager of the SQL project for her company. She has completed the risk response planning with her project team and is now ready to update the risk register to reflect the risk response. Which of the following statements best describes the level of detail Lisa should include with the risk responses she has created?

質問24、 A data governance strategy has been defined by the IT strategy committee which includes privacy objectives related to access controls, authorized use. and data collection. Which of the following should the committee do NEXT?

質問25、 Robert is the business analyst for his organization and he’s working with several stakeholders to identify the business need for an opportunity. Robert needs to identify the stakeholder that will be responsible for authorizing the actions needed in order to meet the identified business need. Which stakeholder does Robert need to identify?

質問26、 Which of the following aspects of the transition from X-rays to digital images would be BEST addressed by implementing information security policy and procedures?