Free ISACA CGEIT Exam Dumps Questions & Answers

Supply chain management has established a supplier policy requiring multiple technology suppliers. What is the BEST way to ensure the success of this policy?

• A.  Implement a master service agreement.
• B.  Identity and select suppliers based on cost.
• C.  Align enterprise architecture (EA) and procurement strategies.
• D.  Align the vendor selection process with the security policy.

Which of the following is the BEST way to address the risk associated with new IT investments?

• A.  Establish an enterprise-wide incident response process.
• B.  Implement an enterprise-wide security awareness program.
• C.  Develop security best practices to protect applications.
• D.  Integrate security requirements at the beginning of projects

A large retail chain realizes that while there has not been any loss of data, IT security has not been a priority and should become a key goal for the enterprise. What should be the FIRST high-level initiative for a newly created IT strategy committee in order to support this business goal?

• A.  Recruiting and training qualified IT security staff
• B.  Modernizing internal IT security practices
• C.  Defining data archiving and retrieval policies
• D.  Identifying gaps in information asset protection

An enterprise's IT department has been operating independently without regard to business concerns, leading to misalignment between business and IT. The BEST way to establish alignment would be to require:

• A.  IT to define business objectives.
• B.  IT and business to define risks.
• C.  business to fund IT services.
• D.  business to help define IT goals.

Which of the following is MOST important for a CIO to ensure before signing a contract for a new cloud- based customer relationship management (CRM) system?
The service provider has been audited for vulnerabilities and threats.

• A.  Risk management responsibilities are agreed upon and accepted.
• B.  A full system functionality check has been completed.
• C.  The request for proposal (RFP) has been reviewed for completeness.