01. Following the rollout of an enterprise IT software solution that hosts sensitive data, it was discovered that the application's role-based access control was not functioning as specified. Which of the following is the BEST way to prevent reoccurrence in the future?
a) Ensure supplier contracts include a provision for the right to audit on an annual basis
b) Ensure procurement processes require the identification of alternate vendors to ensure business continuity
c) Ensure supplier contracts include penalties if solutions do not meet functional requirements
d) Ensure the evaluation process requires independent assessment of solutions prior to implementation
02. When assessing the impact of a new regulatory requirement, which of the following should be the FIRST course of action?
a) Assess the budget impact of the new regulation.
b) Map the regulation to business processes.
c) Update affected IT policies.
d) Implement new regulatory requirements.
03. It has been discovered that multiple business units across an enterprise are using duplicate IT applications and services to fulfill their individual needs. Which of the following would be MOST helpful to address this concern?
a) Enterprise architecture (EA)
b) IT service management
c) IT project roadmap
d) Enterprise risk framework
04. Which of the following would be the MOST effective way to ensure IT capabilities are appropriately aligned with business requirements for specific business processes?
a) Establishing key performance indicators (KPIs)
b) Issuing a management mandate that IT and business process stakeholders work together
c) Requiring internal IT architecture and design reviews
d) Requiring architecture and design reviews with business process stakeholders
05. An enterprise's board of directors is developing a strategy change. Although the strategy is not finalized, the board recognizes the need for IT to be responsive. Which of the following is the FIRST step to prepare for this change?
a) Ensure IT has knowledgeable representation and is included in the strategic planning process.
b) Increase the IT budget and approve an IT staff level increase to ensure resource availability for the strategy change.
c) Initiate an IT service awareness campaign to business system owners and implement service level agreements (SLAs).
d) Outsource both IT operations and IT development and implement controls based on a standardized framework.
06. To successfully implement enterprise IT governance, which of the following should be the MAIN focus of IT policies?
a) Providing business value
b) Optimizing operational benefits
c) Limiting IT costs
d) Enhancing organizational capability
07. An enterprise incurred penalties for noncompliance with privacy regulations. Which of the following is MOST important to ensure appropriate ownership of access controls to address this deficiency?
a) Authenticating access to information assets based on roles or business rules
b) Implementing multi-factor authentication controls
c) Engaging an audit of logical access controls and related security policies
d) Granting access to information based on information architecture
08. IT has launched new portfolio management policies and processes to improve the alignment of IT projects with enterprise goals. The latest audit report indicates that no improvement has been made because of confusion in the decision-making process. Which of the following is the BEST course of action for the CIO?
a) Implement a performance management framework.
b) Develop and communicate an accountability matrix.
c) Create an IT portfolio management risk framework.
d) Deliver prioritization and facilitation training.
09. A CIO has been asked to modify an organization's IT performance measurement system to reflect recent changes in technology, including the movement of some data processing to a cloud solution. Which of the following is the PRIMARY consideration when designing such a measurement system?
a) Adequately defining the scope of services moved to the cloud
b) Ensuring that cost of measurement and reporting is minimized
c) Correctly understanding stakeholder needs for IT-related measurement
d) Ensuring the measurement system maps to the enterprise architecture (EA)
10. When establishing a methodology for business cases, it would be MOST beneficial for an enterprise to include procedures for:
a) identifying metrics post-implementation to measure project success.
b) addressing required changes outside the business case.
c) entering the business case into the enterprise architecture (EA).
d) updating the business case throughout its life cycle.