Loading...
Manajemen Aset dan Kekayaan Negara
Quiz by Francis
Customize this quiz to suit your class
Instantly translate to 100+ languages
Tag the questions with any skills you have. Your dashboard will track each student's mastery of each skill.
Give this quiz to my class
âDalam pengelolaan BMN pada pemerintah pusat, yang menetapkan status penggunaan barang adalah ...
Kepala Satuan Kerja
Pengelola Barang
Pengguna Barang
Kuasa Pengguna Barang
âPenilaian BMN dilakukan dalam rangka berikut, kecuali âŚ
Pemeliharaan rutin barang
Pemindahtanganan (selain hibah)
Pemanfaatan (selain pinjam pakai)
Penyusunan neraca pemerintah
Dalam pengelolaan BMN pada pemerintah pusat, yang menetapkan status penggunaan barang adalah ...
Penilaian BMN dilakukan dalam rangka berikut, kecuali âŚ
Dalam perencanaan kebutuhan BMN, penentuan spesifikasi teknis seperti kapasitas mesin kendaraan dinas, ukuran gedung, atau spesifikasi komputer termasuk dalam pedoman âŚ
â Sebuah perkantoran mewah di kawasan Sudirman tercatat sebagai aset operasional milik PT Pertamina (Persero). Berdasarkan arsitektur ruang lingkup kekayaan negara sesuai UU No. 17 Tahun 2003, masuk ke dalam pilar manakah gedung tersebut?
Pemerintah menyadari keterbatasan ruang fiskal APBN untuk mendanai infrastruktur baru. Hal ini memicu penyempurnaan aturan operasional dari PP 27 Tahun 2014 menjadi PP 28 Tahun 2020. Apa bentuk nyata dari pergeseran kebijakan tersebut dalam tata kelola BMN?
Dalam rangka menyusun Laporan Keuangan Pemerintah Pusat (LKPP), Kemenkeu menemukan bahwa banyak aset berupa tanah di sebuah kementerian yang nilainya masih menggunakan harga perolehan tahun 1990-an dan belum pernah direvaluasi. Kegagalan mencatat nilai riil ini paling bertentangan dengan asas tata kelola BMN yang mana?
Gedung kementerian dibiarkan kosong bertahun-tahun sampai masuk âDiary Misteri Saraâ. Sesuai visi 'Strategic Asset Manager', gedung ini harus diapakan?
Pemindahtanganan BMN yang dilakukan tanpa memperoleh penggantian dan bertujuan untuk kepentingan sosial, keagamaan, atau kemanusiaan disebut âŚ
Penjualan BMN/D wajib dilakukan melalui lelang, kecuali dalam kondisi tertentu. Salah satu pengecualian tersebut adalah âŚ
Tukar menukar BMN/D dapat dilakukan apabila âŚ
Pemusnahan BMN dilakukan apabila barang tersebut âŚ
Tujuan utama dari penghapusan BMN/D adalah âŚ
Siapa nama lengkap dosen PPKN kita
UAS MANAJEMEN ASET DAN TATA RUANGHttps://itexamcertified.com Passing Gauranteed! CGEIT: Certified in the Governance of Enterprise IT Volume A Question #1 You are the project manager of the NHQ project for your company. You are working with your project team to complete a risk audit. A recent issue that your project team responded to, and management approved, was to increase the project schedule because there was risk surrounding the installation time of a new material. Your logic was that with the expanded schedule there would be time to complete the installation without affecting downstream project activities. What type of risk response is being audited in this scenario? ďˇ A. Avoidance ďˇ B. Mitigation ďˇ C. Parkinson's Law ďˇ D. Lag Time Answer: A Question #2 You are the project manager for your organization. You are preparing for the quantitative risk analysis. Mark, a project team member, wants to know why you need to do quantitative risk analysis when you just completed qualitative risk analysis. Which one of the following statements best defines what quantitative risk analysis is? ďˇ A. Quantitative risk analysis is the process of prioritizing risks for further analysis or action by assessing and combining their probability of occurrence and impact. ďˇ B. Quantitative risk analysis is the planning and quantification of risk responses based on probability and impact of each risk event. ďˇ C. Quantitative risk analysis is the review of the risk events with the high probability and the highest impact on the project objectives. ďˇ D. Quantitative risk analysis is the process of numerically analyzing the effect of identified risks on overall project objectives. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Question #3 Your project spans the entire organization. You would like to assess the risk of the project but are worried that some of the managers involved in the project could affect the outcome of any risk identification meeting. Your worry is based on the fact that some employees would not want to publicly identify risk events that could make their supervisors look bad. You would like a method that would allow participants to anonymously identify risk events. What risk identification method could you use? ďˇ A. Delphi technique ďˇ B. Isolated pilot groups ďˇ C. SWOT analysis ďˇ D. Root cause analysis Answer: A Question #4 Fill in the blank with an appropriate phrase. _________models address specifications, requirements, design, verification and validation, and maintenance activities. Answer: Life cycle Question #5 Fill in the blank with an appropriate word. ________is also referred to as corporate governance, and covers issues such as board structures, roles and executive remuneration. Answer: Conformance Question #6 Which of the following is NOT a sub-process of Service Portfolio Management? ďˇ A. Service Portfolio Update ďˇ B. Business Planning Data ďˇ C. Strategic Planning ďˇ D. Strategic Service Assessment ďˇ E. Service Strategy Definition Answer: B Question #7 Mary is the business analyst for your organization. She asks you what the purpose of the assess capability gaps task is. Which of the following is the best response to give Mary? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. It identifies the causal factors that are contributing to an effect the solution will solve. ďˇ B. It identifies new capabilities required by the organization to meet the business need. ďˇ C. It describes the ends that the organization wants to improve. ďˇ D. It identifies the skill gaps in the existing resources. Answer: B Question #8 Which of the following are the roles of a CEO in the Resource management framework? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Organizing and facilitating IT strategic implementations ďˇ B. Establishment of business priorities & allocation of resources for IT performance ďˇ C. Overseeing the aggregate IT funding ďˇ D. Capitalization on knowledge & information Answer: ABD Question #9 Fill in the blank with an appropriate phrase. _________is the study of how the variation (uncertainty) in the output of a mathematical model can be apportioned, qualitatively or quantitatively, to different sources of variation in the input of a model Answer: Sensitivity analysis Question #10 Which of the following is a process that occurs due to mergers, outsourcing or changing business needs? ďˇ A. Voluntary exit ďˇ B. Plant closing ďˇ C. Involuntary exit ďˇ D. Outplacement Answer: C Question #11 Fill in the blank with the appropriate word. An ___________ is a resource, process, product, computing infrastructure, and so forth that an organization has determined must be protected. Answer: asset https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #12 You work as a project manager for TYU project. You are planning for risk mitigation. You need to identify the risks that will need a more in-depth analysis. Which of the following activities will help you in this? ďˇ A. Estimate activity duration ďˇ B. Quantitative analysis ďˇ C. Qualitative analysis ďˇ D. Risk identification Answer: C Question #13 An organization supports both programs and projects for various industries. What is a portfolio? ďˇ A. A portfolio describes all of the monies that are invested in the organization. ďˇ B. A portfolio is the total amount of funds that have been invested in programs, projects, and operations. ďˇ C. A portfolio describes any project or program within one industry or application area. ďˇ D. A portfolio describes the organization of related projects, programs, and operations. Answer: D Question #14 Your organization mainly focuses on the production of bicycles for selling it around the world. In addition to this, the organization also produces scooters. Management wants to restrict its line of production to bicycles. Therefore, it decides to sell the scooter production department to another competitor. Which of the following terms best describes the sale of the scooter production department to your competitor? ďˇ A. Corporate restructure ďˇ B. Divestiture ďˇ C. Rightsizing ďˇ D. Outsourcing Answer: B Question #15 You are the business analyst for your organization and are preparing to conduct stakeholder analysis. As part of this process you realize that you'll need several inputs. Which one of the following is NOT an input you'll use for the conduct stakeholder analysis task? ďˇ A. Organizational process assets ďˇ B. Enterprise architecture ďˇ C. Business need https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Enterprise environmental factors Answer: D Question #16 Which of the following is the process of comparing the business processes and performance metrics including cost, cycle time, productivity, or quality? ďˇ A. Agreement ďˇ B. COBIT ďˇ C. Service Improvement Plan ďˇ D. Benchmarking Answer: D Question #17 You are the project manager of a large project that will last four years. In this project, you would like to model the risk based on its distribution, impact, and other factors. There are three modeling techniques that a project manager can use to include both event-oriented and project oriented analysis. Which modeling technique does NOT provide event-oriented and project oriented analysis for identified risks? ďˇ A. Modeling and simulation ďˇ B. Expected monetary value ďˇ C. Sensitivity analysis ďˇ D. Jo-Hari Window Answer: D Question #18 Which of the following processes is described in the statement below? "This is the process of numerically analyzing the effect of identified risks on overall project objectives." ďˇ A. Identify Risks ďˇ B. Perform Qualitative Risk Analysis ďˇ C. Perform Quantitative Risk Analysis ďˇ D. Monitor and Control Risks Answer: C Question #19 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Benchmarking is a continuous process that can be time consuming to do correctly. Which of the following guidelines for performing benchmarking identifies the critical processes and creates measurement techniques to grade the process? ďˇ A. Research ďˇ B. Adapt ďˇ C. Plan ďˇ D. Improve Answer: C Question #20 Jenny is the project manager for the NBT projects. She is working with the project team and several subject matter experts to perform the quantitative risk analysis process. During this process she and the project team uncover several risks events that were not previously identified. What should Jenny do with these risk events? ďˇ A. The events should be determined if they need to be accepted or responded to. ďˇ B. The events should be entered into the risk register. ďˇ C. The events should continue on with quantitative risk analysis. ďˇ D. The events should be entered into qualitative risk analysis. Answer: B Question #21 Beth is a project team member on the JHG Project. Beth has added extra features to the project and this has introduced new risks to the project work. The project manager of the JHG project elects to remove the features Beth has added. The process of removing the extra features to remove the risks is called what? ďˇ A. Corrective action ďˇ B. Preventive action ďˇ C. Scope creep ďˇ D. Defect repair Answer: B Question #22 Which of the following elements of planning gap measures the gap between the total potential for the market and the actual current usage by all the consumers in the market? ďˇ A. Project gap ďˇ B. Competitive gap ďˇ C. Usage gap https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Product gap Answer: C Question #23 Mark is the project manager of the BFL project for his organization. He and the project team are creating a probability and impact matrix using RAG rating. There is some confusion and disagreement among the project team as to how a certain risk is important and priority for attention should be managed. Where can Mark determine the priority of a risk given its probability and impact? ďˇ A. Risk response plan ďˇ B. Look-up table ďˇ C. Project sponsor ďˇ D. Risk management plan Answer: B Question #24 Which of the following processes is responsible for low risk, frequently occurring low cost changes? ďˇ A. Incident Management ďˇ B. IT Facilities Management ďˇ C. Release Management ďˇ D. Request Fulfillment Answer: D Question #25 You are a management consultant. WebTech Inc., an e-commerce organization, hires you to analyze its SWOT. Which of the following factors will you not consider for the SWOT analysis? ďˇ A. Bandwidth ďˇ B. Pricing ďˇ C. Product ďˇ D. Promotion Answer: A Question #26 You work as a project manager for BlueWell Inc. You are working on a project and the management wants a rapid and cost-effective means for establishing priorities for planning risk responses in your project. Which risk management process can satisfy management's objective for your project? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Quantitative analysis ďˇ B. Qualitative risk analysis ďˇ C. Historical information ďˇ D. Rolling wave planning Answer: B Question #27 You are the project manager for your organization and you are working with Thomas, a project team member. You and Thomas have been working on a specific risk response for a probable risk event in the project. Thomas is empowered with a risk response and will control all aspects of the identified risk response in which a particular risk event will happen within the project. What title, in regard to risk, is bestowed on Thomas? ďˇ A. Risk coordinator ďˇ B. Risk expeditor ďˇ C. Risk owner ďˇ D. Risk team leader Answer: C Question #28 Which of the following essential elements of IT Portfolio Investment Management drives better decisions by providing real-time portfolio performance information in personalized views, such as cost/benefit summary, risk versus reward, ROI versus alignment, and balance bubble charts? ďˇ A. Workflow, Process Management, Tracking and Authorization ďˇ B. Portfolio Management ďˇ C. Integrated Dashboards and Scorecards ďˇ D. Portfolio What-If Planning Answer: C Question #29 DRAG DROP - Val IT is a suite of documents that provide a framework for the governance of IT investments, produced by the IT Governance Institute (ITGI). It is a formal statement of principles and processes for IT portfolio management. Drag and drop the correct domain ('Portfolio management') next to the IT processes defined by Val IT. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Select and Place: Answer: Question #30 What are the various phases of the Software Assurance Acquisition process according to the U.S. Department of Defense (DoD) and Department of Homeland Security (DHS) Acquisition and Outsourcing Working Group? ďˇ A. Implementing, contracting, auditing, monitoring ďˇ B. Requirements, planning, monitoring, auditing ďˇ C. Designing, implementing, contracting, monitoring ďˇ D. Planning, contracting, monitoring and acceptance, follow-on Answer: D Question #31 Which of the following sub-processes of Service Portfolio Management is used to define the overall goals that the service provider should follow in its development based on the outcome of Strategic Service Assessment? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Service Portfolio Update ďˇ B. Strategic Service Assessment ďˇ C. Service Strategy Definition ďˇ D. Strategic Planning Answer: C Question #32 Which of the following are the main goals of Broadcasting Board of Governors (BBG)'s strategic plan 2008- 2013?Each correct answer represents a complete solution. Choose all that apply. ďˇ A. It employs modern communication techniques and technologies. ďˇ B. It builds on our reach and impact within the muslim world. ďˇ C. It engages the world in conversation about England. ďˇ D. It enhances program delivery across all platforms. Answer: ABD Question #33 Which of the following types of IT organizational structures states that all IT decision making and the IT budget are in one place, much easier to manage, and require much less effort to organize? ďˇ A. Decentralized ďˇ B. Federated ďˇ C. Project-based ďˇ D. Centralized Answer: D Question #34 A service provider guarantees for end-to-end network traffic performance to a customer. Which of the following types of agreement is this? ďˇ A. LA ďˇ B. VPN ďˇ C. NDA ďˇ D. SLA Answer: D Question #35 Which of the following domains of COBIT covers areas such as the execution of the applications within the IT system and its results as well as the support processes that enable the effective and efficient execution of these IT systems? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Deliver and Support ďˇ B. Acquire and Implement ďˇ C. Monitor and Evaluate ďˇ D. Plan and Organize Answer: A Question #36 Gary has identified a project risk that could injure project team members. He does not want to accept any risk where someone could become injured on this project so he hires a professional vendor to complete this portion of the project work. This workaround to the risk event is known as what type of risk response? ďˇ A. Avoidance ďˇ B. Mitigation ďˇ C. Acceptance ďˇ D. Transference Answer: D Question #37 Management has asked you to perform a risk audit and report back on the results. Bonny, a project team member asks you what a risk audit is. What do you tell Bonny? ďˇ A. A risk audit is a review of the effectiveness of the risk responses in dealing with identified risks and their root causes, as well as the effectiveness of the risk management process. ďˇ B. A risk audit is a review of all the risks that have yet to occur and what their probability of happening are. ďˇ C. A risk audit is an audit of all the risks that have occurred in the project and what their true impact on cost and time has been. ďˇ D. A risk audit is a review of all the risk probability and impact for the risks, which are still present in the project but which have not yet occurred. Answer: A Question #38 Wendy is the project manager of the FBL project for your company. She has identified several risks within her project and has created a risk contingency reserve of $45,000 total. Her project is nearly complete and many of the risks have not happened in the project. What should Wendy do with the funds in the contingency reserve? ďˇ A. The funds for the risks that have passed and have not happened are transferred to the project budget. ďˇ B. The funds remain in the contingency reserve until all of the risks have passed. ďˇ C. The funds remain in the contingency reserve until the project is closed. ďˇ D. The funds for the risks that have passed and have not happened are released. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Question #39 Which of the following frameworks defines ERM as a process, effected by an entity's board of directors, management, and other personnel, applied in strategy setting and across the enterprise? ďˇ A. COBIT ďˇ B. COSO ERM framework ďˇ C. Casualty Actuarial Society framework ďˇ D. Val IT Answer: B Question #40 The IT strategy formulation process consists of four steps to provide guidance to all who are involved. Which of the following steps are performed in the IT strategy formulation process? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Decide how to get from here to there. ďˇ B. Evaluate changes. ďˇ C. Assess process maturity. ďˇ D. Map out the big picture. Answer: ABD Question #41 Which of the following concepts is a semi-standard structured report supported by proven design methods and automation tools that can be used by managers to keep track of the execution of activities by staff within their control and monitor the consequences arising from these actions? ďˇ A. Total Security Management ďˇ B. Balanced Scorecard (BSC) ďˇ C. Total Quality Management ďˇ D. Six Sigma Answer: B Question #42 DRAG DROP - Drag and drop the various architecture domains for TOGAF at the appropriate places. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Select and Place: Answer: Question #43 DRAG DROP - The Information Technology Infrastructure Library (ITIL) is a set of concepts and policies for managing information technology (IT) infrastructure, development, and operations. Drag and drop the ITIL processes that focus on service operation, i.e. operational processes in Service Support, in the correct places. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Select and Place: Answer: Question #44 You are the project manager of the HJK project for your organization. You and the project team have created risk responses for many of the risk events in the project. A teaming agreement is an example of what risk response? ďˇ A. Mitigation ďˇ B. Sharing ďˇ C. Transference ďˇ D. Acceptance Answer: B Question #45 Which of the following is the main objective of business process outsourcing? https://itexamcertified.com Passing Gauranteed! ďˇ A. Realigning business process with business strategy ďˇ B. Permitting the enterprise to focus on core main competences ďˇ C. Optimizing business processes ďˇ D. Increasing the automation of business processes Answer: B Question #46 In which of the following phases of the SDLC does the software and other components of the system faithfully incorporate the design specifications and provide proper documentation and training? ďˇ A. Design ďˇ B. Initiation ďˇ C. Programming and training ďˇ D. Evaluation and acceptance Answer: C Question #47 You are the project manager of a newly formed project to create a new manufacturing facility. You are working with a business analyst to identify, document, and prioritize stakeholders' needs for the facility. You'll also need to quantify any subjective terms and needs to define the project scope. What is this process called? ďˇ A. Requirements analysis ďˇ B. Project scope statement creation ďˇ C. Requirements gathering ďˇ D. Stakeholder analysis Answer: D Question #48 IT Governance is used by the management to regulate the Information Systems, to accomplish its objectives. IT governance forms an integral part of corporate governance. Which of the following elements are required to implement a good IT governance framework? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Communication ďˇ B. Structure ďˇ C. Project ďˇ D. Process Answer: ABD Question #49 Which of the following roles is responsible for review and risk analysis of all contracts on a regular basis? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. The Service Catalogue Manager ďˇ B. The Supplier Manager ďˇ C. The Configuration Manager ďˇ D. The IT Service Continuity Manager Answer: B Question #50 All projects that are presented in your organization must go through a board to review the return on investment, risk, and worthiness of a project. All projects are considered but not all projects are initiated. What is the name of the process that this board is completing in your organization? ďˇ A. Project selection committee ďˇ B. Change governance ďˇ C. Project portfolio management ďˇ D. Project portfolio management board Answer: C Question #51 Which of the following essential elements of IT Portfolio Investment Management enables portfolio managers to include or exclude investments, change start and end dates, adjust budgets and reevaluate priorities? ďˇ A. Integrated Capability ďˇ B. Portfolio Planning Analysis ďˇ C. Portfolio What-If Planning ďˇ D. Portfolio Management Answer: C Question #52 Fred is the project manager of the PKL project. He is working with his project team to complete the quantitative risk analysis process as a part of risk management planning. Fred understands that once the quantitative risk analysis process is complete, the process will need to be completed again in at least two other times in the project. When will the quantitative risk analysis process need to be repeated? ďˇ A. Quantitative risk analysis process will be completed again after the risk response planning and as a part of monitoring and controlling. ďˇ B. Quantitative risk analysis process will be completed again after the plan risk response planning and as part of procurement. ďˇ C. Quantitative risk analysis process will be completed again after new risks are identified and as pa of monitoring and controlling. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Quantitative risk analysis process will be completed again after the cost management planning an as a part of monitoring and controlling. Answer: A Question #53 You work as a project manager for BlueWell Inc. There has been a delay in your project work that is adversely affecting the project schedule. You decided, with your stakeholders' approval, to fast track the project work to get the project done faster. When you fast track the project which of the following are likely to increase? ďˇ A. Costs ďˇ B. Risks ďˇ C. Human resource needs ďˇ D. Quality control concerns Answer: B Question #54 Which of the following processes ensures that all vital assets and resources of the organization are safeguarded? ďˇ A. Defining Resource Requirements process ďˇ B. Cost estimating process ďˇ C. Vendor contract administration process ďˇ D. Risk management process Answer: D Question #55 In software development, which of the following analysis is used to document the services and functions that have been accidentally left out, deliberately eliminated or still need to be developed? ďˇ A. Vulnerability analysis ďˇ B. Cost-benefit analysis ďˇ C. Requirement analysis ďˇ D. Gap analysis Answer: D Question #56 The entry points to Service Strategy are referred to as "the Four Ps". They identify the different forms a service strategy may take. Which of the following is a correct list of the 'Four Ps'? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. People, Products, Partners, and Profit ďˇ B. People, Potential, Products, and Performance ďˇ C. Potential, Preparation, Performance, and Profit ďˇ D. Perspective, Position, Plan, and Pattern Answer: D Question #57 Melody is the project manager for her organization. She has created a risk response to conduct more tests on the software her project is creating. The identified risk that prompted this response was that the software is missionďżžcritical and must be flawless before it can be put into product. What type of a risk response has Melody used in this scenario? ďˇ A. Transference ďˇ B. Enhance ďˇ C. Avoidance ďˇ D. Mitigation Answer: D Question #58 Which of the following are the roles of a CIO in the Resource management framework? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Standardizes architecture & technology. ďˇ B. Defines value creation roles within IT. ďˇ C. Provides IT infrastructure to facilitate knowledge & information creation/sharing. ďˇ D. Establishes business priorities & allocates resources for IT performance. Answer: ABC Question #59 Elizabeth is a project manager for her organization and she finds risk management to be very difficult for her to manage. She asks you, a lead project manager, at what stage in the project will risk management become easier. What answer best resolves the difficulty of risk management practices and the effort required? ďˇ A. Risk management only becomes easier the more often it is practiced. ďˇ B. Risk management only becomes easier when the project is closed. ďˇ C. Risk management is an iterative process and never becomes easier. ďˇ D. Risk management only becomes easier when the project moves into project execution. Answer: A https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #60 Which of the following stages of the Forrester's IT Governance Maturity Model describes that the IT governance processes are applied across the enterprise where all business units/entities conform to the same set of IT governance processes, and IT investment decisions are based on the enterprise view? ďˇ A. Stage 3-Consistent ďˇ B. Stage 4-Best practices ďˇ C. Stage 1-Ad hoc ďˇ D. Stage 2-Fragmented Answer: A Question #61 You are the project manager of the AMD project for your organization. In this project, you are currently performing quantitative risk analysis. The tool and technique you are using is simulation where the project model is computed many times with the input values chosen at random for each iteration. The goal is to create a probability distribution from the iterations for the project schedule. What technique will you use with this simulation? ďˇ A. Pareto modeling ďˇ B. Expected Monetary Value ďˇ C. Monte Carlo Technique ďˇ D. Analogous modeling Answer: C Question #62 Robert is the business analyst for his organization and he's working with several stakeholders to identify the business need for an opportunity. Robert needs to identify the stakeholder that will be responsible for authorizing the actions needed in order to meet the identified business need. Which stakeholder does Robert need to identify? ďˇ A. Regulator ďˇ B. Implementation Subject Matter Expert ďˇ C. Sponsor ďˇ D. Customer Answer: C Question #63 Which of the following levels of Gartner's cost optimization framework describes the right kind of partnership with IT vendors, which can benefit each party in times of economic upturns? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Cost Savings within IT ďˇ B. Joint Business and IT Cost Savings ďˇ C. IT Procurement ďˇ D. Enabling Innovation and Business Restructuring Answer: C Question #64 Which conduct stakeholder analysis technique is useful for identifying shared characteristics of a stakeholder group? ďˇ A. Brainstorming ďˇ B. Scope modeling ďˇ C. Interviews ďˇ D. Surveys Answer: D Question #65 Which of the following are parts of SWOT Analysis? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Optimism ďˇ B. Threats ďˇ C. Weaknesses ďˇ D. Opportunities ďˇ E. Tools ďˇ F. Strengths Answer: BCDF Question #66 You are the project manager of the NNN project for your company. You and the project team are working together to plan the risk responses for the project. You feel that the team has successfully completed the risk response planning and now you must initiate what risk process it is. Which of the following risk processes is repeated after the plan risk responses to determine if the overall project risk has been satisfactorily decreased? ďˇ A. Risk response implementation ďˇ B. Quantitative risk analysis ďˇ C. Risk identification ďˇ D. Qualitative risk analysis Answer: B https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #67 You are the project manager for your company and a new change request has been approved for your project. This change request, however, has introduced several new risks to the project. You have communicated these risk events and the project stakeholders understand the possible effects these risks could have on your project. You elect to create a mitigation response for the identified risk events. Where will you record the mitigation response? ďˇ A. Risk log ďˇ B. Risk management plan ďˇ C. Risk register ďˇ D. Project management plan Answer: C Question #68 Which positive risk response best describes a teaming agreement? ďˇ A. Enhance ďˇ B. Exploit ďˇ C. Share ďˇ D. Venture Answer: C Question #69 Your project is an agricultural-based project that deals with plant irrigation systems. You have discovered a byproduct in your project that your organization could use to make a profit youre your organization seizes this opportunity it would be an example of what risk response? ďˇ A. Exploiting ďˇ B. Positive ďˇ C. Opportunistic ďˇ D. Enhancing Answer: A Question #70 Which document refers to the steps that must be taken if there is a major gap in the projected delivery quality of a service and the actual delivery? ďˇ A. Service Improvement Plan ďˇ B. Service Quality Plan ďˇ C. Business Service Catalogue ďˇ D. Service Level Agreement https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: A Question #71 Which of the following responsibilities are performed by the core team of IT governance? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Provide service feedback to providers. ďˇ B. Undertake core tasks. ďˇ C. Define plan and deliverables. ďˇ D. Report on process. Answer: BCD Question #72 Which of the following IT governance frameworks provides governance of IT investments, produced by the IT Governance Institute (ITGI), and is a formal statement of principles and processes for IT portfolio management? ďˇ A. VMM ďˇ B. Val IT ďˇ C. Risk IT ďˇ D. COBIT Answer: B Question #73 Which of the following roles in Service Design is responsible for delivering a particular service within the agreed service levels and also acts as the counterpart of the Service Level Manager when negotiating OLAs? ďˇ A. The Service Design Manager ďˇ B. The Service Level Manager ďˇ C. The Service Owner ďˇ D. The Service Catalogue Manager Answer: C Question #74 Harold is the project manager of a large project in his organization. He has been actively communicating and working with the project stakeholders. One of the outputs of the manage stakeholder expectations process can actually create new risk events for Harold's project. Which output of the manage stakeholder expectations process can create risks? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Project management plan updates ďˇ B. Project document updates ďˇ C. Change requests ďˇ D. Organizational process assets updates Answer: C Question #75 Which of the following concepts is the business practice of developing and implementing comprehensive risk management and security practices for a firm's entire value chain? ďˇ A. TOGAF ďˇ B. TQM ďˇ C. BSC ďˇ D. TSM Answer: D Question #76 Sensitivity analysis is a technique for systematically changing parameters in a model to determine the effects of such changes and is useful for computer modelers for a range of purposes. Which of the following purposes does the sensitivity analysis include? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Decision making or the development of recommendations for decision makers ďˇ B. Model development ďˇ C. Estimating the average outcome ďˇ D. Increased understanding or quantification of the system Answer: ABD Question #77 Beth is an HR Professional for her organization and she's been alerted by management that the company will be outsourcing a large portion of operations. This outsourcing will likely cause several employees to lose employment with the organization. Which of the following is the best course of action that Beth can take in regard to communicating with the employees about the outsourcing change? ďˇ A. Be honest and truthful and do not hide the facts. ďˇ B. Refer all ďˇ C. Document all ďˇ D. Don't share the details of the outsourcing decision. Answer: A https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #78 Which of the following processes are involved under the COBIT framework? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Managing the IT workforce. ďˇ B. Correcting all risk issues. ďˇ C. Conducting IT risk assessments. ďˇ D. Developing a strategic plan. Answer: ACD Question #79 Which of the following types of IT organizational structures states that all IT resources are centralized under a single reporting structure with centralized resource allocation (staffing), and the organizational structure is built around the resource pools? ďˇ A. Federated ďˇ B. Centralized ďˇ C. Project-based ďˇ D. Decentralized Answer: C Question #80 Lisa is the project manager of the SQL project for her company. She has completed the risk response planning with her project team and is now ready to update the risk register to reflect the risk response. Which of the following statements best describes the level of detail Lisa should include with the risk responses she has created? ďˇ A. The level of detail is set by historical information. ďˇ B. The level of detail should correspond with the priority ranking. ďˇ C. The level of detail is set of project risk governance. ďˇ D. The level of detail must define exactly the risk response for each identified risk. Answer: B Question #81 strategic plans with business strategic plans and the alignment of IT services with enterprise operations? ďˇ A. Risk Management ďˇ B. IT Governance Framework ďˇ C. Strategic Alignment ďˇ D. Value Delivery https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: C Question #82 You are the project manager for the ABC organization. Your current project has 75 internal stakeholders and 245 external stakeholders. Many of the risks within your project will only affect the internal stakeholders, but several of the identified risk events will affect the external stakeholders. Management would like to know the total number of communication channels in the project. How many communication channels exist in this project? ďˇ A. 245 ďˇ B. 102,080 ďˇ C. 51,040 ďˇ D. 320 Answer: C Question #83 Which of the following is a process improvement approach that provides organizations with the essential elements for effective process improvement and guides process improvement across a project, a division, or an entire organization? ďˇ A. Capability Maturity Model Integration ďˇ B. Service Portfolio ďˇ C. COBIT ďˇ D. Six Sigma Answer: A Question #84 Amy is the project manager for her company. In her current project the organization has a very low tolerance for risk events that will affect the project schedule. Management has asked Amy to consider the affect of all the risks on the project schedule. What approach can Amy take to create a bias against risks that will affect the schedule of the project? ďˇ A. She can filter all risks based on their affect on schedule versus other project objectives. ďˇ B. She can have the project team pad their time estimates to alleviate delays in the project schedule ďˇ C. She can shift risk-laden activities that affect the project schedule from the critical path as much a possible. ďˇ D. She can create an overall project rating scheme to reflect the bias towards risks that affect the project schedule. Answer: D Question #85 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Della works as a project manager for SoftTech Inc. She is working with the project stakeholders to begin the quantitative risk analysis process. Which of the following inputs will be needed for the quantitative risk analysis process in her project? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Project scope statement ďˇ B. Risk management plan ďˇ C. Cost management plan ďˇ D. Risk register Answer: BCD Question #86 Which types of project tends to have more well-understood risks? ďˇ A. First-of-its kind technology projects ďˇ B. State-of-art technology projects ďˇ C. Recurrent projects ďˇ D. Operational work projects Answer: C Question #87 Marsha is the project manager of the NHQ Project. There's a risk that her project team has identified, which could cause the project to be late by more than a month. Marsha does not want this risk event to happen so she devises extra project activities to ensure that the risk event will not happen. The extra steps, however, will cost the project an additional $10,000. What type of risk response is this approach? ďˇ A. Exploiting ďˇ B. Transference ďˇ C. Mitigation ďˇ D. Enhancing Answer: C Question #88 Which of the following frameworks describes a standard for processes within business information management at the strategy, management and operations level? ďˇ A. Val IT ďˇ B. BISL ďˇ C. COBIT ďˇ D. TOGAF https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: B Question #89 You are the project manager of a large construction project. You are evaluating the strengths, weaknesses, opportunities, and threats involved in a project. In which of the following processes are you on? ďˇ A. Define Scope ďˇ B. Identify Risks ďˇ C. Plan Risk Responses ďˇ D. Plan Risk Management Answer: B Question #90 Which of the following is NOT a valid maturity level of the Software Capability Maturity Model (CMM)? ďˇ A. Repeatable level ďˇ B. Managed level ďˇ C. Defined level ďˇ D. Fundamental level Answer: D Question #91 A project manager must have certain interpersonal skills to communicate with stakeholders and manage their expectations of the project work. Which of the following interpersonal skills has been identified as one of the biggest reasons for project success or failure? ďˇ A. Motivation ďˇ B. Influencing ďˇ C. Political and cultural awareness ďˇ D. Communication Answer: D Question #92 TOGAF is based on four pillars, called architecture domains. Which of the following architecture domains provides a blueprint for the individual application systems to be deployed, the interactions between the application systems, and their relationships to the core business processes of the organization with the frameworks for services to be exposed as business functions for integration? ďˇ A. Business architecture ďˇ B. Applications architecture ďˇ C. Technical architecture https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Data architecture Answer: B Question #93 Which of the following external factors complicate the notion of business-IT for achieving strategic alignment? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Resource limitations ďˇ B. Economic and regulatory changes ďˇ C. World region changes and events ďˇ D. Market changes Answer: BCD Question #94 You are hosting a collection of stakeholders from across the organization to identify the ideas and attitudes about your company's help desk. You want the stakeholders to honestly share their opinions about the help desk service so you can identify problems, solutions, and take actions to improve the service. What type of requirements elicitation activity is this? ďˇ A. Root cause analysis ďˇ B. Stakeholder analysis ďˇ C. Focus groups ďˇ D. Workshop Answer: C Question #95 Which of the following are the main objectives of the Performance measurement domain? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. It satisfies the customer's need. ďˇ B. It defines value creation roles within IT. ďˇ C. It meets out the goals. ďˇ D. It statistically controls the process sequences. Answer: ACD Question #96 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! You work as a project manager for TechSoft Inc. You are working with the project stakeholders on the qualitative risk analysis process in your project. You have used all the tools to the qualitative risk analysis process in your project. Which of the following techniques is NOT used as a tool in qualitative risk analysis process? ďˇ A. Risk Data Quality Assessment ďˇ B. Risk Categorization ďˇ C. Risk Reassessment ďˇ D. Risk Urgency Assessment Answer: C Question #97 Paul has been asked to complete SWOT analysis for his solution scope. What does SWOT analysis mean? ďˇ A. Stakeholder Weaknesses, Organizational Threats ďˇ B. Strengths, Weaknesses, Opportunities, Threats ďˇ C. Strengths, Weaknesses, Opportunities, Time ďˇ D. Stakeholders Weaknesses, Organization, Threats Answer: B Volume B Question #1 You work as a project manager for BlueWell Inc. You are about to complete the quantitative risk analysis process for your project. You can use three available tools and techniques to complete this process. Which one of the following is NOT a tool or technique that is appropriate for the quantitative risk analysis process? ďˇ A. Quantitative risk analysis and modeling techniques ďˇ B. Organizational process assets ďˇ C. Expert judgment ďˇ D. Data gathering and representation techniques Answer: B Question #2 You work as a project manager for BlueWell Inc. Your project is using a new material to construct a large warehouse in your city. This new material is cheaper than traditional building materials, but it takes some time to learn how to use the material properly. You have communicated to the project stakeholders that you will be able to save costs by using the new material, but you will need a few extra weeks to complete training to use the materials. This risk response of learning how to use the new materials can also be known as what term? ďˇ A. Cost-benefits analysis ďˇ B. Benchmarking https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. Cost of conformance to quality ďˇ D. Team development Answer: C Question #3 Which of the following methods offers a number of modeling practices and disciplines that contribute to a successful service-oriented life cycle management and modeling? ďˇ A. Service-oriented modeling and architecture (SOMA) ďˇ B. Service-oriented architecture (SOA) ďˇ C. Sherwood Applied Business Security Architecture (SABSA) ďˇ D. Service-oriented modeling framework (SOMF) Answer: D Question #4 Which of the following processes involves choosing the alternative strategies, executing a contingency or fallback plan, taking corrective action, and modifying the project management plan? ďˇ A. Scope Change control ďˇ B. Monitor and Control risk ďˇ C. Integrated Change control ďˇ D. Configuration Management Answer: B Question #5 Which of the following architecture domains for TOGAF describes the structure of an organization's logical and physical data assets and the associated data management resources? ďˇ A. Applications architecture ďˇ B. Technical architecture ďˇ C. Data architecture ďˇ D. Business architecture Answer: C Question #6 Which volume provides guidance on clarification and prioritization of service-provider investments in services? ďˇ A. Service Operation ďˇ B. Service Strategy https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. Service Design ďˇ D. Service Management Answer: B Question #7 Which of the following problems occur with performance measurement systems that limit their usefulness? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. It is dependent on gross aggregates, which tend to understate or ignore distributional contributions and consequences. ďˇ B. It is dependent on the timely occurrence of corrective action which is required for effective management control. ďˇ C. It is dependent on historical patterns and reluctant to accept new structural changes that are capable of generating different outcomes ďˇ D. It is dependent on summary data, which emphasizes averages and discounts outliers. Answer: ACD Question #8 You are the project manager of the NKJ Project for your company. The project's success or failure will have a significant impact on your organization's profitability for the coming year. Management has asked you to identify the risk events and communicate the event's probability and impact as early as possible in the project. Management wants to avoid risk events and needs to analyze the cost-benefits of each risk event in this project. What term is assigned to the low-level of stakeholder tolerance in this project? ďˇ A. Risk utility function ďˇ B. Mitigation-ready project management ďˇ C. Risk-reward mentality ďˇ D. Risk avoidance Answer: A Question #9 Which of the following techniques is used for understanding the "environment" in which a business operates? ďˇ A. Critical success factor analysis ďˇ B. PEST analysis ďˇ C. SWOT analysis ďˇ D. Market segmentation Answer: B https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #10 Which of the following process groups is the most efficient at providing resources to the development of the procurement process? ďˇ A. Acquisition process ďˇ B. Contract management ďˇ C. Process management ďˇ D. Resource management Answer: A Question #11 You are working with your project stakeholders to identify risks within the JKP Project. You want to use an approach to engage the stakeholders to increase the breadth of the identified risks by including internally generated risk. Which risk identification approach is most suited for this goal? ďˇ A. Brainstorming ďˇ B. Assumptions analysis ďˇ C. SWOT analysis ďˇ D. Delphi Technique Answer: C Question #12 John is the project manager of the NHQ Project for his company. His project has 75 stakeholders, some of which are external to the organization. John needs to make certain that he communicates about risk in the most appropriate method for the external stakeholders. Which project management plan will be the best guide for John to communicate to the external stakeholders? ďˇ A. Communications Management Plan ďˇ B. Risk Response Plan ďˇ C. Project Management Plan ďˇ D. Risk Management Plan Answer: A Question #13 As seen from the perspective of how the enterprise defines and executes business strategies to achieve its goals and objectives, which of the following elements does the ERM comprise of? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Enhancing risk response decisions ďˇ B. Providing integrated responses to few risks ďˇ C. Reducing operational surprises and losses https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Aligning risk appetite and strategy Answer: ACD Question #14 You work as the project manager for BlueWell Inc. You are monitoring the project performance. You want to make a decision to change the project plan to eliminate a risk in order to protect the project objectives. Which of the following strategies will you use to tackle the risk? ďˇ A. Risk mitigation ďˇ B. Risk avoidance ďˇ C. Risk acceptance ďˇ D. Risk transference Answer: B Question #15 Management wants you to create a visual diagram of what resources will be utilized in the project deliverables. What type of a chart is management asking you to create? ďˇ A. RACI chart ďˇ B. Roles and responsibility matrix ďˇ C. Work breakdown structure ďˇ D. Resource breakdown structure Answer: D Question #16 You are the project manager of the CUL project in your organization. You and the project team are assessing the risk events and creating a probability and impact matrix for the identified risks. Which one of the following statements best describes the requirements for the data type used in qualitative risk analysis? ďˇ A. A qualitative risk analysis requires fast and simple data to complete the analysis. ďˇ B. A qualitative risk analysis required unbiased stakeholders with biased risk tolerances. ďˇ C. A qualitative risk analysis encourages biased data to reveal risk tolerances. ďˇ D. A qualitative risk analysis requires accurate and unbiased data if it is to be credible. Answer: D Question #17 Lisa is the project manager of the FKN project for her organization. She is working with Sam, the CIO, to discuss a discount the vendor has offered the project based on the amount of materials that is ordered. Lisa and Sam review the offer and agree that while their project may qualify for the discounted materials the savings is nominal and they https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! would not necessarily pursue the savings. Lisa documents this positive risk response in the risk register. What risk response is this? ďˇ A. Share ďˇ B. Acceptance ďˇ C. Enhance ďˇ D. Transference Answer: B Question #18 You are the project manager of the GHY Project and would like to perform a review of your project from several different characteristics. You would like to review what worked in the project and what needed improvement. What type of analysis would be most appropriate for the end of project review? ďˇ A. Feasibility study ďˇ B. Product breakdown ďˇ C. Business case study ďˇ D. SWOT analysis Answer: D Question #19 Which of the following best describes the identification, analysis, and ranking of risks? ďˇ A. Plan Risk management ďˇ B. Design of experiments ďˇ C. Fixed-price contracts ďˇ D. Fast tracking Answer: A Question #20 There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to the perform quantitative risk analysis process? ďˇ A. Risk management plan ďˇ B. Risk register ďˇ C. Enterprise environmental factors ďˇ D. Cost management plan Answer: C https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #21 Which of the following stages of the Forrester's IT Governance Maturity Model describes that the IT governance processes is fully developed and optimized across the enterprise, and a well-built IT portfolio management process is put to ensure that all IT investment decisions are themselves optimized? ďˇ A. Stage 2-Fragmented ďˇ B. Stage 4-Best practices ďˇ C. Stage 3-Consistent ďˇ D. Stage 1-Ad hoc Answer: B Question #22 You are the project manager of the NHQ Project for your company. You have completed qualitative and quantitative analysis of your identified project risks and you would now like to find an approach to increase project opportunities and to reduce threats within the project. What project management process would best help you? ďˇ A. Plan risk responses ďˇ B. Create a risk governance approach ďˇ C. Create the project risk register ďˇ D. Monitor and control project risks Answer: A Question #23 Jane is the project manager of the GBB project for her company. In the current project a vendor has offered the project a ten percent discount based if they will order 100 units for the project. It is possible that the GBB Project may need the 100 units, but the cost of the units is not a top priority for the project. Jane documents the offer and tells the vendor that they will keep the offer in mind and continue with the project as planned. What risk response has been given in this project? ďˇ A. Acceptance ďˇ B. Enhance ďˇ C. Sharing ďˇ D. Exploiting Answer: A Question #24 Availability Management allows organizations to sustain the IT service availability to support the business at a justifiable cost. Which of the following elements of Availability Management is used to perform at an agreed level over a period of time? Each correct answer represents a part of the solution. Choose all that apply. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Reliability ďˇ B. Security ďˇ C. Recoverability ďˇ D. Serviceability ďˇ E. Resilience ďˇ F. Maintainability ďˇ G. Error control Answer: ABCDEF Question #25 Your project team has identified a project risk that must be responded to. The risk has been recorded in the risk register and the project team has been discussing potential risk responses for the risk event. The event is not likely to happen for several months but the probability of the event is high. Which one of the following is a valid response to the identified risk event? ďˇ A. Risk audit ďˇ B. Earned value management ďˇ C. Corrective action ďˇ D. Technical performance measurement Answer: C Question #26 Fill in the blank with an appropriate phrase. The _________ provides investment management services to the firm and directs on how to take decisions on fund. Answer: fund manager Question #27 You are the business analyst for the YGT Organization. You have just completed a capabilities gap assessment and have determined that your organization does not have the necessary resources and technology to seize a business opportunity. What is the most likely course of action for the organization? ďˇ A. Hire contractors to complete the project work. ďˇ B. Move onto the next opportunity. ďˇ C. Launch a new project. ďˇ D. Hire additional resources. Answer: C Question #28 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Stephen is the project manager of the GBB project. He has worked with two subject matter experts and his project team to complete the risk assessment technique. There are approximately 47 risks that have a low probability and a low impact on the project. Which of the following answers best describes what Stephen should do with these risk events? ďˇ A. The low probability and low impact risks should be added to the risk register. ďˇ B. Because they are low probability and low impact, the risks can be dismissed. ďˇ C. Because they are low probability and low impact, Stephen should accept the risks. ďˇ D. The low probability and low impact risks should be added to a watch list for future monitoring. Answer: D Question #29 Which of the following is a continuous process of comparing performance with desired objectives to identify opportunities for improvement, and is conducted by individuals, groups, or organizations relating to their own work? ďˇ A. Management Assessment ďˇ B. Continuous improvement ďˇ C. Self Assessment ďˇ D. Control Answer: C Question #30 Fill in the blank with an appropriate phrase. The _______ portion of the issue log records the previous pending issues that have been taken care of. Answer: resolved issues Question #31 In which of the following methods of risk mitigation does the senior management approve the implementation of the controls that are recommended by the risk management team, and that will lower the risk to an acceptable level? ďˇ A. Risk Avoidance ďˇ B. Risk Alleviation ďˇ C. Risk Limitation ďˇ D. Risk Transference Answer: B https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #32 A project team member has just identified a new project risk. The risk event is determined to have significant impact but a low probability in the project. Should the risk event happen it'll cause the project to be delayed by three weeks, which will cause new risk in the project. What should the project manager do with the risk event? ďˇ A. Add the identified risk to a quality control management control chart. ďˇ B. Add the identified risk to the low-level risk watchlist. ďˇ C. Add the identified risk to the risk register. ďˇ D. Add the identified risk to the issues log. Answer: C Question #33 Which of the following are the tasks performed by the Management committee in the Resource management framework? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. To work on architectural design ďˇ B. To define value creation roles within IT ďˇ C. To balance sustain/growth proposals ďˇ D. To manage complex projects Answer: ACD Question #34 Which of the following steps are performed in the Planning phase of IT Assurance methodology? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Plan the risk-based assurance initiatives. ďˇ B. Scope and plan assurance initiatives. ďˇ C. Perform a quick risk assessment. ďˇ D. Assess process maturity. Answer: ACD Question #35 Which of the following essential elements of IT Portfolio Investment Management describes the ability to model the IT Portfolio with metrics most appropriate to the business such as ROI, Break- Even, Cost Avoidance, and Revenue Return? ďˇ A. Integrated Capability ďˇ B. Portfolio What-If Planning https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. Integrated Dashboards and Scorecards ďˇ D. Highly Configurable Answer: D Question #36 ďˇ A. Strategic Alignment ďˇ B. Risk Management ďˇ C. Value Delivery ďˇ D. IT Governance Framework Answer: D Question #37 Which of the following frameworks is for enterprise architecture, and provides a comprehensive approach to the design, planning, implementation, and governance of an enterprise information architecture? ďˇ A. TOGAF ďˇ B. Val IT ďˇ C. BISL ďˇ D. COBIT Answer: A Question #38 Service Transition contains detailed descriptions of which of the following processes? ďˇ A. Change Management, Capacity Management, Event Management, and Service Request Management ďˇ B. Service Level Management, Service Portfolio Management, Service Asset and Configuration Management ďˇ C. Service Asset and Configuration Management, Release Management, and Request Fulfillment ďˇ D. Change Management, Service Asset and Configuration Management, Release and Answer: D Question #39 Which of the following processes is responsible for controlling, recording and reporting on versions, attributes, and relationships relating to components of the Information Technology (IT) infrastructure? ďˇ A. Service Catalogue Management ďˇ B. Service Level Management ďˇ C. ICT Operations Management https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Service Asset and Configuration Management Answer: D Question #40 You are the project manager of the GHG project for your company. You have identified the project risks, completed qualitative and quantitative analysis, and created risk responses. You also need to document how and when risk audits will be performed in the project. Where will you define the frequency of risk audits? ďˇ A. Schedule management plan ďˇ B. Risk management plan ďˇ C. Quality management plan ďˇ D. Risk response plan Answer: B Question #41 What stakeholder(s) must participate in the document elicitation result? ďˇ A. Business analyst and the key stakeholders ďˇ B. Business analyst and the business owner ďˇ C. Business analyst, business analysis team, and the key stakeholders ďˇ D. Business analyst Answer: D Question #42 You are the HR Professional for your organization and you're working with the management to define the role of contractors versus employees in your organization. According to the Internal Revenue Service, there are three categories of control that help determine whether a person is a contractor or an employee. Which one of the following is not one of the three levels of control as defined by the IRS for employee versus contractor? ďˇ A. Type of relationship ďˇ B. Locale of work performed ďˇ C. Behavioral control ďˇ D. Financial control Answer: B Question #43 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Holly and Gary are HR Professionals in their organization and they're working to develop the strategic plan for their organization. Holly and Gary are using SWOT analysis to help understand the needs of human, financial, technological, capital, and other aspects of their organization. What is SWOT? ďˇ A. SWOT is an analysis to define the strengths, weaknesses, opportunities, and threats an organization may face. ďˇ B. SWOT is an analysis to define the schedule, weaknesses, opportunities, and timetable of a project endeavor. ďˇ C. SWOT is an analysis to define the strengths, weaknesses, openness, and timeliness of an organization. ďˇ D. SWOT is an analysis to define the seriousness, weaknesses, openness, and timetable of organization development. Answer: A Question #44 DRAG DROP - COBIT stands for Control Objectives for Information and Related Technology. COBIT is a set of best practices (framework) for information technology (IT) management created by the Information Systems Audit and Control Association (ISACA), and the IT Governance Institute (ITGI) in 1996. Drag and drop the correct domain ('Monitor and Evaluate') next to the IT processes defined by COBIT to support CSI. Select and Place: Answer: https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #45 What is the key output handed over to Service Transition within Service Design? ďˇ A. Business Perspective ďˇ B. Service Portfolio Management ďˇ C. ITIL Small-Scale Implementation ďˇ D. Service Design Package Answer: D Question #46 Which of the following processes are covered by Service Strategy? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Service Portfolio Management ďˇ B. IT Financial Management ďˇ C. Demand Management ďˇ D. IT Architecture Management ďˇ E. Supplier Management Answer: ABCE Question #47 Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur? ďˇ A. Single Loss Expectancy (SLE) ďˇ B. Exposure Factor (EF) ďˇ C. Annualized Rate of Occurrence (ARO) ďˇ D. Safeguard Answer: C Question #48 Which of the following concepts is used to reduce the errors produced during the manufacturing or service process, increase customer satisfaction, streamline supply chain management, aims for modernization of equipment and ensures workers have the highest level of training? ďˇ A. Balanced Scorecard (BSC) ďˇ B. Six Sigma ďˇ C. Total Quality Management ďˇ D. Total Security Management https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: C Question #49 Enterprise analysis provides many things for an organization. All of the following are tasks included in enterprise analysis except for which one? ďˇ A. Solution performance assessment ďˇ B. Define business need ďˇ C. Determine solution approach ďˇ D. Assess capability gaps Answer: A Question #50 Billy is the project manager of the HAR Project and is in month six of the project. The project is scheduled to last for 18 months. Management asks Billy how often the project team is participating in risk reassessment in this project. What should Billy tell management if he's following the best practices for risk management? ďˇ A. Project risk management happens at every milestone. ďˇ B. Project risk management has been concluded with the project planning. ďˇ C. At every status meeting the project team project risk management is an agenda item. ďˇ D. Project risk management is scheduled for every month in the 18-month project. Answer: C Question #51 What business analysis element tries to identify as many potential options as possible to meet the business objectives and fill identified gaps in capabilities? ďˇ A. Decision analysis ďˇ B. Alternative generation ďˇ C. Documentation of assumptions and constraints ďˇ D. Ranking of approaches Answer: B Question #52 Service Level Management provides for continual identification, monitoring and review of the levels of IT services specified in the service level agreements (SLAs). What are the responsibilities of Service Level Management? Each correct answer represents a part of the solution. Choose all that apply. ďˇ A. Producing and maintaining a Service Catalog. ďˇ B. Liaising with Availability Management. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. Ensuring that the agreed IT services are delivered. ďˇ D. Ensuring the primary functions of the Service Desk. ďˇ E. Ensuring that appropriate IT Service Continuity plans have been made. Answer: ABCE Question #53 You are the project manager of a computer upgrade project. You and the vendor are in dispute over the deliverables the vendor was to provide and configure. What document can best describe how you and the vendor are to proceed if there is a claim against the vendor? ďˇ A. Procurement management plan ďˇ B. Project cost management plan ďˇ C. Enterprise environmental factors ďˇ D. Contract Answer: D Question #54 Which of the following is a way of delivering value to customers by facilitating outcome that customers wish to get without the control of specific costs and risks? ďˇ A. Processes ďˇ B. Service Desk ďˇ C. Functions ďˇ D. Service Answer: D Question #55 Which of the following objectives can be the best coordinated with the Human resource management? ďˇ A. Increasing the automation of the business processes ďˇ B. Satisfying the business needs ďˇ C. Rewarding employee fairly ďˇ D. Focusing on the business improvements Answer: B Question #56 Which of the following steps are performed in the Scoping phase of IT Assurance methodology? Each correct answer represents a complete solution. Choose all that apply. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Customize control objectives. ďˇ B. Scope and plan assurance initiatives. ďˇ C. Select the control objectives for critical processes. ďˇ D. Assess process maturity. Answer: ABC Question #57 Which of the following frameworks describes an enterprise view of all project management activities and how these activities contribute to the success of the organization? ďˇ A. Casualty Actuarial Society framework ďˇ B. COSO ERM ďˇ C. Enterprise project management (EPM) ďˇ D. COBIT Answer: C Question #58 Which of the following planned and purposeful management processes are required by Strategic Alignment? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Clarifying the role that IT should play ďˇ B. Aligning IT strategy with the business strategy ďˇ C. Evaluating, post implementation, benefits delivered by IT ďˇ D. Creating and sustaining awareness of the strategic role of IT at a top management level Answer: ACD Question #59 Which of the following terms includes performance objectives and criteria (POCs), performance indicators, and any other means that evaluate the success in achieving a specified goal? ďˇ A. Precision ďˇ B. Performance Measurement System ďˇ C. Performance Measure ďˇ D. Performance Measurement Category Answer: C Question #60 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! For the entire IT organizations to be agile, all members of the IT organizations need to understand the need for agility and be committed to this process. Which of the following working principles or activity loops are involved for the IT organizations to be agile? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Loop 2 ďˇ B. Loop 4 ďˇ C. Loop3 ďˇ D. Loop 1 Answer: ACD Question #61 You are interviewing members of a project team to test their understanding of the assigned risk responses as risk owners. You and the project manager are working together to evaluate the risk responses to determine their effectiveness in the project. What project management technique are you performing with the project manager in this scenario? ďˇ A. Risk identification with the project team ďˇ B. Risk audits ďˇ C. Risk analysis ďˇ D. Stakeholder analysis as the project team is a stakeholder Answer: B Question #62 Which of the following domains of COBIT addresses the development of a maintenance plan that a company should adopt in order to prolong the life of an IT system and its components? ďˇ A. Plan and Organize ďˇ B. Acquire and Implement ďˇ C. Deliver and Support ďˇ D. Monitor and Evaluate Answer: B Question #63 Which of the following frameworks defines ERM as the discipline by which an organization in any industry assesses, controls, exploits, finances, and monitors risks from all sources for the purpose of increasing the organization's short- and long-term value to its stakeholders? ďˇ A. COSO ERM framework ďˇ B. COBIT ďˇ C. Val IT https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Casualty Actuarial Society framework Answer: D Question #64 Ned is the project manager of the HNN project for your company. Ned has asked you to help him complete some probability distributions for his project. What portion of the project will you most likely use for probability distributions? ďˇ A. Uncertainty in values such as duration of schedule activities ďˇ B. Risk probability and impact matrixes ďˇ C. Bias towards risk in new resources ďˇ D. Risk identification Answer: A Question #65 Walter is the project manager of a large construction project. He'll be working with several vendors on the project. Vendors will be providing materials and labor for several parts of the project. Some of the works in the project are very dangerous so Walter has implemented safety requirements for all of the vendors and his own project team. Stakeholders for the project have added new requirements, which have caused new risks in the project. A vendor has identified a new risk that could affect the project if it comes into fruition. Walter agrees with the vendor and has updated the risk register and created potential risk responses to mitigate the risk. What should Walter also update in this scenario considering the risk event? ďˇ A. Project contractual relationship with the vendor ďˇ B. Project communications plan ďˇ C. Project scope statement ďˇ D. Project management plan Answer: D Question #66 You are the project manager of the NGQQ Project for your company. To help you communicate project status to your stakeholders, you are going to create a stakeholder register. All of the following information should be included in the stakeholder register except for which one? ďˇ A. Stakeholder management strategy ďˇ B. Assessment information of the stakeholders' major requirements, expectations, and potential influence ďˇ C. Stakeholder classification of their role in the project ďˇ D. Identification information for each stakeholder https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: A Question #67 Which of the following stages of the Forrester's IT Governance Maturity Model states that there are no proper IT governance processes, and it is not documented by management as a requirement? ďˇ A. Stage 3-Consistent ďˇ B. Stage 2-Fragmented ďˇ C. Stage 1-Ad hoc ďˇ D. Stage 4-Best practices Answer: C Question #68 Event Management, Problem Management, Access Management, and Request Fulfillment are part of which of the following stages of the Service Lifecycle? ďˇ A. Service Strategy ďˇ B. Service Transition ďˇ C. Continual Service Improvement ďˇ D. Service Operation Answer: D Question #69 You work as a project manager for BlueWell Inc. You have to communicate the causes of risk events to the stakeholders. Which risk diagramming technique you will use to communicate the causes of risk events to project stakeholders? ďˇ A. Project network diagrams ďˇ B. Ishikawa diagrams ďˇ C. Process flow charts ďˇ D. Influence diagrams Answer: B Question #70 Fill in the blank with an appropriate phrase. _______are activities that are dangerous to complete and manage such as construction, electrical work, or manufacturing. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: Pure risks Question #71 What project management plan is most likely to direct the quantitative risk analysis process for a project in a matrix environment? ďˇ A. Risk management plan ďˇ B. Staffing management plan ďˇ C. Risk analysis plan ďˇ D. Human resource management plan Answer: A Question #72 The water sanitation project manager has determined that risks associated with handling certain chemicals are too high. He has therefore decided to allow someone else to complete this portion of the project by outsourcing the handling and installation of the chemicals and filter equipment to an experienced contractor. This is an example of which of the following? ďˇ A. Transference ďˇ B. Acceptance ďˇ C. Mitigation ďˇ D. Avoidance Answer: A Question #73 Which of the following outsourcing defines the performance objectives reached by negotiation between the user and the provider of a service, or between an outsourcer and an organization? ďˇ A. Service level Agreement (SLA) ďˇ B. Proposal ďˇ C. Contract ďˇ D. Outsource Answer: A Question #74 Which of the following essential elements of IT Portfolio Investment Management seamlessly initiates the projects, and incorporates the asset and software development costs to improve the accuracy of ongoing portfolio assessment and project prioritization? ďˇ A. Portfolio Management https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ B. Portfolio What-If Planning ďˇ C. Integrated Capability ďˇ D. Portfolio Planning Analysis Answer: C Question #75 Shawn is the project manager of the WHT Project for his company. In this project Shawn's team reports that they have found a way to complete the project work for less cost than what was originally planned. The project team presents a new software that will help to automate the project work. While the software and the associated training costs $25,000 it will save the project nearly $65,000 in total costs. Shawn agrees to the software and changes to the project management plan accordingly. What type of risk response has been used in this instance? ďˇ A. Enhancing ďˇ B. Accepting ďˇ C. Avoidance ďˇ D. Exploiting Answer: D Question #76 Which of the following sub-processes of Capacity Management is concerned with the management of the individual components of the IT Infrastructure? ďˇ A. Capacity Management Reporting ďˇ B. Business Capacity Management ďˇ C. Service Capacity Management ďˇ D. Resource Capacity Management Answer: D Question #77 You work as the project manager for Bluewell Inc. You are working on NGQQ Project for your company. You have completed the risk analysis processes for the risk events. You and the project team have created risk responses for most of the identified project risks. Which of the following risk response planning techniques will you use to shift the impact of a threat to a third party, together with the responses? ďˇ A. Risk transference ďˇ B. Risk avoidance ďˇ C. Risk acceptance ďˇ D. Risk mitigation https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: A Question #78 Which of the following are the advantages of IT Resource Management? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. It develops the IT service quality and effectiveness. ďˇ B. It reduces the IT project complexity. ďˇ C. It reduces the enterprise risks. ďˇ D. It provides customer organization to construct the Request for Proposal (RFP). Answer: ABC Question #79 Which of the following domains of COBIT covers the use of information & technology, and how best it can be used in a company to help achieve the company's goals and objectives? ďˇ A. Deliver and Support ďˇ B. Acquire and Implement ďˇ C. Plan and Organize ďˇ D. Monitor and Evaluate Answer: C Question #80 Fred is the project manager of a large project in his organization. Fred needs to begin planning the risk management plan with the project team and key stakeholders. Which plan risk management process tool and technique should Fred use to plan risk management? ďˇ A. Planning meetings and analysis ďˇ B. Variance and trend analysis ďˇ C. Data gathering and representation techniques ďˇ D. Information gathering techniques Answer: A Question #81 DRAG DROP - Drag and drop the various SSE-CMM levels at the appropriate places. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Select and Place: Answer: Question #82 You are the project manager of a large construction project. Part of the project involves the wiring of the electricity in the building your project is creating. You and the project team determine the electrical work is too dangerous to perform yourself so you hire an electrician to perform the work for the project. This is an example of what type of risk response? ďˇ A. Avoidance ďˇ B. Mitigation ďˇ C. Transference ďˇ D. Acceptance Answer: C Question #83 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Gary is the project manager of the MMQ project for his company. He is working with his project team to plan the risk responses for his project. Sarah, a project team member, does not understand the process that Gary is using to plan the risk responses. Which approach is the preferred method to address project risks and the risk responses? ďˇ A. Risks in the project should be addressed by their probability for creating risk responses. ďˇ B. Risks in the project should be addressed by the organization's risk tolerance for creating risk responses. ďˇ C. Risks in the project should be addressed by their priority for creating risk responses. ďˇ D. Risks in the project should be addressed by their impact for creating risk responses. Answer: C Question #84 Which of the following are the main benefits of using Information Services Procurement Library (ISPL)? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. The contract can be used as a control instrument. ďˇ B. The customer can take advantage of the competitive market. ďˇ C. The proposals of consumers become comparable. ďˇ D. The use of a strategy that really fits the situation. Answer: ABD Question #85 During qualitative risk analysis you want to define the risk urgency assessment. All of the following are indicators of risk priority except for which one? ďˇ A. Risk rating ďˇ B. Warning signs ďˇ C. Cost of the project ďˇ D. Symptoms Answer: C Question #86 What does the T in SWOT analysis mean? ďˇ A. Time ďˇ B. Trial ďˇ C. Threats ďˇ D. Test https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: C Question #87 Which of the following components work to support achievements of the enterprise's mission, strategies, and related business objectives in an internal control system? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Control activities ďˇ B. Control environment ďˇ C. Strategic alignment ďˇ D. Risk assessment Answer: ABD Question #88 Which of the following are the objectives of Service Level Management (SLM)? 1. To negotiate SLAs with the customers and to design services in accordance with the agreed service level targets. 2. Defining, documenting, and agreeing the level of IT Services to be provided. 3. Identifying possible future markets that the Service Provider could operate in. 4. Monitoring, measuring, and reporting the actual level of services provided. 5. Monitoring and improving customer satisfaction. ďˇ A. 1, 2, and 3 only ďˇ B. 1, 2, 4, and 5 only ďˇ C. 1, 2, 3, 4, and 5 ďˇ D. 1, 2, 3, and 5 only ďˇ E. 1 and 2 only Answer: B Question #89 Where can a project manager find risk-rating rules? ďˇ A. Risk management plan ďˇ B. Enterprise environmental factors ďˇ C. Risk probability and impact matrix ďˇ D. Organizational process assets Answer: D Question #90 Software Development Life Cycle (SDLC) is a logical process used by programmers to develop software. Which of the following SDLC phases meets the audit objectives defined below? System and data are validated. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! System meets all user requirements. System meets all control requirements. ďˇ A. Evaluation and acceptance ďˇ B. Programming and training ďˇ C. Initiation ďˇ D. Definition Answer: A Question #91 Ben is the project manager of the CMH Project for his organization. He has identified a risk that has a low probability of happening, but the impact of the risk event could save the project and the organization with a significant amount of capital. Ben assigns Laura to the risk event and instructs her to research the time, cost, and method to improve the probability of the positive risk event. Ben then communicates the risk event and response to management. What risk response has been used here? ďˇ A. Enhance ďˇ B. Transference ďˇ C. Sharing ďˇ D. Exploit Answer: A Question #92 You are the project manager for ABC project. You are planning for when and how human resource requirements will be met. You are working on ____. ďˇ A. Scope management plan ďˇ B. Project organization chart ďˇ C. Staffing management plan ďˇ D. Resource calendar Answer: C Question #93 Jeff works as a project manager for BlueWell Inc. He is determining which risks can affect the project. Which of the following are the inputs to the identify risks process that Jeff will use to accomplish the task? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Risk management plan ďˇ B. Activity cost estimates ďˇ C. Scope baseline https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Risk register Answer: ABC Question #94 Which of the following types of agreement creates a confidential relationship between the parties to protect any type of confidential and proprietary information or a trade secret? ďˇ A. CNC ďˇ B. NDA ďˇ C. SLA ďˇ D. Non-price competition Answer: B Question #95 Gary is the project manager for his organization. He is working with the project stakeholders on the project requirements and how risks may affect their project. One of the stakeholders is confused about what constitutes risks in the project. Which of the following is the most accurate definition of a project risk? ďˇ A. It is an unknown event that can affect the project scope. ďˇ B. It is an uncertain event that can affect at least one project objective. ďˇ C. It is an uncertain event that can affect the project costs. ďˇ D. It is an uncertain event or condition within the project execution. Answer: B Question #96 Which of the following roles is used to ensure that the confidentiality, integrity, and availability of the services are maintained to the levels approved on the Service Level Agreement (SLA)? ďˇ A. The Service Level Manager ďˇ B. The Configuration Manager ďˇ C. The IT Security Manager ďˇ D. The Change Manager Answer: C https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #97 Which of the following are commonly used terms when discussing service improvement outcomes? 1) Improvements 2) Benefits 3) Return On Investment (ROI) 4) Value On Investment(VOI) 5) Resources ďˇ A. 2, 3, and 5 only ďˇ B. 2, 3, 4, and 5 only ďˇ C. 1, 2, 3, and 4 only ďˇ D. 1, 2, and 4 only ďˇ E. 1, 2, 3, 4, and 5 Answer: C Question #98 Which of the following processes contained in the Portfolio Management domain of Val IT identifies resource requirements? ďˇ A. PM5 ďˇ B. PM3 ďˇ C. PM2 ďˇ D. PM4 Answer: C Volume C Question #1 Which of the following processes contained in the Portfolio Management domain of Val IT establishes an investment threshold? ďˇ A. PM4 ďˇ B. PM7 ďˇ C. PM6 ďˇ D. PM5 Answer: C Question #2 Which of the following ISO standards defines the corporate governance of IT? ďˇ A. ISO 9000 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ B. ISO 27001 ďˇ C. ISO 20000 ďˇ D. ISO 38500 Answer: D Question #3 Which of the following concepts aims to limit errors to 1 per million units produced? ďˇ A. TQM ďˇ B. BSC ďˇ C. Six Sigma ďˇ D. TSM Answer: A Question #4 Which of the following processes contained in the Value Governance domain of Val IT establishes the organizational structures? ďˇ A. VG7 ďˇ B. VG9 ďˇ C. VG6 ďˇ D. VG8 Answer: A Question #5 Which of the following activity loops describes improvement of the existing processes? ďˇ A. Loop 3 ďˇ B. Loop 4 ďˇ C. Loop 1 ďˇ D. Loop 2 Answer: D Question #6 Which of the following strategies includes marketing strategies, new product development strategies, HR strategies and, financial strategies? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Operational strategy ďˇ B. Corporate strategy ďˇ C. Business strategy ďˇ D. Functional strategy Answer: D Question #7 Which of the following phases in SDLC transforms the detailed requirements into complete, detailed system design document? ďˇ A. Planning ďˇ B. Design ďˇ C. Development ďˇ D. Initiation Answer: B Question #8 Which of the following phases in SDLC provides the basis for acquiring the resources needed to achieve a solution? ďˇ A. Design ďˇ B. Planning ďˇ C. Development ďˇ D. Initiation Answer: B Question #9 Which of the following phases of IT lifecycle occurs during the concept and idea stages of basic research? ďˇ A. IT asset phase ďˇ B. IT discovery phase ďˇ C. IT process phase ďˇ D. IT project phase Answer: B Question #10 Which of the following steps of development of business case describes the financial benefits analysis? ďˇ A. Step 1 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ B. Step 3 ďˇ C. Step 2 ďˇ D. Step 4 Answer: B Question #11 Which of the following is a practice of forecasting possible risks to the organization and taking steps to mitigate their impact on operations? ďˇ A. Timekeeping ďˇ B. Enterprise risk management ďˇ C. Applicant tracking systems ďˇ D. HR audit Answer: B Question #12 Which of the following risk functions directs the Sarbanes-Oxley Section 302 and 404 assessments? ďˇ A. Operations management ďˇ B. Accounting / Financial compliance ďˇ C. Operational Quality Assurance ďˇ D. Compliance & Ethics Answer: B Question #13 Which of the following project management plans defines the risk identification, analysis, response, and monitoring strategies? ďˇ A. Communications Management Plan ďˇ B. Resource Management Plan ďˇ C. Risk Management Plan ďˇ D. Stakeholder management strategy Answer: C Question #14 Which of the following functions of HR department is liable for policy creation, policy communication, record creation, and HR information systems? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Compensation and benefit ďˇ B. Personnel policy ďˇ C. Analysis and design for work ďˇ D. Support for strategy Answer: B Question #15 Which of the following resource categories includes costs, productivity, availability, and change and configuration management? ďˇ A. Products ďˇ B. Processes ďˇ C. People ďˇ D. Partners Answer: B Question #16 What is the formula for measuring the "usage gap"? ďˇ A. Usage gap = market potential - existing usage ďˇ B. Usage gap = market potential * existing usage ďˇ C. Usage gap = market potential / existing usage ďˇ D. Usage gap = market potential + existing usage Answer: A Question #17 Which of the following individuals/team advises on infrastructure needs and architectural design? ďˇ A. Management committee ďˇ B. CEO ďˇ C. CIO ďˇ D. IT Strategy Committee Answer: A Question #18 In which of the following types of biases does the data collection itself interfere with the process it is measuring? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Interaction ďˇ B. Nonresponse ďˇ C. Perception ďˇ D. Operational Answer: A Question #19 Which of the following categories describes the value added by the process divided by the value of the labor and capital consumed? ďˇ A. Quality ďˇ B. Timeliness ďˇ C. Quantity ďˇ D. Productivity Answer: D Question #20 Which of the following processes uses statistical evidences to determine progress toward specific defined organizational objectives? ďˇ A. Resource management ďˇ B. Risk management ďˇ C. Value delivery ďˇ D. Performance measurement Answer: D Question #21 Which of the following has the tendency or inclination of outlook that is a troublesome source of error in human sensing? ďˇ A. Defect ďˇ B. Bias (of measurement) ďˇ C. Vulnerability ďˇ D. Risk Answer: B Question #22 Which of the following areas tracks the project delivery, and monitors the IT services? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Risk management ďˇ B. Performance measurement ďˇ C. Strategic alignment ďˇ D. Value delivery Answer: B Question #23 Which of the following individuals ensures that IT complies with policy, laws and regulations? ďˇ A. Project sponsor ďˇ B. Compliance officer ďˇ C. Supplier ďˇ D. Business partner Answer: B Question #24 Which of the following IT processes contained in the Deliver and Support domain of COBIT manages the operations? ďˇ A. DS10 ďˇ B. DS13 ďˇ C. DS9 ďˇ D. DS8 Answer: B Question #25 Which of the following individuals supports and contributes to customer's governance approach? ďˇ A. User representatives ďˇ B. Supplier/Business partners ďˇ C. Compliance officers ďˇ D. Project sponsors Answer: B Question #26 Which of the following techniques builds various plausible views of possible futures for a business? ďˇ A. PEST analysis https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ B. Scenario Planning ďˇ C. SWOT Analysis ďˇ D. Market Segmentation Answer: B Question #27 Which of the following areas focuses on aligning with the business and collaborative solutions? ďˇ A. Risk management ďˇ B. Strategic alignment ďˇ C. Resource management ďˇ D. Value delivery Answer: B Question #28 Which of the following techniques seeks to identify the similarities and differences between the groups of customers or users? ďˇ A. Market Segmentation ďˇ B. PEST Analysis ďˇ C. SWOT Analysis ďˇ D. Scenario Planning Answer: A Question #29 Which of the following areas concentrates on optimizing expenses, and providing the value of IT? ďˇ A. Value delivery ďˇ B. Risk management ďˇ C. Resource management ďˇ D. Strategic alignment Answer: A Question #30 Which of the following is used as a tool that assists in risk identification? ďˇ A. Performance report ďˇ B. Status report https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. Variance analysis ďˇ D. Issue log Answer: D Question #31 Which of the following is the amount of risk an enterprise is willing to except in pursuit of its mission? ďˇ A. Threats ďˇ B. Vulnerability ďˇ C. Risk Appetite ďˇ D. Inherent Risk Answer: C Question #32 Which of the following risks refers to the risk associated with an event in the absence of specific controls? ďˇ A. Financial reporting risk ďˇ B. Inherent risk ďˇ C. Operational risk ďˇ D. Compliance risk Answer: B Question #33 Which of the following types of risks includes liability torts, property damage, natural catastrophe and financial risk? ďˇ A. Asset risk ďˇ B. Hazard risk ďˇ C. Operational risk ďˇ D. Strategic risk Answer: B Question #34 Which of the following areas addresses the safeguarding of IT assets, disaster recovery and continuity of operations? ďˇ A. Performance measurement ďˇ B. Risk management ďˇ C. Value delivery https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Strategic alignment Answer: B Question #35 Which of the following individuals/team allocates business resources for effective IT governance? ďˇ A. Business Executive ďˇ B. CEO ďˇ C. CIO ďˇ D. IT Strategy Committee Answer: A Question #36 Which of the following resource categories includes skill sets, certifications, productivity, and morale? ďˇ A. Partners ďˇ B. Processes ďˇ C. People ďˇ D. Products Answer: C Question #37 Which of the following attributes are the COBIT's generic maturity model attributes? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Policies, plans and procedures ďˇ B. Tools and automation ďˇ C. Awareness and communication ďˇ D. Availability and accessibility Answer: ABC Question #38 Which of the following systems come under the category of linking systems to connect an enterprise with its customers and supplier? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Website and portal ďˇ B. Electronic data interchange (EDI)/extensible markup language (XML) data transfer systems https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. Office productivity ďˇ D. E-mail, smartphone, instant messaging Answer: ABD Question #39 Which of the following steps of IT governance program establishes a balanced scorecard mechanism for measuring current performance that are related to the IT governance focus areas? ďˇ A. Define target areas ďˇ B. Develop improvement strategies ďˇ C. Understand and define the risks ďˇ D. Measure results Answer: D Question #40 objectives? ďˇ A. Strategic Alignment ďˇ B. Performance management ďˇ C. Value Delivery ďˇ D. Risk Management Answer: A Question #41 Which of the following steps of IT governance program decides on the highest priority projects that will help to improve the management and governance of the significant gap areas? ďˇ A. Define target areas ďˇ B. Develop improvement strategies ďˇ C. Measure results ďˇ D. Understand and define the risks Answer: B Question #42 In which of the following components of the COSO ERM are the policies and procedures established and implemented to help ensure that the risk responses are effectively carried out? ďˇ A. Control activity https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ B. Risk assessment ďˇ C. Risk response ďˇ D. Event identification Answer: A Question #43 Which of the following factors influence the operating environment of an enterprise? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Mission, vision and values of an enterprise ďˇ B. Outcome measures ďˇ C. Stakeholders values ďˇ D. Industry practices Answer: ACD Question #44 You are using the IT BSC management tool to apply the practices of IT BSC to the IT function. You want to perform the following functions: ⥠Deliver value ⥠Manage cost âĄManage risks âĄAchieve intercompany synergies Which process of the IT BSC Measurement tool will you use? ďˇ A. Future Orientation ďˇ B. Operational excellence ďˇ C. Corporate contribution ďˇ D. Customer Orientation Answer: C Question #45 Which of the following types of benefits are provided by the new IT-driven initiative for IT investment program? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Cost avoidance benefit ďˇ B. Direct benefit ďˇ C. Indirect benefit ďˇ D. Incremental benefit https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: ABD Question #46 Which of the following components of COSO ERM framework encompasses the nature of an enterprise, and sets the basis for how risk is viewed and addressed by an organization people, including risk management philosophy and risk appetite, integrity and ethical values, and the environment in which it operates? ďˇ A. Risk response ďˇ B. Risk assessment ďˇ C. Control activity ďˇ D. Internal environment Answer: D Question #47 Which of the following are the categories of IT-related spending or investments defined by the META group? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Grow the business ďˇ B. Strategic investment ďˇ C. Transform the business ďˇ D. Run the business Answer: ACD Question #48 Which of the following quadrant analysis identifies the key issues of cost containment, predictability or reliability, continual unit cost improvement, and benchmarking for justification? ďˇ A. Low level role (tactical/utility) and business market leader (risk-taker/high growth) ďˇ B. High level role (strategic/transformational) and business market leader (risktaker/high growth) ďˇ C. Low level role (tactical/utility) and business market followers (risk-averse/mature) ďˇ D. High level role (strategic/transformational) and business market followers (riskaverse/mature) Answer: C Question #49 Which of the following functions are performed by the Future Orientation measure of the IT BSC management tool? Each correct answer represents a complete solution. Choose all that apply. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. It focuses on professional learning and development. ďˇ B. It attracts and retains people with key competencies. ďˇ C. It manages operational service performance. ďˇ D. It measures and rewards individual and team performance. Answer: ABD Question #50 Which of the following are the process control objectives for the process controls embedment? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Process ownership ďˇ B. Process goals and objectives ďˇ C. Process repeatability ďˇ D. Process availability Answer: ABC Question #51 Which of the following guides provides risk and value statements to help identify and validate the need to execute each control objective? ďˇ A. IT assurance guide ďˇ B. IT control objectives for Basel II guide ďˇ C. COBIT control practices guide ďˇ D. IT control for Sarbanes Oxley guide Answer: C Question #52 Which of the following quadrant analysis identifies the key issues of anticipation of business needs, service levels over cost, and business enablement and facilitation (removal of obstacles)? ďˇ A. High level role (strategic/transformational) and business market followers (riskaverse/mature) ďˇ B. Low level role (tactical/utility) and business market leader (risk-taker/high growth) ďˇ C. Low level role (tactical/utility) and business market followers (risk-averse/mature) ďˇ D. High level role (strategic/transformational) and business market leader (risktaker/high growth) Answer: B Question #53 Which of the following components of the COSO ERM identifies the required information, captures it, and communicates it in a form and time frame that enable people to carry out their responsibilities? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Information and communication ďˇ B. Internal environment ďˇ C. Monitoring ďˇ D. Objectives setting Answer: A Question #54 Which of the following statements explains the difference between the IT strategy committee and the IT steering committee? ďˇ A. The IT strategy committee assists the executive in the delivery of the IT strategy, whereas the IT steering committee advises the board and management on IT strategy. ďˇ B. The IT strategy committee focuses on implementation, whereas the IT steering committee focuses on the current and future strategic IT issues. ďˇ C. The IT strategy committee aligns and approves the IT architecture, whereas the IT steering committee monitors the resource and priority conflicts. ďˇ D. The IT strategy committee provides direction to management relative to IT strategy, whereas the IT steering committee monitors the resource and priority Answer: D Question #55 Which of the following guides provides guidance on how COBIT is useful in supporting a variety of assurance tasks, along with the recommended testing steps that are aligned with the control practices? ďˇ A. COBIT control practices guide ďˇ B. IT control for Sarbanes Oxley guide ďˇ C. IT assurance guide ďˇ D. IT control objectives for Basel II guide Answer: C Question #56 Which of the following examples are included in the general controls embedded in IT processes and services? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Completeness ďˇ B. Change management ďˇ C. Systems development ďˇ D. Accuracy https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: BC Question #57 Fill in the blank with an appropriate phrase. The ________ creates and delivers momentum in gaining executive support, and provides help to set up messaging that is constantly conveyed to motivate the team, and gives information to the stakeholders. Answer: communication plan Question #58 Which of the following objectives are used by the system to decrease costs or revenues? ďˇ A. Increasing production rates ďˇ B. Decreasing production and operating costs ďˇ C. Improving product quality ďˇ D. Creating new distribution channels Answer: ABC Question #59 Which of the following objectives are used by the system to increase costs or revenues? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Erecting barriers to entry by competitors ďˇ B. Increasing production rates ďˇ C. Improving product quality ďˇ D. Creating new distribution channels Answer: AD Question #60 The testing methods help in shaping opinion against assurance objectives by combining one or more of the test types. Which of the following are the test types used in this process? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Observe ďˇ B. Inspect ďˇ C. Plan ďˇ D. Inquire Answer: ABD https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #61 Which of the following strategic issues in the IFAC report highlight the underlying success and failure of enterprises? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Ability to provide service feedback to providers ďˇ B. Strategy execution ďˇ C. Ability to undertake successful mergers and acquisitions ďˇ D. Clarity of strategy Answer: BCD Question #62 Which of the following guides emphasizes on the fundamental steps for implementing information security within the enterprise, and provides easy to follow guidance for addressing security aspects of IT governance? ďˇ A. COBIT security baseline guide ďˇ B. COBIT control practices guide ďˇ C. IT assurance guide ďˇ D. IT control for Sarbanes Oxley guide Answer: A Question #63 Which of the following quadrant analysis identifies the key issues of working well with other functions, IT value realization over time rather than-just cost, and being business process- focused but solution driven? ďˇ A. Low level role (tactical/utility) and business market leader (risk-taker/high growth) ďˇ B. High level role (strategic/transformational) and business market leader (risktaker/high growth) ďˇ C. High level role (strategic/transformational) and business market followers (riskaverse/mature) ďˇ D. Low level role (tactical/utility) and business market followers (risk-averse/mature) Answer: C Question #64 Which of the following examples are included in the application controls embedded in business process applications? Each correct answer represents a complete solution. Choose all that apply. ďˇ A. Segregation of duties ďˇ B. Validity ďˇ C. Security ďˇ D. Computer operations https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: AB Question #65 Which of the following individuals provides the funding, and want to see the return on their investment and strategic alignment with their strategic objectives? ďˇ A. Compliance officers ďˇ B. Internal auditors ďˇ C. Business partners ďˇ D. Product suppliers Answer: C Question #66 Which of the following processes contained in the Value Governance domain of Val IT defines information requirements? ďˇ A. VG6 ďˇ B. VG4 ďˇ C. VG5 ďˇ D. VG3 Answer: C Question #67 Which of the following is a family of ISO standards for Total Quality Management (TQM)? ďˇ A. ISO 20000 ďˇ B. ISO 9000 ďˇ C. ISO 38500 ďˇ D. ISO 27001 Answer: B Question #68 Which of the following processes contained in the Portfolio Management domain of Val IT creates an overall portfolio view? ďˇ A. PM8 ďˇ B. PM7 ďˇ C. PM9 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. PM10 Answer: C Question #69 Which of the following individuals provides service feedback to the providers? ďˇ A. Compliance officers ďˇ B. User representatives ďˇ C. Project sponsors ďˇ D. Suppliers Answer: B Question #70 Which of the following is a non repetitive set of tasks that lead to the achievement of a new objective? ďˇ A. Plan ďˇ B. Strategy ďˇ C. Techniques ďˇ D. Tactics Answer: A Question #71 Which of the following activity loops emphasizes on monitoring and deciding processes? ďˇ A. Loop 2 ďˇ B. Loop 4 ďˇ C. Loop 3 ďˇ D. Loop 1 Answer: D Question #72 Which of the following activity loops describes creation of new processes? ďˇ A. Loop 3 ďˇ B. Loop 2 ďˇ C. Loop 4 ďˇ D. Loop 1 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: A Question #73 In which of the following editions of COBIT was "Management Guidelines" added? ďˇ A. The third edition ďˇ B. The first edition ďˇ C. The fourth edition ďˇ D. The second edition Answer: D Question #74 Which of the following service delivery processes includes controls, document and record, as its sub processes? ďˇ A. Service level management ďˇ B. Service reporting ďˇ C. Information security management ďˇ D. Capacity management Answer: C Question #75 Which of the following phases of IT lifecycle is governed by a series of stages and gates for managing the lifecycle of projects? ďˇ A. IT project phase ďˇ B. IT process phase ďˇ C. IT asset phase ďˇ D. IT discovery phase Answer: A Question #76 Which of the following service delivery processes has the goal to produce, agreed on, timely, reliable, and accurate reports for the effective communication? ďˇ A. Service level management ďˇ B. Service reporting ďˇ C. Information security management ďˇ D. Capacity management https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: B Question #77 What is the major goal of risk management in the decision-making process? ďˇ A. To manage the clients ďˇ B. To manage the time ďˇ C. To manage the resources ďˇ D. To manage the uncertainty Answer: D Question #78 Which of the following types of risks includes currency risk, liquidity risk, and technology obsolescence? ďˇ A. Asset risk ďˇ B. Operational risk ďˇ C. Hazard risk ďˇ D. Strategic risk Answer: A Question #79 Which of the following risk functions ensures the product/service alignment with the customer requirements? ďˇ A. Accounting ďˇ B. Marketing ďˇ C. Strategic planning ďˇ D. Credit Answer: B Question #80 Which of the following is the process of identifying and assessing factors that may jeopardize the success of a project or the achievement of a goal? ďˇ A. Risk retention ďˇ B. Risk identification ďˇ C. Risk communication ďˇ D. Risk analysis https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Question #81 Which of the following is the process of defining the way work is performed and the tasks that a given job requires? ďˇ A. Selection ďˇ B. Recruitment ďˇ C. Job design ďˇ D. Job analysis Answer: C Question #82 Which of the following functions of HR department is liable for attitude surveys, labor relation, employee handbook, and labor law compliance? ďˇ A. Personnel policy ďˇ B. Employee relation ďˇ C. Compensation and benefit ďˇ D. Analysis and design for work Answer: B Question #83 Which of the following categories measures the health of the organization and the working environment of its employees? ďˇ A. Quantity ďˇ B. Safety ďˇ C. Effectiveness ďˇ D. Efficiency Answer: B Question #84 Which of the following is concerned with fairness and transparency? ďˇ A. Continual Service Improvement ďˇ B. Service Support ďˇ C. Service Strategy ďˇ D. Governance https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D More Questions. Question #1 Which of the following should be the PRIMARY consideration for an enterprise when prioritizing IT projects? ďˇ A. Results of IT performance benchmarks against competitors ďˇ B. Impact on the business due to expected project outcomes ďˇ C. Technical capability of the enterprise to execute the projects ďˇ D. Process owner expectations based on operational benefits Answer: B Reference: https://www.cio.com/article/3294993/prioritizing-projects.html Question #2 Senior management finds that too many projects are currently in-progress and all are experiencing expensive project overruns due to lack of resources. Many of the projects also appear to overlap in their objectives and expected outcomes. Which of the following would BEST streamline the process of evaluating and selecting funding priorities? ďˇ A. Portfolio management ďˇ B. Value governance ďˇ C. Project management ďˇ D. Business case development Answer: D Reference: https://www.isaca.org/resources/news-and-trends/newsletters/cobit-focus/2016/ensuring-value-from-it-enabledďżžinvestments Question #3 The CEO of a large enterprise has announced the commencement of a major business expansion that will double the size of the organization. IT will need to support the expected demand expansion. The CIO should FIRST: ďˇ A. update the IT strategic plan to align with the decision. ďˇ B. recruit IT resources based on the expansion decision. ďˇ C. review the resource utilization matrix. ďˇ D. embed IT personnel in the business units. Answer: C Question #4 Portfolio management in a large enterprise BEST enables which of the following? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Performance management ďˇ B. Risk reduction ďˇ C. Value creation ďˇ D. Human resource optimization Answer: B Question #5 Which of the following BEST defines the IT investment activities an enterprise will undertake when aligning to business goals? ďˇ A. Portfolio management ďˇ B. Procurement management ďˇ C. Project management ďˇ D. Risk management Answer: D Question #6 Which of the following should be the PRIMARY consideration when implementing IT governance in a small, newly established organization? ďˇ A. Approving enterprise architecture and standards ďˇ B. Defining IT project management methodology ďˇ C. Assigning a budget for IT governance applications ďˇ D. Assigning IT roles and responsibilities Answer: D Reference: https://www.isaca.org/resources/news-and-trends/newsletters/cobit-focus/2017/using-cobit-in-governmentďżždepartments Question #7 Which of the following is the BEST method to monitor IT governance effectiveness? ďˇ A. Service level management ďˇ B. Balanced scorecard ďˇ C. Risk control self-assessment ďˇ D. Strengths, weaknesses, opportunities, and threats (SWOT) analysis Answer: B Reference: https://www.isaca.org/resources/isaca-journal/issues/2016/volume-6/performance-measurement-metrics-for-itďżžgovernance https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #8 An internal auditor conducts an assessment of a two-year-old IT risk management program. Which of the following findings should be of MOST concern to the CIO? ďˇ A. Organizational responsibility for IT risk management is not clearly defined. ďˇ B. IT risk training records are not properly retained in accordance with established schedules. ďˇ C. None of the members of the IT risk management team have risk management-related certifications. ďˇ D. Only a few key risk indicators identified by the IT risk management team are being monitored and the rest will be on a phased schedule. Answer: D Question #9 An enterprise has discovered that there is significant duplication of IT investments. Which of the following would be MOST helpful in addressing this issue? ďˇ A. Establishing an IT steering committee ďˇ B. Delegating IT investment decisions to centralized IT ďˇ C. Maintaining an inventory of IT investments ďˇ D. Increasing the frequency of IT investment audits Answer: A Question #10 A regulatory audit assessed an enterprise's main transactional application as noncompliant. In addition to fines and required corrections, an agreement was reached to implement a set of governance controls over IT. Accountability for these controls is BEST assigned to which of the following? ďˇ A. Internal audit director ďˇ B. CIO ďˇ C. The board of directors ďˇ D. Application users Answer: A Question #11 An enterprise is planning a change in business direction. As a result, IT risk will significantly increase. Which of the following should be the CIO's FIRST course of action? ďˇ A. Plan for the corresponding IT reorganization. ďˇ B. Recommend delaying the business change. ďˇ C. Report the risk to executive management. ďˇ D. Implement IT changes to align with the plan. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Question #12 Which of the following is the GREATEST expected strategic organizational benefit from the standardization of technical platforms? ďˇ A. Reduces IT operational training costs ďˇ B. Reduces response time ďˇ C. Meets regulatory compliance requirements ďˇ D. Optimizes infrastructure investments Answer: D Reference: https://books.google.com.pk/books?id=odC_AQAAQBAJ&pg=PA167&lpg=PA167&dq=enterprise+IT+expected+strat egic+organizational+benefit+from +the+standardization+of+technical +platforms&source=bl&ots=KnpTgkPPsb&sig=ACfU3U3fIFhOpMt81n2_xEoKhLtDFBmv8g&hl=en&sa=X&ved=2ahUKE wjegNiP6PfpAhWOh1wKHQB4AX8Q6AE wCXoECAcQAQ#v=onepage&q=enterprise%20IT%20expected%20strategic%20organizational%20benefit%20from% 20the%20standardization%20of% 20technical%20platforms&f=false Question #13 Which of the following would be the BEST way for an enterprise to address new legal and regulatory requirements applicable to IT? ďˇ A. Benchmark how other IT organizations are treating the new requirements. ďˇ B. Adopt a zero-tolerance approach for noncompliance with regulatory matters. ďˇ C. Treat as a risk to be assessed before developing a response. ďˇ D. Use a cost-benefit analysis to determine if compliance is warranted. Answer: D Question #14 Which of the following is MOST critical for sustaining a newly implemented IT governance program? ďˇ A. Launch an enterprise-wide IT governance awareness program. ďˇ B. Designate a board representative to sponsor the IT governance program. ďˇ C. Ensure that there are IT policies, procedures, and standards in place. ďˇ D. Benchmark the program periodically against industry peers. Answer: C Question #15 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! An enterprise decides to accept the IT risk of a subsidiary located in another country even though it exceeds the enterprise's risk appetite. Which of the following would be the BEST justification for this decision? ďˇ A. Local market common practices ďˇ B. Risk framework alignment ďˇ C. Technical gaps among subsidiaries ďˇ D. Compliance with local regulations Answer: C Question #16 The board of directors of an enterprise has questioned whether the business is focused on optimizing value. The IT strategy committee's BEST action to address the board's concern is to: ďˇ A. initiate reporting and review of key IT performance metrics. ďˇ B. form a technology council to monitor the efficiency of project implementation. ďˇ C. conduct a portfolio review to assess the benefits realization of IT investments. ďˇ D. conduct a benchmark to assess IT value relative to competitors. Answer: A Question #17 Ă ĂÂĄĂâ˘ĂĹž determines the enterprise is lagging behind its competitors in consumer mobile offerings, and mandates an aggressive rollout of several new mobile services within the next 12 months. To ensure the IT organization is capable of supporting this business objective, the enterprise's CIO should FIRST: ďˇ A. procure contractors with experience in mobile application development. ďˇ B. task direct reports with creating training plans for their teams. ďˇ C. create a sense of urgency with the IT team that mobile knowledge is mandatory. ďˇ D. request an assessment of current in-house mobile technology skills. Answer: D Question #18 Following a merger of two major corporations, the new strategic goal is "One business function. One IT system." Which of the following should be the FIRST step to achieve this goal? ďˇ A. Form a combined IT steering committee. ďˇ B. Document requirements for each business function. ďˇ C. Create a standard enterprise architecture. ďˇ D. Define service level agreements with each business function. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: B Question #19 Which of the following is the BEST approach to ensure IT technical competencies support the enterprise? ďˇ A. Ensure there is adequate budget for IT technical training. ďˇ B. Determine training requirements from customer service satisfaction surveys. ďˇ C. Align training requirements to the capabilities needed to support the business strategy. ďˇ D. Hold annual job fairs targeting new graduates in IT technical fields. Answer: C Reference: https://www.mckinsey.com/~/media/McKinsey/Industries/Financial%20Services/Our%20Insights/Nextďżžgen%20technology%20transformation%20in% 20financial%20services/Next-gen-technology-transformation-in-financial-services.ashx Question #20 A data governance strategy has been defined by the IT strategy committee which includes privacy objectives related to access controls, authorized use, and data collection. Which of the following should the committee do NEXT? ďˇ A. Mandate the creation of a data privacy policy. ďˇ B. Establish a data privacy budget. ďˇ C. Perform a data privacy impact assessment. ďˇ D. Mandate data privacy training for employees. Answer: A Question #21 Once an IT governance framework has been defined, which of the following is the MOST effective approach to align IT to business objectives? ďˇ A. Auditing the alignment of IT to business objectives regularly ďˇ B. Reviewing the return on investment of IT initiatives on a regular basis ďˇ C. Establishing a cross business unit committee to prioritize IT investment ďˇ D. Reporting IT investment and performance to senior management regularly Answer: A Reference: https://books.google.com.pk/books?id=r2e7NmwoFGoC&pg=PA137&lpg=PA137&dq=Once+an+IT+governance+fra mework+has+been+defined, +which+of+the+following+is+the+MOST+effective+approach+to+align+IT+to+business +objectives&source=bl&ots=tz7jATmLvQ&sig=ACfU3U1dkpiL5L1JJLfyOORIf9gBtlFSDQ&hl=en&sa=X&ved=2ahUKEwj Cqv7_- ffpAhXGN8AKHSOpDoAQ6AEwCnoECAkQAQ#v=onepage&q=Once%20an%20IT%20governance%20framework%20h as%20been%20defined%2C%20which% https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! 20of%20the%20following%20is%20the%20MOST%20effective%20approach%20to%20align%20IT%20to%20busines s%20objectives&f=false Question #22 An IT governance committee is defining a risk management policy for a portfolio of IT-enabled investments. Which of the following should be the PRIMARY consideration when developing the policy? ďˇ A. Risk appetite of the enterprise ďˇ B. Risk management framework ďˇ C. Value obtained with minimum risk ďˇ D. Possible investment failures Answer: B Question #23 A contracted company employs key IT systems operational personnel to oversee technology used to manage a critical line of business. Management is concerned that a mass resignation by many disgruntled personnel may lead to a shutdown of these key systems. Which of the following should be the PRIMARY responsibility of IT governance to address this risk? ďˇ A. Renegotiate employment agreements to lessen the likelihood of a mass resignation. ďˇ B. Cross train management to assume support of the technology. ďˇ C. Develop a resourcing strategy that quickly replaces staff. ďˇ D. Survey key support staff to determine what is causing them to be disgruntled. Answer: D Question #24 A CIO determines IT investment management processes are not fully realizing the benefits identified in business cases. Which of the following would be the BEST way to prevent this issue? ďˇ A. Document lessons learned throughout the investment life cycle. ďˇ B. Perform stage-gate reviews throughout the life cycle of each project. ďˇ C. Evaluate the delegation of investment approval authorities. ďˇ D. Establish a requirement for CIO review and approval of each business case. Answer: A Question #25 How does an enterprise benefit from implementing a set of key risk indicators (KRIs)? ďˇ A. The set of KRIs remains relevant over time. ďˇ B. Risk exposures are monitored to ensure they remain within risk appetite. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. The need for a formal risk and control assessment program is eliminated. ďˇ D. The frequency of risk data gathering and reporting is minimized. Answer: B Reference: https://www.metricstream.com/insights/Key-Risk-indicators-ERM.htm Question #26 A large retail chain realizes that while there has not been any loss of data, IT security has not been a priority and should become a key goal for the enterprise. What should be the FIRST high-level initiative for a newly created IT strategy committee in order to support this business goal? ďˇ A. Modernizing internal IT security practices ďˇ B. Identifying gaps in information asset protection ďˇ C. Recruiting and training qualified IT security staff ďˇ D. Defining data archiving and retrieval policies Answer: B Question #27 A multinational enterprise recently purchased a large company located in a different country. When introducing the concept of governance to the new acquisition, it is MOST important that executive management recognize: ďˇ A. the use of international standards. ďˇ B. language differences. ďˇ C. globally recognized good practices. ďˇ D. the impact of cultural changes. Answer: C Question #28 The MOST effective way to ensure that IT supports the agile needs of an enterprise is to: ďˇ A. implement open source systems. ďˇ B. outsource infrastructure management. ďˇ C. develop a robust enterprise architecture. ďˇ D. perform process modeling. Answer: D Question #29 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! From an IT governance perspective, which of the following would be the MOST significant impact of moving all IT applications to an external Software as a Service (SaaS) cloud provider? ďˇ A. The necessity to update key risk indicators (KRIs) ďˇ B. The integration of the IT department with business lines ďˇ C. The improvement of IT service alignment with business ďˇ D. The shift from service delivery to service management Answer: C Question #30 Which of the following is the MOST important driver of IT governance? ďˇ A. Management transparency ďˇ B. Technical excellence ďˇ C. Effective internal controls ďˇ D. Quality measurement Answer: A Question #31 When developing an IT strategic plan that supports an enterprise's business goals, which of the following should be done FIRST? ďˇ A. Understand the current vision. ďˇ B. Perform a business impact analysis. ďˇ C. Ensure that IT drives business goals. ďˇ D. Analyze benchmarking data. Answer: B Reference: https://www.infoentrepreneurs.org/en/guides/strategic-planning/ Question #32 Prior to decommissioning an IT system, it is MOST important to: ďˇ A. assess compliance with environmental regulations. ďˇ B. review the media disposal records. ďˇ C. assess compliance with the retention policy. ďˇ D. review the data sanitization records. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Question #33 An enterprise is trying to increase the maturity of its IT process from being ad hoc to being repeatable. Which of the following is the PRIMARY benefit of this change? ďˇ A. Required outcomes are more frequently achieved. ďˇ B. Process performance is measured in business terms. ďˇ C. Required outcomes are mapped to business objectives. ďˇ D. Process optimization is embedded across the organization. Answer: A Reference: https://books.google.com.pk/books?id=1iZ3qWnLU0oC&pg=PA218&lpg=PA218&dq=increase+the+maturity+of+its+ IT+process+from+being+ad+hoc +to+being+repeatable&source=bl&ots=u6T_F9VL-V&sig=ACfU3U0bLAxWfJhgn10- z1Qk0syhD_HCFw&hl=en&sa=X&ved=2ahUKEwjhn43L2fnpAhVC_qQKHRagBNcQ6AEwD3oECAQQAQ#v=onepage&q =increase%20the%20maturity%20of% 20its%20IT%20process%20from%20being%20ad%20hoc%20to%20being%20repeatable&f=false Question #34 Which of the following entities is structured PRIMARILY to ensure goals and objectives are aligned between IT and the business? ďˇ A. Board of directors ďˇ B. Portfolio management committee ďˇ C. Change advisory board ďˇ D. IT strategy committee Answer: A Reference: https://courses.lumenlearning.com/boundless-management/chapter/principles-of-management/ Question #35 A recent audit of IT investments has found that while initial returns meet expectations, benefits realization declines more than expected over time. Which of the following is the BEST way to address this situation? ďˇ A. Standardize resource monitoring approaches. ďˇ B. Institute project quality and performance metrics. ďˇ C. Establish key risk indicators (KRIs). ďˇ D. Institute regular business case updates and reviews. Answer: D Reference: https://www.pmi.org/learning/library/guidelines-successful-benefits-realization-9909 Question #36 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! An enterprise's IT department has been operating independently without regard to business concerns, leading to misalignment between business and IT. The BEST way to establish alignment would be to require: ďˇ A. business to help define IT goals. ďˇ B. IT to define business objectives. ďˇ C. business to fund IT services. ďˇ D. IT and business to define risks. Answer: A Question #37 Which of the following are the MOST critical enablers for implementing IT governance in an enterprise? ďˇ A. Involvement of IT strategy and steering committees ďˇ B. Assigning roles and responsibilities for IT governance ďˇ C. Commitment and promotion by senior management ďˇ D. Prioritizing IT projects and funding for IT governance Answer: C Reference: https://www3.pinkelephant.com/articles/The7EnablersandConstraintsofITSMv1.PDF Question #38 A business unit is planning to replace an existing IT legacy solution with a hosted Software as a Service (SaaS) solution. However, business management is concerned that stored data will be at risk. Which of the following would be the MOST effective way to reduce the risk associated with the SaaS solution? ďˇ A. Include risk-related requirements in the SaaS contract. ďˇ B. Create key risk indicators for the SaaS solution. ďˇ C. Redefine the risk appetite and risk tolerance. ďˇ D. Research the technology and identify potential security threats. Answer: A Question #39 Which of the following would be MOST helpful in gaining executive support for an IT-enabled business initiative? ďˇ A. Framing the in terms of impact to business value ďˇ B. Presenting a comprehensive risk management plan ďˇ C. Providing examples of risks realized by competitors for similar initiatives ďˇ D. Presenting key findings of a business impact analysis conducted by IT managers https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Question #40 An enterprise is planning to implement several strategic initiatives that will require the acquisition of new IT systems. Which of the following would BEST enable the IT steering committee to prioritize proposed initiatives based on business objectives? ďˇ A. IT strategic management ďˇ B. Project management ďˇ C. Enterprise architecture management ďˇ D. Project portfolio management Answer: C Question #41 An IT governance committee recently received a report indicating a scarcity of key IT skills in the marketplace to meet the core needs of the business. Reviewing which of the following would BEST help the committee respond to this situation? ďˇ A. IT balanced scorecard ďˇ B. Outsourcing strategy ďˇ C. IT strategic plan ďˇ D. Human resource strategy Answer: D Question #42 An enterprise has decided to create its first mobile application. The IT director is concerned about the potential impact of this initiative. Which of the following is the MOST important input for managing the risk associated with this initiative? ďˇ A. Business requirements ďˇ B. IT risk scorecard ďˇ C. Enterprise risk appetite ďˇ D. Enterprise architecture Answer: A Question #43 Senior management has made a decision to automate a number of key controls due to concerns that current IT risk controls are overly cumbersome and adversely impacting IT agility. Which of the following should be required FIRST to facilitate this process? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Control gap analysis ďˇ B. Control self-assessments ďˇ C. Controls optimization ďˇ D. Cost-benefit analysis Answer: D Reference: https://resources.infosecinstitute.com/itac-planning/#gref Question #44 The IT function received only 50% of the requested funding to support the IT strategy for new business initiatives. Which of the following is the CIO's MOST important course of action before considering alternative resource options? ďˇ A. Prioritize the portfolio. ďˇ B. Terminate less visible maintenance projects. ďˇ C. Develop a new balanced scorecard. ďˇ D. Conduct a cost-benefit analysis. Answer: A Reference: https://hbr.org/1980/07/strategic-management-for-competitive-advantage Question #45 A business case indicates an enterprise would reduce costs by implementing a bring your own device (BYOD) program allowing employees to use personal devices for e-mail. Which of the following should be the FIRST governance action? ďˇ A. Assess the enterprise architecture. ďˇ B. Update the BYOD policy. ďˇ C. Update the network infrastructure. ďˇ D. Assess the BYOD risk. Answer: A Question #46 An enterprise has decided to implement an enterprise resource planning (ERP) system to achieve operating and cost efficiencies through global IT standardization. The business units are resistant because they are used to operating autonomously. The CEO has instructed the CIO to move quickly with the implementation to force acceptance with business unit leaders. Which of the following should be the CIO's FIRST step? ďˇ A. Request funding from the CEO to hire ERP consultants. ďˇ B. Ask the CEO to be the sponsor of the program. ďˇ C. Engage a reluctant business unit to conduct a proof-of-concept pilot. ďˇ D. Build a governance framework for identifying non-standard processes. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Question #47 Which of the following is MOST critical to have in place before management can establish an IT risk assessment and response approach? ďˇ A. A portfolio of IT investments ďˇ B. Defined roles and responsibilities ďˇ C. Historic data on risk events ďˇ D. A balanced scorecard Answer: B Question #48 An IT audit report indicates that a lack of IT employee risk awareness is creating serious security issues in application design and configuration. Which of the following would be the BEST key risk indicator (KRI) to show progress in IT employee behavior? ďˇ A. Results of application security testing ďˇ B. Results of application security awareness training quizzes ďˇ C. Number of reported security incidents ďˇ D. Number of IT employees attending security training sessions Answer: C Question #49 An enterprise can BEST assess the benefits of a new IT project through its life cycle by: ďˇ A. calculation of the total cost of ownership. ďˇ B. calculation of the net present value. ďˇ C. periodic review of the business case. ďˇ D. periodic measurement of the project slip rate. Answer: C Question #50 Which of the following is the MOST important objective of IT program portfolio management? ďˇ A. Reduced technology costs ďˇ B. Reduced project management costs ďˇ C. Improved IT service delivery ďˇ D. Appropriate investment mix https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Reference: https://www.northeastern.edu/graduate/blog/project-management-vs-portfolio-management-vs-programďżžmanagement/ Question #51 Which of the following is the BEST way for the CIO to ensure senior business management understands the current IT risk profile? ďˇ A. Present an aggregated view of risk. ďˇ B. Present the updated risk register. ďˇ C. Present a detailed list of risk findings. ďˇ D. Present a list of scheduled risk mitigation actions. Answer: A Question #52 Besides the mitigation of IT risk, which of the following is the PRIMARY outcome of IT governance? ďˇ A. Control of IT processes ďˇ B. Meeting of IT financial goals ďˇ C. Resolution of IT audit findings ďˇ D. Value delivery of IT to the business Answer: D Reference: https://www2.deloitte.com/content/dam/Deloitte/co/Documents/risk/InteligenciaFrentealRiesgo/No.6- RiskIntelligenceCIO.pdf Question #53 Despite an adequate training budget, IT staff are not keeping skills current with emerging technologies critical to the enterprise. The BEST way for the enterprise to address this situation would be to: ďˇ A. establish an agreed-upon skills development plan with each employee. ďˇ B. allow staff to attend technology conferences. ďˇ C. create a standard-setting center of excellence. ďˇ D. assign human resources (HR) to develop an IT skills matrix. Answer: D Question #54 The PRIMARY reason a CIO and IT senior management should stay aware of the business environment is to: ďˇ A. measure efficiency of IT resources. ďˇ B. revisit prioritization of IT projects. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. re-assess the IT investment portfolio. ďˇ D. adjust IT strategy as needed. Answer: A Question #55 Which of the following aspects of the transition from X-rays to digital images would be BEST addressed by implementing information security policy and procedures? ďˇ A. Establishing data retention procedures ďˇ B. Training technicians on acceptable use policy ďˇ C. Minimizing the impact of hospital operation disruptions on patient care ďˇ D. Protecting personal health information Answer: D Question #56 To enable consistent assessment of candidate program investments for inclusion into the IT portfolio, it is MOST important to identify: ďˇ A. an IT balanced scorecard. ďˇ B. the impact on enterprise architecture. ďˇ C. common selection criteria. ďˇ D. currently available resources. Answer: A Reference: http://businessit.biz/bit_share/VAL%20IT/VAL%20IT.pdf Question #57 What information is MOST important to include when reporting key risk indicators to the board of directors? ďˇ A. The effect of emerging risk trends on current risk exposure ďˇ B. Risk appetite, risk threshold and risk tolerance ďˇ C. Classification of current business risk ďˇ D. Costs and resource needs related to risk mitigation measures Answer: A Question #58 The board of directors of a major retail chain wants to know what capabilities are in place to prevent customer credit card data from being hacked. Which of the following should be established to provide useful information about a potential future event? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Risk tolerance ďˇ B. Lead indicators ďˇ C. Lag indicators ďˇ D. Performance indicators Answer: B Question #59 Several experienced IT resources have been hired away by a competitor. These individuals created and managed a business critical system that gave the enterprise a market advantage. Which of the following should be the PRIMARY concern of the system's business owner? ďˇ A. The impact on morale of the remaining IT employees ďˇ B. The competitor hiring additional IT employees from the enterprise ďˇ C. Whether access to the system and data has been adequately revoked ďˇ D. Whether remaining staff are able to maintain the quality of the system Answer: D Question #60 An enterprise has a large backlog of IT projects. The current strategy is to execute projects as they are submitted, but executive management does not believe this method is optimal. Which of the following is the MOST important action to address this concern? ďˇ A. Establish a performance dashboard that determines business value. ďˇ B. Create a combined business/IT committee to determine project prioritization. ďˇ C. Implement a methodology to prioritize projects based on resource availability. ďˇ D. Implement stage-gating to determine the value of each project. Answer: D Question #61 An enterprise's board of directors can BEST manage enterprise risk by: ďˇ A. mandating board-approved enterprise risk management (ERM) modifications. ďˇ B. requiring the establishment of an enterprise-wide program management office. ďˇ C. ensuring the cost-effectiveness of the internal control system. ďˇ D. requiring the establishment of an enterprise risk management (ERM) framework. Answer: D Reference: https://www.coso.org/documents/COSOBoardsERM4pager-FINALRELEASEVERSION82409_001.pdf https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #62 An IT investment review board wants to ensure that IT will be able to support business initiatives. Each initiative is comprised of several interrelated IT projects. Which of the following would help ensure that the initiatives meet their goals? ďˇ A. Verification of initiatives against the architecture ďˇ B. Review of the business case for each initiative ďˇ C. Establishment of portfolio management ďˇ D. Review of project management methodology Answer: C Reference: https://www.pmi.org/learning/library/proven-project-portfolio-management-process-8503 Question #63 Which of the following is MOST critical to support IT governance cultural changes within an organization? ďˇ A. IT governance process manuals ďˇ B. Regularly scheduled governance training ďˇ C. Demonstrated management commitment ďˇ D. Established IT monitoring and measuring Answer: D Question #64 An enterprise has decided to use third-party software for a business process which is hosted and supported by the same third party. The BEST way to provide quality of service oversight would be to establish a process: ďˇ A. to qualify service providers. ďˇ B. for enterprise architecture updates. ďˇ C. for robust change management. ďˇ D. for periodic service provider audits. Answer: A Question #65 In a successful enterprise that is profitable in its marketplace and consistently growing in size, the non-IT workforce has grown by 50% in the last two years. The demand for IT staff in the marketplace is more than the supply, and the enterprise is losing staff to rival organizations. Due to the rapid growth, IT has struggled to keep up with the enterprise, and IT procedures and associated job roles are not well-defined. The MOST critical activity for reducing the impact caused by IT staff turnover is to: ďˇ A. outsource the IT operation. ďˇ B. increase compensation for IT staff. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. hire temporary staff. ďˇ D. document processes and procedures. Answer: D Question #66 A business has outsourced IT operations to several third-party providers, but service level agreements (SLAs) are not clearly defined in all cases. Which of the following is the GREATEST risk to the business? ďˇ A. Third parties could provide overlapping services. ďˇ B. Quality of services is not enforceable. ďˇ C. The scope of work is not clearly defined. ďˇ D. Costs are not measurable. Answer: B Question #67 A large enterprise has been experiencing high turnover of skilled IT personnel, resulting in a significant loss of knowledge within the IT department. Which of the following should be done FIRST to address this problem? ďˇ A. Conduct a survey of current IT staff. ďˇ B. Revise the IT resource management plan. ďˇ C. Update human resources policies and practices. ďˇ D. Develop an incentive scheme for IT employees. Answer: A Question #68 A newly established IT steering committee is concerned whether or not a system is meeting availability objectives. Which of the following will provide the BEST information to make an assessment? ďˇ A. Critical success factors ďˇ B. Balanced scorecard ďˇ C. Performance indicators ďˇ D. Capability maturity levels Answer: D Question #69 Following a major IT incident that resulted in a loss to the enterprise, a CIO is preparing for a meeting with the board of directors to discuss what may have failed internally. Which of the following should the CIO do FIRST to provide assurance to the board? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Review the IT control environment. ďˇ B. Ensure IT and enterprise risk management alignment. ďˇ C. Review the incident response policy. ďˇ D. Verify continuous monitoring is being performed. Answer: B Question #70 A newly appointed CIO has issued a new IT strategic plan. Which of the following would be the MOST effective way for the CIO to ensure the IT management team is held accountable for the delivery of the plan? ďˇ A. Provide management training on IT strategic objectives. ďˇ B. Revise the managers' performance goals to include key objectives. ďˇ C. Enforce disciplinary action for managers if the plan is not delivered. ďˇ D. Update the IT balanced scorecard with key objectives. Answer: B Question #71 Which of the following is the PRIMARY ongoing responsibility of the IT governance function related to risk? ďˇ A. Responding to and controlling all IT risk events ďˇ B. Verifying that all business units have staff skilled at assessing risk ďˇ C. Communicating the enterprise risk management plan ďˇ D. Ensuring IT risk management is aligned with business risk appetite Answer: C Question #72 Which of the following is the BEST outcome measure to determine the effectiveness of IT risk management processes? ďˇ A. Time lag between when IT risk is identified and the enterprise's response ďˇ B. Percentage of business users satisfied with the quality of risk training ďˇ C. Frequency of updates to the IT risk register ďˇ D. Number of events impacting business processes due to delays in responding to risks Answer: A Question #73 The BEST way for a CIO to monitor the alignment between the business and IT strategy is to regularly review: https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. IT services supporting business processes. ďˇ B. the balanced scorecard. ďˇ C. key risk indicators (KRIs). ďˇ D. the risk register. Answer: A Question #74 Which of the following is PRIMARILY achieved through performance measurement? ďˇ A. Process improvement ďˇ B. Benefit realization ďˇ C. Cost efficiency ďˇ D. Transparency Answer: A Question #75 While assessing the feasibility of introducing new IT practices and standards into the IT governance framework, it is CRITICAL to understand an organization's: ďˇ A. maturity of IT processes. ďˇ B. culture. ďˇ C. enterprise architecture. ďˇ D. level of outsourcing. Answer: C Question #76 A new IT initiative is delivered successfully. Which of the following should be updated to reflect the new technology? ďˇ A. Balanced scorecard ďˇ B. IT strategy ďˇ C. IT tactical plan ďˇ D. Enterprise architecture Answer: B Question #77 The MOST beneficial aspect of utilizing an IT risk management framework is that it: ďˇ A. addresses a lack of data in risk reporting. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ B. facilitates the identification of technologies posing the greatest risk to IT. ďˇ C. enables a consistent approach to risk management. ďˇ D. drives inclusion of the technology function in enterprise risk management. Answer: B Question #78 When defining an enterprise governance framework, the PRIMARY determination of the degree to which the framework is principle-based or policy-based is: ďˇ A. enterprise architecture framework. ďˇ B. organizational decision-making style. ďˇ C. IT process maturity. ďˇ D. organizational structure. Answer: D Reference: https://www.isaca.org/resources/isaca-journal/past-issues/2013/it-policy-framework-based-on-cobit-5 Question #79 A company is considering selling products online, and the CIO has been asked to advise the board of directors of potential problems with this strategy. Which of the following would be the CIO's BEST course of action? ďˇ A. Perform a risk assessment. ďˇ B. Review the security framework. ďˇ C. Conduct a return on investment analysis. ďˇ D. Review the enterprise architecture. Answer: B Question #80 After shifting from lease to purchase of IT infrastructure and software licenses, an enterprise has to pay for unexpected lease extensions causing significant cost overruns. The BEST direction for the IT steering committee would be to establish: ďˇ A. a program to annually review financial policy on overruns. ďˇ B. an end-of-life program to remove aging infrastructure from the environment. ďˇ C. budget cuts to compensate for the cost overruns. ďˇ D. a policy to consider total cost of ownership in investment decisions. Answer: D Question #81 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! An enterprise is evaluating a Software-as-a-Service (SaaS) solution to support a core business process. There is no outsourcing governance or vendor management in place. The CEO's FIRST course of action should be to: ďˇ A. establish a contract with the SaaS solution provider. ďˇ B. instruct management to use the standard procurement process. ďˇ C. ensure the service level agreements for service providers are defined. ďˇ D. ensure the roles and responsibilities to manage service providers are defined. Answer: B Question #82 Which of the following would BEST help to ensure timely reporting on risk events and responses to appropriate levels of management? ďˇ A. Corporate directory ďˇ B. Key personnel interviews ďˇ C. Emergency response team ďˇ D. Escalation procedures Answer: A Reference: https://books.google.com.pk/books?id=k_hgAwAAQBAJ&pg=PA43&lpg=PA43&dq=cobit+help+to+ensure+timely+re porting+on+risk+events+and +responses+to+appropriate+levels+of +management&source=bl&ots=f2MF7tvMQB&sig=ACfU3U1F_qwMA3wQlZ2tpcb8bvzR3eUTyw&hl=en&sa=X&ved= 2ahUKEwj4kajJq_zpAhUrDWMBHQu2BWoQ 6AEwB3oECAoQAQ#v=onepage&q=cobit%20help%20to%20ensure%20timely%20reporting%20on%20risk%20event s%20and%20responses%20to% 20appropriate%20levels%20of%20management&f=false Question #83 When developing an IT governance framework, it is MOST important for an enterprise to consider: ďˇ A. stakeholders' support. ďˇ B. information technology risk. ďˇ C. framework development cost. ďˇ D. information technology strategy. Answer: A Question #84 Which of the following would be MOST useful for prioritizing IT improvement initiatives to achieve desired business outcomes? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Portfolio management ďˇ B. Budget variance analysis ďˇ C. IT skills matrix ďˇ D. Enterprise architecture Answer: A Question #85 Which of the following BEST supports an IT strategy committee's objective to align employee competencies with planned initiatives? ďˇ A. Set management goals to hire co-operative work experience students. ďˇ B. Specify minimum training hours required for continuing professional education. ďˇ C. Add achievement of competencies to employee performance goals. ďˇ D. Require balanced scorecard concepts training of all employees. Answer: C Question #86 The IT director of a large project-driven enterprise is concerned that all recently completed IT projects have exceeded their budgets. Which of the following would be the BEST way to address this concern? ďˇ A. Implement portfolio management. ďˇ B. Require monitoring of budget utilization. ďˇ C. Assign business sponsors to active projects. ďˇ D. Implement agile project methodology. Answer: B Question #87 An enterprise is experiencing a pattern of sensitive data breaches. While each breach has been successfully remediated, leadership is concerned about recurrence. What should the leadership team do FIRST? ďˇ A. Require a root cause analysis be performed. ďˇ B. Contact the appropriate regulatory authorities. ďˇ C. Increase the amount of data breach insurance coverage. ďˇ D. Direct IT to research vulnerability management software solutions. Answer: A Question #88 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! A government agency plans to use predictive analytics to improve the quality of its services. The IT director is confident they have selected the right tool and can acquire appropriate resources to support the business need. Which of the following should be the director's NEXT course of action? ďˇ A. Ensure job descriptions are available for newly-hired IT resources. ďˇ B. Ensure IT has the appropriate processes in place. ďˇ C. Implement a balanced scorecard to measure service quality. ďˇ D. Establish a data governance council that includes IT senior management. Answer: C Question #89 During a period of financial crisis, an enterprise is evaluating its IT service strategy. The board of directors recognizes the need to save money without sacrificing the quality of IT services provided. To achieve this objective, the IT strategy committee should FIRST: ďˇ A. re-design IT service management processes. ďˇ B. cancel discretionary IT projects. ďˇ C. reduce the total cost of ownership of IT services. ďˇ D. re-prioritize the IT investment portfolio. Answer: D Question #90 To successfully implement enterprise IT governance, which of the following should be the MAIN focus of IT policies? ďˇ A. Optimizing operational benefits ďˇ B. Enhancing organizational capability ďˇ C. Limiting IT costs ďˇ D. Providing business value Answer: A Question #91 A recent benchmarking analysis has indicated an IT organization is retaining more data and spending significantly more on data retention than its competitors. Which of the following would BEST ensure the optimization of retention costs? ďˇ A. Requiring that all business cases contain data deletion and retention plans ďˇ B. Revalidating the organization's risk tolerance and re-aligning the retention policy ďˇ C. Redefining the retention policy to align with industry best practices ďˇ D. Moving all high-risk and medium-risk data backups to cloud storage https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: B Question #92 An enterprise is undertaking a multi-year portfolio of IT initiatives to replace core accounting systems. The program management team has developed a business case and is defining a roadmap for the initiatives. Of the following, who should be responsible for defining the optimization criteria for the portfolio? ďˇ A. Project management office ďˇ B. Board of directors ďˇ C. Program management team ďˇ D. IT steering committee Answer: C Question #93 An enterprise has entered into a new market which brings additional regulatory compliance requirements. To address these new requirements, the enterprise should FIRST: ďˇ A. update the organization's risk profile. ďˇ B. have executive management monitor compliance. ďˇ C. outsource the compliance process. ďˇ D. appoint a compliance officer. Answer: B Question #94 An IT steering committee is preparing to review proposals for projects that implement emerging technologies. In anticipation of the review, the committee should FIRST: ďˇ A. require a review of the enterprise risk management framework. ďˇ B. understand how the emerging technologies will influence risk across the enterprise. ďˇ C. determine if the IT staff can support the emerging technologies. ďˇ D. require a capacity plan and framework review for the emerging technologies. Answer: A Question #95 The CIO of a large enterprise has taken the necessary steps to align IT objectives with business objectives. The BEST way for the CIO to ensure these objectives are delivered effectively by IT staff is to: ďˇ A. enhance the budget for training based on the IT objectives. ďˇ B. include the IT objectives in staff performance plans. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. include CIO sign-off of the objectives as part of the IT strategic plan. ďˇ D. map the IT objectives to an industry-accepted framework. Answer: D Question #96 An analysis of an organization's security breach is complete. The results indicate that the quality of the code used for updates to its primary customer-facing software has been declining and security flaws were introduced. The FIRST IT governance action to correct this problem should be to review: ďˇ A. the incident response plan. ďˇ B. the change management control framework. ďˇ C. compliance with the user testing process. ďˇ D. the qualifications of developers to write secure code. Answer: A Question #97 Senior leadership is concerned about a recent trend of excessive exceptions to existing controls. Which of the following should be implemented to address this concern? ďˇ A. Continuous monitoring ďˇ B. Independent audits ďˇ C. A control library ďˇ D. Risk awareness training Answer: A Question #98 It has been discovered that multiple business units across an enterprise are using duplicate IT applications and services to fulfill their individual needs. Which of the following would be MOST helpful to address this concern? ďˇ A. IT project roadmap ďˇ B. IT service management ďˇ C. Enterprise architecture ďˇ D. Enterprise risk framework Answer: C Question #99 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! When developing a business case for an enterprise resource planning (ERP) implementation, which of the following, if overlooked, causes the GREATEST impact to the enterprise? ďˇ A. Salvage value of legacy hardware ďˇ B. IT best practices ďˇ C. Interdependent systems ďˇ D. Vendor selection Answer: D Question #100 A regional business unit of a major financial institution is considering the use of a Software as a Service (SaaS) cloud vendor to implement a new system. Which of the following should be performed FIRST? ďˇ A. Update the outsourcing policy. ďˇ B. Investigate on-premise software solutions. ďˇ C. Develop a business case. ďˇ D. Determine if the cloud vendor has a secure data center. Answer: D Question #101 During the implementation phase of a central ERP system, a project manager identifies a significant lack of human capabilities to support the system. The issue is reported to the project sponsor, and the sponsor sends a request for an increase in the budget to the IT steering committee. What should be the IT steering committee's FIRST action? ďˇ A. Require a revised business case. ďˇ B. Approve the budget request. ďˇ C. Provide appropriate training. ďˇ D. Refer back to the project sponsor for resolution. Answer: B Question #102 For a large enterprise, which of the following is the BEST indicator that IT governance has a poor reputation? ďˇ A. Regulatory noncompliance ďˇ B. Low attendance at strategy committee meetings ďˇ C. High turnover of IT staff ďˇ D. Data leakage Answer: A https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #103 An enterprise has committed to the implementation of a new IT governance model. The BEST way to begin this implementation is to: ďˇ A. prioritize how much and where to invest in IT. ďˇ B. identify the role of IT in supporting the business. ďˇ C. define policies for data, applications, and organization of infrastructure. ďˇ D. identify IT services that currently support the enterprise's capability. Answer: C Question #104 Which of the following is the PRIMARY role of the CEO in IT governance? ďˇ A. Evaluating return on investment ďˇ B. Managing the risk governance process ďˇ C. Establishing enterprise strategic goals ďˇ D. Nominating IT steering committee membership Answer: C Reference: https://corporatefinanceinstitute.com/resources/careers/jobs/what-is-a-ceo-chief-executive-officer/ Question #105 Which of the following is a PRIMARY responsibility of the CIO when an enterprise plans to replace its enterprise resource applications? ďˇ A. Ensuring IT architecture requirements are considered ďˇ B. Selecting and vetting application vendors ďˇ C. Determining critical success factors for related projects ďˇ D. Establishing software quality criteria Answer: A Question #106 Upcoming IT-related regulations carry costly penalties for an enterprise. The issuing regulatory agency has a history of weak enforcement. The IT steering committee should FIRST direct management to: ďˇ A. update the enterprise architecture. ďˇ B. perform benchmarking activities. ďˇ C. evaluate the impact of the emerging risk. ďˇ D. develop mitigation plans for noncompliance. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: C Question #107 When establishing a methodology for business cases, it would be MOST beneficial for an enterprise to include procedures for: ďˇ A. addressing required changes outside the business case. ďˇ B. updating the business case throughout its life cycle. ďˇ C. identifying metrics post-implementation to measure project success. ďˇ D. entering the business case into the enterprise architecture. Answer: D Question #108 The PRIMARY focus of a committee tasked with evaluating an IT project portfolio should be to ensure: ďˇ A. a consistent estimation methodology is leveraged. ďˇ B. the enterprise strategy is updated. ďˇ C. consistent selection criteria are applied. ďˇ D. an industry standard capability maturity model is used. Answer: D Question #109 Which of the following issues identified during an IT review is MOST important to address to improve the alignment between the business and IT? ďˇ A. Services in the IT portfolio are not traceable to the IT strategy. ďˇ B. IT strategy reviews are conducted only after business strategy changes. ďˇ C. Business satisfaction surveys are not conducted regularly. ďˇ D. IT dashboards have not been established. Answer: A Question #110 Which of the following is the MOST effective means for IT management to report to executive management regarding the value of IT? ďˇ A. IT process maturity level ďˇ B. Resource assessment ďˇ C. Balanced scorecard ďˇ D. Cost-benefit analysis https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Question #111 When determining the desired maturity levels for IT governance processes, it is MOST important to: ďˇ A. ensure that maturity can be achieved at the lowest cost. ďˇ B. ensure target levels are in line with external competitor benchmarks. ďˇ C. agree on target levels in response to need. ďˇ D. focus on existing strengths as key drivers for the target levels. Answer: D Question #112 Which of the following is the MOST important reason for selecting IT key risk indicators (KRIs)? ďˇ A. Enabling comparison against similar IT KRIs ďˇ B. Increasing the probability of achieving IT goals ďˇ C. Assessing the current IT controls model ďˇ D. Demonstrating the effectiveness of IT risk policies Answer: B Question #113 Which of the following would BEST help a CIO enhance the competencies of an IT business analytics team? ďˇ A. Understanding current staff skill sets and identifying gaps ďˇ B. Defining the IT architecture and identifying training areas ďˇ C. Creating operational processes and identifying resources ďˇ D. Establishing team goals and identifying the proper structure Answer: C Question #114 The BEST way to ensure an IT steering committee meets enterprise objectives is to: ďˇ A. have key business stakeholders represented on the committee. ďˇ B. establish key performance indicators (KPIs). ďˇ C. require a member of the committee to have IT governance expertise. ďˇ D. benchmark against industry best practices. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: B Question #115 Which of the following is the MOST important input for the development of a human resources strategy to address IT skill gaps? ďˇ A. Technology direction of the enterprise ďˇ B. Training budget allocated for IT staff ďˇ C. A recent IT skills matrix ďˇ D. Training effectiveness reports Answer: C Question #116 A hospital's executive steering committee is concerned about the increasing number of cyber attacks on patient data systems across the industry. The committee has asked the CIO to provide regular reporting with information that will help provide better oversight of cyber-related risk to the hospital. Including which of the following in the report would be MOST helpful to the committee? ďˇ A. Status of key risk indicators ďˇ B. Current business impact levels ďˇ C. IT operations gap assessment ďˇ D. Cybersecurity risk benchmarks Answer: B Question #117 Which of the following is the BEST way to provide effective IT risk management? ďˇ A. Implementing a cost-effective mitigation program ďˇ B. Appointing a chief risk officer ďˇ C. Embedding risk management in operations ďˇ D. Establishing an incident management program Answer: A Question #118 Maintaining a list of all potential IT initiatives for implementing the business strategy should be the responsibility of the: ďˇ A. portfolio management function. ďˇ B. individual business units. ďˇ C. chief executive officer (CEO). https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. chief operating officer (COO). Answer: D Question #119 A large enterprise has decided to use an emerging technology that needs to be integrated with the current IT infrastructure. Which of the following is the BEST way to prevent adverse effects to the enterprise resulting from the new technology? ďˇ A. Develop key risk indicators (KRIs). ďˇ B. Develop key performance indicators (KPIs). ďˇ C. Implement service level agreements (SLAs). ďˇ D. Update the risk appetite statement. Answer: B Question #120 An enterprise recognizes that a large percentage of its IT employees are eligible for retirement in the next five years. A significant amount of institutional knowledge resides with retirement-eligible staff. From the board's perspective, which of the following is the GREATEST concern for the enterprise in this situation? ďˇ A. Service delivery to the business ďˇ B. Loss of key IT personnel ďˇ C. Lack of timeline for succession plan ďˇ D. Lack of process documentation Answer: D Question #121 Which of the following groups would be MOST appropriate to decide whether to proceed with an IT-enabled investment at the individual program level? ďˇ A. Business sponsors ďˇ B. Program management office ďˇ C. IT steering committee ďˇ D. Board of directors Answer: C Question #122 Which of the following will BEST enable an enterprise to convey IT governance direction and objectives? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Corporate culture ďˇ B. Business processes ďˇ C. Principles and policies ďˇ D. Skills and competencies Answer: C Question #123 A large enterprise's IT department has identified a new risk management solution that would significantly enhance IT risk monitoring processes. However, there is a business perception that the new solution would not provide a visible benefit to the enterprise. Which of the following is the BEST way to gain business support? ďˇ A. Articulate the business value of the new solution. ďˇ B. Promote the IT benefits and the streamlining of processes. ďˇ C. Provide real time risk reporting to the business. ďˇ D. Obtain sign-off on a reduced headcount over the next five years. Answer: B Question #124 When assessing the impact of a new regulatory requirement, which of the following should be the FIRST course of action? ďˇ A. Update affected IT policies. ďˇ B. Implement new regulatory requirements. ďˇ C. Assess the budget impact of the new regulation. ďˇ D. Map the regulation to business processes. Answer: D Question #125 Before establishing IT key risk indicators, which of the following should be defined FIRST? ďˇ A. IT risk and security framework ďˇ B. IT key performance indicators ďˇ C. IT goals and objectives ďˇ D. IT resource strategy Answer: C Reference: https://bernardmarr.com/default.asp?contentID=1515 Question #126 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Which of the following should be the FIRST step for executive management to take in communicating what is considered acceptable use with regard to personally owned devices for company business? ďˇ A. Post awareness messages throughout the facility. ďˇ B. Develop and disseminate an applicable policy. ďˇ C. Provide training on how to protect data on personal devices. ďˇ D. Require employees to read and sign a disclaimer. Answer: C Question #127 An enterprise's strategic change requires an IT strategic initiative re-evaluation. Which of the following BEST indicates that an established IT governance framework could handle the re-evaluation? ďˇ A. Creation of an IT steering committee to align the IT strategic initiatives to the recent change ďˇ B. Inclusion of IT portfolio management procedures with strategic change review activities ďˇ C. Development of a business case to evaluate the impact of the strategic change ďˇ D. Holding IT investments until an analysis of the strategic change impact was complete Answer: C Question #128 Which of the following BEST indicates that a change management process has been implemented successfully? ďˇ A. Degree of control ďˇ B. Outcome measures ďˇ C. Process performance ďˇ D. Maturity levels Answer: B Question #129 To meet the growing demands of a newly established business unit, IT senior management has been tasked with changing the current IT organization model to service-oriented. With significant growth expected of the IT organization, which of the following is the MOST important consideration when planning for long-term IT service delivery? ďˇ A. The IT organization is able to sustain business requirements. ďˇ B. IT is able to provide a comprehensive service catalog to the business. ďˇ C. The IT service delivery model is approved by the business. ďˇ D. An IT risk management process is in place. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Question #130 Which of the following BEST enables the alignment of IT and enterprise strategy? ďˇ A. Project portfolio management ďˇ B. IT resource planning ďˇ C. IT performance monitoring and reporting ďˇ D. Enterprise compliance audits Answer: B Question #131 Which of the following would provide the BEST input for prioritizing strategic IT improvement initiatives? ďˇ A. Business case evaluation ďˇ B. Business process analysis ďˇ C. Business impact analysis ďˇ D. Business dependency assessment Answer: C Question #132 An enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating inďżžhouse email capabilities. Which of the following IT strategic actions should be triggered by this decision? ďˇ A. Update and communicate data storage and transmission policies. ďˇ B. Develop a data protection awareness education training program. ďˇ C. Monitor outgoing email traffic for malware. ďˇ D. Implement a data classification and storage management tool. Answer: A Question #133 Which of the following is the BEST IT architecture concept to ensure consistency, interoperability, and agility for infrastructure capabilities? ďˇ A. Establishment of an IT steering committee ďˇ B. Standards-based reference architecture and design specifications ďˇ C. Design of policies and procedures ďˇ D. Establishment of standard vendor and technology designations https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: C Question #134 An enterprise is implementing its FIRST mobile sales channel. Final approval for accepting the associated IT risk should be obtained from which of the following? ďˇ A. IT steering committee ďˇ B. Chief information officer ďˇ C. Business sponsor ďˇ D. Risk manager Answer: B Question #135 Who should be accountable for quantifying the business impact of a potential breach of a server containing retail transactions for the last year? ďˇ A. Information systems security officer ďˇ B. Head of retail ďˇ C. Chief risk officer ďˇ D. Chief information officer Answer: A Question #136 The use of an enterprise architecture framework BEST supports IT governance by providing: ďˇ A. key information for IT service level management. ďˇ B. IT standards for application development. ďˇ C. business information for IT capacity planning. ďˇ D. reference models to align IT with business. Answer: A Question #137 Which of the following is the MOST appropriate mechanism for measuring overall IT organizational performance? ďˇ A. IT balanced scorecard ďˇ B. Service level metrics ďˇ C. Maturity model ďˇ D. IT portfolio return on investment https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: A Reference: https://www.researchgate.net/publication/215879518_Measuring_the_Performance_of_IT_Service_Management Question #138 The PRIMARY reason for periodically evaluating IT resource staffing requirements is to: ďˇ A. ensure the enterprise has sufficient resources to address changing business and IT needs. ďˇ B. ascertain the IT function has sufficient skilled staff to maintain daily operations. ďˇ C. verify that human resource recruitment and retention processes meet enterprise IT objectives. ďˇ D. confirm IT-related responsibilities are defined for the enterprise's business and IT staff. Answer: A Question #139 Ă ĂÂĄĂâ˘ĂĹž wants to establish a governance framework to facilitate the alignment of IT and business strategies. Which of the following should be a KEY requirement of this framework? ďˇ A. A service delivery strategy ďˇ B. Defined resourcing levels ďˇ C. A defined enterprise architecture ďˇ D. An outsourcing strategy Answer: C Question #140 Reviewing which of the following should be the FIRST step when evaluating the possibility of outsourcing an IT system? ďˇ A. Outsourcing strategy ďˇ B. IT staff skill sets ďˇ C. Outsourced business processes ďˇ D. Service level agreements (SLAs) Answer: D Question #141 Which of the following should be the PRIMARY goal of implementing service level agreements (SLAs) with an outsourcing vendor? ďˇ A. Establishing penalties for not meeting service levels ďˇ B. Complying with regulatory requirements ďˇ C. Achieving operational objectives https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Gaining a competitive advantage Answer: C Question #142 Of the following, the BEST response to the absence of a data security breach notification by a service provider is to contractually require that: ďˇ A. security incidents identified by the provider be reported. ďˇ B. security related key performance indicators be included in all service level agreements. ďˇ C. security incident information be shared only on a need-to-know basis. ďˇ D. a registry of all security breaches be maintained by the service provider. Answer: A Question #143 Which of the following should be the MOST essential consideration when outsourcing IT services? ďˇ A. Alignment with existing HR policies and practices ďˇ B. Adoption of a diverse vendor selection process ďˇ C. Identification of core and non-core business processes ďˇ D. Compliance with enterprise architecture Answer: C Question #144 A multinational enterprise is planning to migrate to cloud-based systems. Which of the following should be of MOST concern to the risk management committee? ďˇ A. Resource alignment ďˇ B. Security breaches ďˇ C. Regulatory compliance ďˇ D. Cost considerations Answer: C Question #145 In a large enterprise, which of the following should be responsible for the implementation of an IT balanced scorecard? ďˇ A. IT steering committee https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ B. Chief risk officer ďˇ C. Project management office ďˇ D. Chief information officer Answer: C Question #146 The approval of an enterprise risk management framework is the role of the: ďˇ A. chief information officer. ďˇ B. chief risk officer. ďˇ C. IT steering committee ďˇ D. board of directors. Answer: C Reference: https://www.clearrisk.com/risk-management-blog/bid/56487/Establishing-an-Enterprise-Risk-Management-ERMďżžFramework-Enterprise Question #147 The BEST way to determine the effectiveness of an enterprise's IT governance framework is by assessing the: ďˇ A. value of IT contribution. ďˇ B. maturity of IT processes. ďˇ C. application of IT standards. ďˇ D. compliance to IT policy. Answer: B Question #148 A steering committee has been advised by the IT project management office that individual business units are building systems components that could be leveraged by other business units. Instead, identical components are being duplicated across the enterprise. Which of the following committee directives would be the BEST way to reduce the likelihood of this duplication? ďˇ A. Implement stage gate reviews to assess systems. ďˇ B. Establish an enterprise architecture. ďˇ C. Perform an assessment of change management processes. ďˇ D. Review IT system release management practices. Answer: C Question #149 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! To support the enterprise's digital transformation, the CIO has been asked to include an Internet of Things (IoT) component in the IT strategy. Which of the following should be the FIRST consideration? ďˇ A. Ensuring IoT usage in the industry has been analyzed ďˇ B. Ensuring IoT can be used in current revenue streams ďˇ C. Ensuring solution providers and their IoT use cases have been researched ďˇ D. Ensuring initial approvals are limited to small IoT projects to gain experience Answer: A Question #150 A retail enterprise wants to leverage emerging technologies to create a new sales channel for its customers. However, IT has little experience with these technologies and is unsure if the proposed schedule can be met. Which of the following will BEST help to determine IT's ability to meet this need? ďˇ A. Conducting a resource gap assessment ďˇ B. Defining business benefits realization metrics ďˇ C. Reviewing the resource management policy ďˇ D. Developing a target state enterprise architecture Answer: B Question #151 Which of the following should be the MOST important consideration when designing an implementation plan for IT governance? ďˇ A. Roles and responsibilities ďˇ B. Risk tolerance levels ďˇ C. Organization culture ďˇ D. Principle and policies Answer: A Question #152 Once the strategic vision has been established, which of the following would be the BEST activity for supporting the implementation of performance measures? ďˇ A. Document policy requirements. ďˇ B. Document strengths, weaknesses, opportunities, and threats. ďˇ C. Identify key performance indicators (KPIs). ďˇ D. Monitor service level performance. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: B Question #153 Which of the following is MOST critical for the successful implementation of an IT process? ďˇ A. Objectives and metrics ďˇ B. IT process assessment ďˇ C. Process framework ďˇ D. Service delivery process model Answer: C Question #154 An enterprise has made a decision to move some business applications to the public cloud despite being very new to the cloud environment. What is MOST important for the CIO to do to help ensure the success of this initiative? ďˇ A. Review the vendor management framework. ďˇ B. Request a right-to-audit clause in the provider contract. ďˇ C. Require a vulnerability and threat assessment. ďˇ D. Ensure the cloud provider complies with international standards. Answer: D Question #155 Which of the following is the PRIMARY role of an enterprise architecture? ďˇ A. Improves transparency and compliance ďˇ B. Provides a visual perspective of information systems ďˇ C. Improves interoperability and scalability ďˇ D. Ensures continuous innovation Answer: A Question #156 When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should FIRST consider the: ďˇ A. cost burden to achieve compliance. ďˇ B. disruption to normal business operations. ďˇ C. readiness of IT systems to address the risk. ďˇ D. risk profile of the enterprise. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: D Question #157 An enterprise is planning to migrate its IT infrastructure to a cloud-based solution but does not have experience with this technology. Which of the following should be done FIRST to reduce the risk of IT service disruptions when using this new technology? ďˇ A. Evaluate the sourcing options. ďˇ B. Reflect the change in the enterprise architecture (EA). ďˇ C. Implement key performance indicators (KPIs). ďˇ D. Engage an experienced IT consultant to perform the migration. Answer: C Question #158 Which of the following BEST reflects mature risk management in an enterprise? ďˇ A. A regularly updated risk register ďˇ B. Responsive risk awareness culture ďˇ C. Ongoing risk assessment ďˇ D. Ongoing investment in risk mitigation Answer: C Question #159 An IT strategy committee wants to evaluate how well the IT department supports the business strategy. Which of the following is the BEST method for making this determination? ďˇ A. Capability maturity assessment ďˇ B. IT balanced scorecard reporting ďˇ C. IT controls assurance program ďˇ D. Customer survey analysis Answer: A Question #160 From a governance perspective, which of the following is MOST important to enhance in an enterprise undergoing rapid development of a cloud technology? ďˇ A. Change management processes to capture organizational and project changes. ďˇ B. Data restructuring plan to ensure the architecture supports future changes. ďˇ C. IT project dashboard reporting to capture new risk, threats, and scenarios. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Configuration management processes to ensure availability goals are maintained. Answer: D Question #161 A regulatory audit of an IT department has identified discrepancies between processes described in the procedures and what is actually done by system administrators. The discrepancies were caused by recent IT application changes. Which of the following would be the BEST way to prevent the recurrence of similar findings in the future? ďˇ A. Include the update of documentation within the change management framework. ďˇ B. Assign the responsibility for periodic revisions and changes to process owners. ďˇ C. Require each IT employee to confirm compliance with IT procedures on an annual basis. ďˇ D. Establish high-level procedures to minimize process changes. Answer: B Question #162 Which of the following is the MOST important input for designing a development program to help IT employees improve their ability to respond to business needs? ďˇ A. Skills competency assessment ďˇ B. Cost-benefit analysis ďˇ C. Annual performance evaluations ďˇ D. Capability maturity model Answer: A Question #163 The accountability for a business continuity program for business-critical systems is BEST assigned to the: ďˇ A. director of internal audit, ďˇ B. enterprise risk manager. ďˇ C. chief information officer. ďˇ D. chief executive officer. Answer: C Question #164 Which of the following should occur FIRST in the IT investment process? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Analyze the risks and benefits of the investment for each IT project. ďˇ B. Assess each project's impact on the enterprise's investment plan. ďˇ C. Select IT projects that will best support the enterprise's mission. ďˇ D. Analyze IT investments based on past data. Answer: B Question #165 To ensure IT risk is managed in a consistent manner, it is MOST important for IT governance to establish a: ďˇ A. risk management reporting tool to ensure compliance. ďˇ B. balanced scorecard that includes IT risks. ďˇ C. risk management committee to identify IT-related risks. ďˇ D. risk management framework. Answer: C Question #166 An independent consultant has been hired to conduct an ad hoc audit of an enterprise's information security office with results reported to the IT governance committee and the board. Which of the following is MOST important to provide to the consultant before the audit begins? ďˇ A. The scope and stakeholders of the audit ďˇ B. The organizational structure of the security office ďˇ C. The polices and framework used by the security office ďˇ D. Acceptance of the audit risks and opportunities Answer: A Question #167 The PRIMARY reason for using quantitative criteria in developing business cases for IT projects is to: ďˇ A. benchmark project success with similar enterprises. ďˇ B. learn lessons from errors made in past projects. ďˇ C. improve the process of evaluating returns after implementation. ďˇ D. apply other corporate standards to the development project. Answer: C Question #168 A CIO is planning to implement an enterprise resource planning (ERP) system at the request of the business. Of the following, who is accountable for providing sponsorship for the IT-enabled change across the enterprise? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. CIO ďˇ B. CEO ďˇ C. IT strategy committee ďˇ D. Human resource director Answer: C Question #169 Which of the following would a CIO use to present the overall view of IT performance to the board of directors? ďˇ A. Maturity model ďˇ B. Balanced scorecard ďˇ C. Key performance indicators (KPIs) ďˇ D. Key risk indicators (KRIS) Answer: A Question #170 An enterprise wants to implement an IT governance framework to ensure enterprise expectations of IT are met. Which of the following would be the MOST beneficial outcome of implementing the framework? ďˇ A. Optimization of IT performance ďˇ B. Development of IT policies ďˇ C. Creation of an IT balanced scorecard ďˇ D. Establishment of key IT risk indicators Answer: D Question #171 The PRIMARY reason for implementing an IT governance program in an enterprise is to: ďˇ A. comply with regulatory requirements. ďˇ B. balance the demand for information and the ability to deliver. ďˇ C. decrease the scale of investment in information systems due to budgetary controls. ďˇ D. reduce risks due to improved compensating controls. Answer: B Question #172 To help ensure that an IT dashboard effectively conveys the current state of IT to senior management, which of the following is MOST important to establish? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Key performance indicators (KPIs) ďˇ B. Emerging threat analysis reporting ďˇ C. An IT risk awareness program ďˇ D. IT spend against budget Answer: A Question #173 An enterprise has a zero-tolerance policy regarding security. This policy is causing a large number of email attachments to be blocked and is a disruption to the enterprise. Which of the following should be the FIRST governance step to address this email issue? ďˇ A. Obtain senior management input based on identified risk. ďˇ B. Direct the development of an email usage policy. ďˇ C. Recommend business sign-off on the zero-tolerance policy. ďˇ D. Introduce an exception process. Answer: B Question #174 Which of the following is a CIO's BEST approach to ensure IT executes against an approved strategy? ďˇ A. Request IT senior leaders to collectively plan tactics for execution. ďˇ B. Ask project management to define the IT activities for accomplishing the strategy. ďˇ C. Provide specific direction for execution of the tasks across IT. ďˇ D. Have IT leaders independently develop goals for their teams. Answer: B Question #175 Which of the following is the MOST important outcome of a formal, documented IT policy? ďˇ A. Alignment with IT service management ďˇ B. Communication of IT management intent ďˇ C. Mapping of business objectives ďˇ D. Resource optimization for enterprise initiatives Answer: C Question #176 Senior management is concerned about an increase in cybersecurity risk to the enterprise. Which of the following would be MOST helpful in establishing an early warning system to determine which potential threats should be escalated to senior management? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Agreed-upon risk thresholds ďˇ B. A risk appetite statement ďˇ C. Key performance indicators (KPIs) ďˇ D. Patch management logs Answer: A Question #177 An enterprise learns that a new privacy regulation was recently published to protect customers in the event of a breach involving personally identifiable information (PII). The IT risk management team's FIRST course of action should be to: ďˇ A. evaluate the risk appetite for the new regulation. ďˇ B. determine if the new regulation introduces new risk. ďˇ C. assign a risk owner for the new regulation. ďˇ D. define the risk tolerance for the new regulation. Answer: C Question #178 When designing an IT governance framework, the PRIMARY consideration should be to: ďˇ A. comply with external monitoring standards. ďˇ B. ensure stakeholders receive value from IT. ďˇ C. require cost-benefit analysis before implementing controls. ďˇ D. benchmark controls against industry best practices. Answer: C Question #179 The PRIMARY objective of IT resource planning within an enterprise should be to: ďˇ A. maximize value received from IT. ďˇ B. determine risk associated with IT resources. ďˇ C. determine IT outsourcing options. ďˇ D. finalize service level agreements for IT. Answer: A Question #180 A global enterprise is experiencing an economic downturn and is rapidly losing market share. IT senior management is reassessing the core activities of the business, including IT, and the associated resource implications. Management https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! has decided to focus on its local market and to close international operations. A critical issue from a resource management perspective is to retain the most capable staff. This is BEST achieved by: ďˇ A. reviewing current goals-based performance appraisals across the enterprise. ďˇ B. retaining capable staff exclusively from the local market. ďˇ C. ranking employees across the enterprise based on length of service. ďˇ D. ranking employees across the enterprise based on their compensation. Answer: C Question #181 An enterprise developed a new e-business web application designed to broaden its sales base. Internal project management guidelines were followed, but indicators for key goals were not established. Which of the following should be the MAIN concern of the IT steering committee? ďˇ A. It may be difficult to align IT objectives with performance. ďˇ B. Benefits realization may not be properly assessed. ďˇ C. Resources may not be optimally utilized. ďˇ D. Return on investment may be difficult to evaluate. Answer: B Question #182 An IT security team identified a significant weakness in the enterprise's Internet-facing infrastructure. The exposure requires immediate corrective action that is both cost and resource intensive. Which of the following is the MAIN reason why accountability for this risk should be assigned to the board of directors? ďˇ A. The exploit can cause serious disruptions to the enterprise's reputation and profitability. ďˇ B. The board should be aware of risks concerning organizational operations. ďˇ C. Risk ownership at the highest level will ensure risk awareness throughout the enterprise. ďˇ D. The IT organization cannot take ownership for self-identified risks concerning infrastructure security. Answer: C Question #183 Which of the following would be the BEST way for a CIO to assess the consistency of IT processes against industry benchmarks to determine where to focus improvement initiatives? https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ A. Utilizing a capability maturity model ďˇ B. Reviewing key performance measures ďˇ C. Reviewing IT process audit results ďˇ D. Evaluating the current balanced scorecard Answer: C Question #184 An organization requires updates to their IT infrastructure to meet business needs. Which of the following will provide the MOST useful information when planning for the necessary IT investments? ďˇ A. Audit findings ďˇ B. Business user satisfaction metrics ďˇ C. Enterprise architecture ďˇ D. Risk assessment report Answer: A Question #185 As part of the implementation of IT governance, the board of an enterprise should establish an IT strategy committee to: ďˇ A. ensure IT risks inherent in the enterprise strategy implementation are managed. ďˇ B. drive IT strategy development and take responsibility for implementing the IT strategy. ďˇ C. assume governance accountability for the business strategy on behalf of the board. ďˇ D. provide input to and ensure alignment of the enterprise and IT strategies. Answer: C Question #186 A root-cause analysis indicates a major service disruption due to a lack of competency of newly-hired IT system administrators. Who should be accountable for resolving the situation? ďˇ A. HR training director ďˇ B. Chief information officer ďˇ C. HR recruitment manager ďˇ D. Business process owner Answer: C Question #187 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! An IT team is having difficulty meeting new demands placed on the department as a result of a major and radical shift in enterprise business strategy. Which of the following the CIO's BEST course of action to address this situation? ďˇ A. Review the current IT strategy. ďˇ B. Utilize third parties for non-value-added processes. ďˇ C. Align the business strategy with the IT strategy. ďˇ D. Review the IT risk appetite. Answer: C Question #188 Which of the following would BEST help to ensure an IT steering committee is informed of newly emerging risks in critical IT projects? ďˇ A. Requiring regular updates of the risk register for each project ďˇ B. Requiring a summarized report of relevant risks ďˇ C. Reviewing the response for each risk in the log ďˇ D. Conducting periodic reviews of project performance Answer: A Question #189 Which of the following MOST effectively demonstrates operational readiness to address information security risk issues? ďˇ A. Executive management has announced an information security risk initiative. ďˇ B. Procedures have been established for assessing and mitigating information security risks. ďˇ C. IT management has communicated the need for information security risk management to the business. ďˇ D. A policy has been communicated stating enterprise commitment and readiness to address information security risk. Answer: B Question #190 Which of the following should be the CIO's GREATEST consideration when making changes to the IT strategy? ďˇ A. Have key stakeholders been consulted? ďˇ B. Have IT risk metrics been adjusted? ďˇ C. Has the investment portfolio been revised? ďˇ D. Has the impact to the enterprise architecture been assessed? Answer: C https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #191 Senior management wants to promote investment in IT, but is uncertain that associated risks are being properly identified. The BEST way to address this concern is to: ďˇ A. ensure business cases are developed by IT. ďˇ B. engage an external consultant to develop risk scenarios. ďˇ C. assign an IT cost controller to the finance department. ďˇ D. appoint an IT representative to the business risk committee. Answer: D Question #192 An enterprise is contracting with an outsourcing partner for a long-term engagement. The BEST time for the enterprise to plan for the event of contract termination: ďˇ A. developing the initial contract. ďˇ B. either party decides to terminate the contract. ďˇ C. issues surface in the contractual relationship. ďˇ D. planning for the contract as part of business continuity. Answer: C Question #193 The MOST important aspect of an IT governance framework to ensure that IT supports repeatable business processes is: ďˇ A. resource management. ďˇ B. quality management. ďˇ C. risk management. ďˇ D. earned value management. Answer: B Question #194 Which of the following would be the MOST effective way to ensure IT capabilities are appropriately aligned with business requirements for specific business processes? ďˇ A. Issuing a management mandate that IT and business process stakeholders work together ďˇ B. Requiring architecture and design reviews with business process stakeholders ďˇ C. Establishing key performance indicators (KPIs) ďˇ D. Requiring internal IT architecture and design reviews https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: B Question #195 For the first time, the procurement department has requested that IT grant remote access to third-party suppliers. Which of the following is the BEST course of action for IT in responding to the request? ďˇ A. Analyze risks and propose a solution. ďˇ B. Implement a remote access architecture. ďˇ C. Develop a remote access policy. ďˇ D. Issue log-on credentials to third-party suppliers. Answer: A Question #196 Which of the following would BEST help to improve an enterprise's ability to manage large IT investment projects? ďˇ A. Reviewing and evaluating existing business cases ďˇ B. Creating a change management board ďˇ C. Publishing the IT approval process online for wider scrutiny ďˇ D. Implementing a review and approval process for each phase Answer: C Question #197 Which of the following is the BEST approach to assist an enterprise in planning for IT-enabled investments? ďˇ A. Enterprise architecture ďˇ B. Service level management ďˇ C. Task management ďˇ D. IT process mapping Answer: D Question #198 To measure the value of IT-enabled investments, an enterprise needs to identify its drivers as defined by its: ďˇ A. value statements. ďˇ B. service level agreements (SLAs). ďˇ C. business strategy. ďˇ D. technology strategy. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: C Question #199 Which of the following is the BEST way to address concerns associated with outsourcing an IT process? ďˇ A. Implement a business continuity plan. ďˇ B. Perform a risk assessment. ďˇ C. Review the IT governance framework. ďˇ D. Manage service levels. Answer: D Question #200 A CIO has recently been made aware of a new regulatory requirement which may affect IT-enabled business activities. Which of the following should be the CIO's FIRST step in deciding the appropriate response to the new requirement? ďˇ A. Consult with legal and risk experts to understand the requirements. ďˇ B. Confirm there are adequate resources to mitigate compliance requirements. ďˇ C. Consult with the board for guidance on the new requirement. ďˇ D. Revise initiatives that are active to reflect the new requirements. Answer: B Question #201 The risk committee is overwhelmed by the number of false positives included in risk reports. What action would BEST address this situation? ďˇ A. Evaluate key risk indicators. ďˇ B. Adjust IT balanced scorecard. ďˇ C. Conduct a risk assessment. ďˇ D. Change the reporting format. Answer: C Question #202 An enterprise has recently experienced an excessive number of exceptions due to outdated control frameworks. What should the leadership team do FIRST? ďˇ A. Mandate a reassessment of the current control frameworks. ďˇ B. Review the IT control standards. ďˇ C. Mandate strict adherence to control frameworks. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ D. Update the exception review and approval process. Answer: B Question #203 In an effort to reduce operation costs, an enterprise is switching from all internally-hosted applications to a mixture of internally- and externally-hosted applications. Of the following, the risk appetite for this decision would BEST be defined by the: ďˇ A. vendor oversight committee. ďˇ B. board of directors. ďˇ C. chief information security officer. ďˇ D. chief information officer. Answer: C Question #204 IT senior management has just received a survey report indicating that more than one third of the organization's key IT staff plan to retire within the next 12 months. Which of the following is the MOST important governance action to prepare for this possibility? ďˇ A. Request the development of a succession plan. ďˇ B. Engage HR for recruitment of new staff. ďˇ C. Evaluate lower-level staff as succession candidates. ďˇ D. Review motivation drivers for key IT staff. Answer: C Question #205 A CEO of a large enterprise is concerned that risk events are not regularly addressed at the C-suite level unless related to emergency incidents. Which of the following is the BEST way for the CEO to ensure risk events are given sufficient time and attention? ďˇ A. Instruct managers to take ownership for their department's identified risks. ďˇ B. Issue performance objectives that target the elimination of enterprise risks. ďˇ C. Include the of key enterprise risk as an agenda item at board meetings. ďˇ D. Require the development of a risk procedure on how to capture risks. Answer: C Question #206 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! An enterprise is assessing whether to utilize wearable technology. The enterprise has no prior experience with this technology and has asked the chief technology officer (CTO) to assess the impact to the enterprise. The CTO should FIRST: ďˇ A. prioritize wearable technology risk. ďˇ B. understand the enterprise's risk tolerance. ďˇ C. map the business goals to IT risk processes. ďˇ D. create an IT risk scorecard. Answer: B Question #207 An enterprise has an overarching enterprise architecture document. The CIO is concerned that EA is not leveraged in recent IT-enabled investments. Which of the following would BEST help to address these concerns and enforce the leveraging of enterprise architecture? ďˇ A. Require enterprise architecture review at key milestones. ďˇ B. Publish and train on the enterprise architecture document. ďˇ C. Form a team to update enterprise architecture regularly. ďˇ D. Adopt a globally-recognized enterprise architecture framework. Answer: B Question #208 After performing a gap analysis of IT risks and controls capability, the MOST important consideration for the associated risk responses is that they are: ďˇ A. added to the IT balanced scorecard. ďˇ B. approved by executive management. ďˇ C. assessed for severity of impact. ďˇ D. submitted to the audit committee. Answer: C Question #209 A new CEO is made aware of a lack of cooperation between IT and business units and needs to take action to enable more efficient IT delivery of solutions to support the business. What should be the FIRST step to address this concern? ďˇ A. Introduce IT related key performance indicators (KPIs). ďˇ B. Establish business user group training for increased collaboration. ďˇ C. Clarify roles and assign accountabilities for results. ďˇ D. Implement a continuous auditing policy for IT initiatives. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: C Question #210 An IT steering committee is presented with an audit finding that new software applications are delivered on time but consistently have unacceptable levels of defects. Which of the following would be the BEST direction from the committee? ďˇ A. Establish code peer reviews. ďˇ B. Evaluate the change management process. ďˇ C. Implement performance indicators. ďˇ D. Evaluate the quality assurance process. Answer: D Question #211 Which of the following is the BEST indicator of the effectiveness of IT governance in an enterprise? ďˇ A. Project delivery ďˇ B. Value delivery ďˇ C. Residual risk ďˇ D. Resource utilization Answer: B Question #212 Which of the following would be the BEST way for a CIO to enhance security risk management alignment between IT and business? ďˇ A. Facilitate joint workshops for IT and the business on risk assessment techniques. ďˇ B. Analyze benchmark reports to understand the organization's security investments against competitors. ďˇ C. Establish a process in which IT and the business collaborate on risk assessment and mitigation prioritization. ďˇ D. Perform a trend analysis based on security investment levels and business initiatives. Answer: C Question #213 An IT steering committee is concerned that enterprise technologies have grown stagnant and are outdated. Which of the following is the BEST strategy to invest in modem technology? ďˇ A. Redefine the target architecture to define new technologies that can be incorporated into the infrastructure. ďˇ B. Create a new investment category for innovation that becomes a new way for tracking investment decisions/ https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ C. Update the IT human resource management plan to requite training and development for emerging technologies. ďˇ D. Decrease spending on steady state and increase spending on modernization and enhancements. Answer: A Question #214 An enterprise makes an acquisition of a similar entity offering related services. A consequence of the acquisition is a reduction of IT workforce. When addressing human resource allocation, the MOST important IT governance consideration is to: ďˇ A. manage organizational change. ďˇ B. assess 7 skill sets. ďˇ C. monitor team expenditures. ďˇ D. cross-train IT resources. Answer: D Question #215 An enterprise's board of directors has asked the CIO to implement ways to make the IT function more environmentally responsible. Which of the following should be the CIO's FIRST step to ensure continued alignment of IT needs with the requirements of the board? ďˇ A. Create a staff awareness education plan focused on IT environmental responsibility. ďˇ B. Incorporate new environmentally responsible objectives into existing IT goals. ďˇ C. Assess potential environmentally responsible IT initiatives. ďˇ D. Write a business case for an environmentally responsible initiative for IT. Answer: A Question #216 An enterprise has an ongoing issue of corporate applications not delivering the expected benefits due to missing key functionality. As a result, many groups are using spreadsheets and databases instead of approved enterprise applications to store and manipulate information. Which of the following will BEST improve the success rate of future IT initiatives? ďˇ A. Engage the business user community in acceptance testing of acquired applications. ďˇ B. Prohibit the use of non-approved alternate software solutions. ďˇ C. Establish a process for risk and value management. ďˇ D. Engage stakeholders to identify and validate business requirements. Answer: D Question #217 https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! An IT strategy committee has reviewed an audit report indicating sales employees are using personal smartphones to conduct corporate business. Although the committee appreciates the business benefits, it is also concerned with the security risk. To deliver the business benefit, the committee's FIRST recommendation should be to: ďˇ A. update the corporate security policy to include personal devices. ďˇ B. document procedures for securing personal devices. ďˇ C. improve training courses on securing corporate information. ďˇ D. perform a risk assessment on personal device data protection. Answer: D Question #218 Which of the following is the BEST way to implement effective IT risk management? ďˇ A. Minimize the number of IT risk management decision points. ďˇ B. Adopt risk management processes. ďˇ C. Establish a risk management function. ďˇ D. Align with business risk management processes. Answer: B Question #219 Which of the following characteristics would BEST indicate that an IT process is a good candidate for outsourcing? ďˇ A. Operational processes that are well-defined ďˇ B. Non-strategic processes that are not documented ďˇ C. Strategic processes that require expert professionals ďˇ D. Processes with higher risk to the enterprise Answer: B Question #220 Which of the following is the PRIMARY purpose of an effective set of key risk indicators (KRIs)? ďˇ A. Identifying possible future adverse impacts on the enterprise ďˇ B. Evaluating existing technology for risk monitoring capabilities ďˇ C. Establishing executive level buy-in of the risk program ďˇ D. Quantifying the productivity of the risk management team Answer: C https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Question #221 A large bank has completed several acquisitions in the last few years that have resulted in redundant IT applications. To align with the strategic initiative of providing integrated services to customers, the IT steering committee has decided to share data and integrate applications. Which of the following would be MOST important to review in this situation? ďˇ A. IT risk register ďˇ B. Balanced scorecard measures ďˇ C. Enterprise architecture ďˇ D. IT strategic plan Answer: C Question #222 To evaluate IT resource management, it is MOST important to define: ďˇ A. principles for the IT strategy. ďˇ B. responsibilities for executing resource management. ďˇ C. applicable key goals. ďˇ D. IT resource utilization reporting procedures. Answer: B Question #223 Which of the following is the MOST effective measure to assist in the evaluation of IT value delivery? ďˇ A. Actual benefits derived from the achievement of business objectives ďˇ B. Increase in user productivity ďˇ C. Trends in service capacity and availability metrics ďˇ D. Increase in customer satisfaction survey results Answer: A Question #224 Which of the following will BEST help to ensure that the governance of enterprise IT is consistently executed? ďˇ A. Regular review of IT policies and procedures ďˇ B. Defined key risk indicators ďˇ C. Established and monitored IT management processes ďˇ D. Experienced and skilled IT leadership https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Answer: A Question #225 The BEST time to identify metrics to measure the performance of an IT-enabled investment is during: ďˇ A. investment feasibility analysis. ďˇ B. system implementation. ďˇ C. project initiation. ďˇ D. business case development. Answer: D Question #226 An enterprise is concerned that ongoing maintenance costs are not being considered when prioritizing IT-enabled business investments. Which of the following should be the enterprise's FIRST course of action? ďˇ A. Require business cases to have product life cycle information. ďˇ B. Establish a portfolio manager role to monitor and control the IT projects. ďˇ C. Mandate an enterprise architecture review with business stakeholders. ďˇ D. Implement a balanced scorecard for the IT project portfolio. Answer: C Question #227 The IT program manager does not see the value of conducting risk assessments for a new major IT project. The manager is reluctant to cooperate with internal auditors and the newly formed steering committee. Midway through the project, program requirements were changed because the CEO is a friend of a vendor and wants to implement this vendor's new technology. This decision will cause the current IT program budget to be insufficient and will be shown as overspending, After the requirement change request, the IT program manager should FIRST: ďˇ A. report the matter to internal audit as a program deviation to be reviewed. ďˇ B. obtain confirmation from the business and a decision by the steering committee. ďˇ C. align IT with the business and agree to the business request. ďˇ D. request additional funding from the business owner to cover the additional scope. Answer: B Question #228 A business unit within an enterprise has directly contracted with a cloud service provider to process sensitive customer information. The CIO later identifies a serious risk of potential data compromise due to the vendor's insufficient segregation of environments and lack of strong access controls. The FIRST course of action should be to: ďˇ A. immediately suspend sending of data to the cloud service provider. https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! ďˇ B. notify internal audit of the risk. ďˇ C. discuss the risk with the vendor to determine mitigation actions. ďˇ D. inform the business process owner of the risk. Answer: B Question #229 Which of the following would BEST align an enterprise's IT investments with its strategic objectives? ďˇ A. High process maturity score ďˇ B. IT budget and financial statements ďˇ C. Control self-assessment ďˇ D. Portfolio management Answer: A Question #230 To ensure that the process of developing a business case for IT-enabled investments continually supports benefits realization, the benefits expected from investment programs must be actively managed through: ďˇ A. the system development life cycle. ďˇ B. the economic life cycle. ďˇ C. obsolescence planning. ďˇ D. project life cycle. Answer: A https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! https://itexamcertified.com Passing Gauranteed! Multiple Choice Questions A6. Youâve hired a third-party to gather information about your companyâs servers and data. The third-party will not have direct access to your internal network but can gather information from any other source. Which of the following would BEST describe this approach? â A. Backdoor testing â B. Passive footprinting â C. OS fingerprinting â D. Partially known environment A7. Which of these protocols use TLS to provide secure communication? (Select TWO) â A. HTTPS â B. SSH â C. FTPS â D. SNMPv2 â E. DNSSEC â F. SRTP A8. Which of these threat actors would be MOST likely to attack systems for direct financial gain? â A. Organized crime â B. Hacktivist â C. Nation state â D. Competitor A9. A security incident has occurred on a file server. Which of the following data sources should be gathered to address file storage volatility? (Select TWO) â A. Partition data â B. Kernel statistics â C. ROM data â D. Temporary file systems â E. Process table Quick Answer: 33 The Details: 43 Quick Answer: 33 The Details: 44 Quick Answer: 33 The Details: 45 Quick Answer: 33 The Details: 46 6 Practice Exam A - Questions A10. An IPS at your company has found a sharp increase in traffic from all-in-one printers. After researching, your security team has found a vulnerability associated with these devices that allows the device to be remotely controlled by a third-party. Which category would BEST describe these devices? â A. IoT â B. RTOS â C. MFD â D. SoC A11. Which of the following standards provides information on privacy and managing PII? â A. ISO 31000 â B. ISO 27002 â C. ISO 27701 â D. ISO 27001 A12. Elizabeth, a security administrator, is concerned about the potential for data exfiltration using external storage drives. Which of the following would be the BEST way to prevent this method of data exfiltration? â A. Create an operating system security policy to prevent the use of removable media â B. Monitor removable media usage in host-based firewall logs â C. Only allow applications that do not use removable media â D. Define a removable media block rule in the UTM Quick Answer: 33 The Details: 47 Quick Answer: 33 The Details: 48 Quick Answer: 33 The Details: 49 Practice Exam A - Questions 7 A13. A CISO (Chief Information Security Officer) would like to decrease the response time when addressing security incidents. Unfortunately, the company does not have the budget to hire additional security engineers. Which of the following would assist the CISO with this requirement? â A. ISO 27701 â B. PKI â C. IaaS â D. SOAR A14. An insurance company has created a set of policies to handle data breaches. The security team has been given this set of requirements based on these policies: ⢠Access records from all devices must be saved and archived ⢠Any data access outside of normal working hours must be immediately reported ⢠Data access must only occur inside of the country ⢠Access logs and audit reports must be created from a single database Which of the following should be implemented by the security team to meet these requirements? (Select THREE) â A. Restrict login access by IP address and GPS location â B. Require government-issued identification during the onboarding process â C. Add additional password complexity for accounts that access data â D. Conduct monthly permission auditing â E. Consolidate all logs on a SIEM â F. Archive the encryption keys of all disabled accounts â G. Enable time-of-day restrictions on the authentication server Quick Answer: 33 The Details: 50 Quick Answer: 33 The Details: 51 8 Practice Exam A - Questions A15. Rodney, a security engineer, is viewing this record from the firewall logs: UTC 04/05/2018 03:09:15809 AV Gateway Alert 136.127.92.171 80 -> 10.16.10.14 60818 Gateway Anti-Virus Alert: XPACK.A_7854 (Trojan) blocked. Which of the following can be observed from this log information? â A. The victim's IP address is 136.127.92.171 â B. A download was blocked from a web server â C. A botnet DDoS attack was blocked â D. The Trojan was blocked, but the file was not A16. A user connects to a third-party website and receives this message: Your connection is not private. NET::ERR_CERT_INVALID Which of the following attacks would be the MOST likely reason for this message? â A. Brute force â B. DoS â C. On-path â D. Disassociation A17. Which of the following would be the BEST way to provide a website login using existing credentials from a third-party site? â A. Federation â B. 802.1X â C. PEAP â D. EAP-FAST Quick Answer: 33 The Details: 53 Quick Answer: 33 The Details: 54 Quick Answer: 33 The Details: 55 Practice Exam A - Questions 9 A18. A system administrator, Daniel, is working on a contract that will specify a minimum required uptime for a set of Internet-facing firewalls. Daniel needs to know how often the firewall hardware is expected to fail between repairs. Which of the following would BEST describe this information? â A. MTBF â B. RTO â C. MTTR â D. MTTF A19. An attacker calls into a companyâs help desk and pretends to be the director of the companyâs manufacturing department. The attacker states that they have forgotten their password and they need to have the password reset quickly for an important meeting. What kind of attack would BEST describe this phone call? â A. Social engineering â B. Tailgating â C. Watering hole â D. On-path A20. A security administrator has been using EAP-FAST wireless authentication since the migration from WEP to WPA2. The companyâs network team now needs to support additional authentication protocols inside of an encrypted tunnel. Which of the following would meet the network teamâs requirements? â A. EAP-TLS â B. PEAP â C. EAP-TTLS â D. EAP-MSCHAPv2 Quick Answer: 33 The Details: 56 Quick Answer: 33 The Details: 57 Quick Answer: 33 The Details: 58 10 Practice Exam A - Questions A21. Which of the following would be commonly provided by a CASB? (Select TWO) â A. List of all internal Windows devices that have not installed the latest security patches â B. List of applications in use â C. Centralized log storage facility â D. List of network outages for the previous month â E. Verification of encrypted data transfers â F. VPN connectivity for remote users A22. The embedded OS in a companyâs time clock appliance is configured to reset the file system and reboot when a file system error occurs. On one of the time clocks, this file system error occurs during the startup process and causes the system to constantly reboot. Which of the following BEST describes this issue? â A. DLL injection â B. Resource exhaustion â C. Race condition â D. Weak configuration A23. A recent audit has found that existing password policies do not include any restrictions on password attempts, and users are not required to periodically change their passwords. Which of the following would correct these policy issues? (Select TWO) â A. Password complexity â B. Password expiration â C. Password history â D. Password lockout â E. Password recovery Quick Answer: 33 The Details: 59 Quick Answer: 33 The Details: 60 Quick Answer: 33 The Details: 61 Practice Exam A - Questions 11 A24. What kind of security control is associated with a login banner? â A. Preventive â B. Deterrent â C. Corrective â D. Detective â E. Compensating â F. Physical A25. A security team has been provided with a noncredentialed vulnerability scan report created by a thirdparty. Which of the following would they expect to see on this report? â A. A summary of all files with invalid group assignments â B. A list of all unpatched operating system files â C. The version of web server software in use â D. A list of local user accounts A26. A business manager is documenting a set of steps for processing orders if the primary Internet connection fails. Which of these would BEST describe these steps? â A. Communication plan â B. Continuity of operations â C. Stakeholder management â D. Tabletop exercise A27. A security administrator is concerned about data exfiltration resulting from the use of malicious phone charging stations. Which of the following would be the BEST way to protect against this threat? â A. USB data blocker â B. Personal firewall â C. MFA â D. FDE Quick Answer: 33 The Details: 62 Quick Answer: 33 The Details: 63 Quick Answer: 33 The Details: 64 Quick Answer: 33 The Details: 65 12 Practice Exam A - Questions A28. A company would like to protect the data stored on laptops used in the field. Which of the following would be the BEST choice for this requirement? â A. MAC â B. SED â C. CASB â D. SOAR A29. A file server has a full backup performed each Monday at 1 AM. Incremental backups are performed at 1 AM on Tuesday, Wednesday, Thursday, and Friday. The system administrator needs to perform a full recovery of the file server on Thursday afternoon. How many backup sets would be required to complete the recovery? â A. 2 â B. 3 â C. 4 â D. 1Health 11/12 Review for Final Exam Core Concepts - Mental and Emotional Health, Substance Abuse Prevention, Safety and Violence Prevention, Family Life and Human Sexuality, Disease Prevention and Control, Healthy Eating Health Education Skills - goal setting, decision making, accessing information/resources, analyzing influences, communication, self-management, advocacy DIMENSIONS of Wellness - social, spiritual, emotional/mental, environmental, financial, intellectual, multicultural, occupational, physical, sexual RISK factors - anything that increases the risk of disease, injury, or illness. PROTECTIVE factors - anything that decreases the risk of disease, injury, or illness. INTERNAL health factors - health factors that can be either hereditary and genetic or acquired elements -- include smoking and personal diet or eating habits. Example â a genetic predisposition to an illness. EXTERNAL health factors - health factors that are part of the direct outer environment, the geographical location, micro-organisms, socio-economic elements that could affect an individual's health. Example â being unable to afford mental health services. Unit 1- Managing Personal and Community Wellness Explain Maslowâs Hierarchy of Needs in your own words using the image provided. Explain how each Social Determinant of Health may impact a personâs health. Levels of Disease Prevention ⢠PRIMARY The goal is to avoid conditions altogether. ⢠SECONDARY The goal is early detection. ⢠TERTIARY The goal is to minimize the damage (manage). Define the following terms. Fads/Trends Sleep hygiene Driver safety Unit 2- Investigating Social Ecological Factors on Well-Being Socio-Ecological Model â The SEM examines how health behaviors form based on characteristics of individuals, communities, nations and levels in between. Each level overlaps with other levels signifying how the best public health strategies are those that encompass and target a wide range of perspectives. Interpersonal (personal) health vs. intrapersonal (relationship) health Health INEQUITY - systemic, ingrained and unjust barriers that prevent segments of the population from having the opportunity of health leading to health disparity. IMPLICIT BIAS - a form of bias that occurs automatically and unintentionally, that nevertheless affects judgments, decisions, and behaviors. Research has shown implicit bias can contribute to unequal access to quality healthcare, negative patient-provider relationships and interactions; and create mistrust in the healthcare system and practitioners among patients. This can contribute to health disparities. Health DISPARITY - represents a difference in health between populations. It is often used to describe disease burden and other negative health outcomes socially disadvantaged groups may face. Health EQUITY - The opposite of health inequity. It describes a system that supports a high standard of health and healthcare for all people. Racism - Beliefs, attitudes, institutional arrangements, and acts that tend to denigrate individuals or groups because of phenotypic characteristics or ethnic group affiliation. DISCRIMINATION - An unjust differential treatment of a person or a group. PRIVILEGE- The unearned access to resources and social power that are only available to some because of their membership within certain social groups. OPPRESSION is the act of taking away choices from others and can be defined as a system that maintains advantage and disadvantage based on social identities and that acts on multiple levels from interpersonal to institutional and societal. (internalized, interpersonal, institutional, structural) Systematic Oppression - Intentional disadvantage of groups of people based on their identity while advantaging members of dominant group (race, gender, sexual orientation, language, size, ability, etc.). Intersectionality - The complex, cumulative way in which the effects of multiple forms of discrimination (such as racism, sexism, and classism) combine, overlap, or intersect especially in the experiences of marginalized individuals or groups Unit 3- Accessing Resources and Communicating to Support Mental and Emotional Health What is anger? What is anxiety? What is stress? STRESSORS are the things that cause stress. Stressors can be internal and external. A stressor may be a one-time or short-term occurrence, or it can happen repeatedly over a long time. INTERNAL Stressors - are made by your belief system and the way you evaluate yourself. Examples include pessimistic attitude, negative self-talk, deep need to be perfect, low self-esteem or body image, unhealthy standards for self. EXTERNAL Stressors - are stressful things that happen in your surroundings and/or in your environment. Examples include busy schedules, work problems, family issues, financial trouble, social problems, injury, unforeseen circumstances. Socio-economic issues are also a part of external stressors such as poverty, violence, and racism. Define the following mental health conditions. Depression Eating disorders NSSI Non-suicidal self-injury Grief/Loss Suicide prevention A.C.T. ⢠ACKNOWLEDGE- Tell them in a caring way that you recognize that they are having a problem ⢠CARE- You can show you care by actively listening - put away anything else you are doing, make eye contact, sit down, ask questions. ⢠TELL-(call 988 for additional help and support) - Tell them it is important that they speak with a trusted adult. Help them figure out who this may be and offer to go with your friend. A social norm is an unwritten, informal rule meant to guide behavior among the of society. It distinguishes between acceptable and unacceptable, good and bad, and so on. Social norms can influence a person with emotional or mental health disorders, access to care and stigmatize their situation. STIGMA- a mark of disgrace associated with a particular circumstance, quality, or person. ⢠Self-stigma - This describes the internalized stigma that people with mental health conditions feel about themselves. ⢠Public stigma - This refers to the negative attitudes around mental health from people in society. ⢠Institutional stigma - This is a type of systemic stigma that arises from corporations, governments, and other institutions. Unit 4- Evaluating Risks of Substance Use and Abuse Harm Reduction - a set of practical strategies and ideas aimed at reducing negative consequences associated with drug use. Explain how each level of the Social Ecological Model is impacted by addiction. Individual Relationship Community Society SEM Level Contributing/Risk Factors to substance use Preventative/Protective Factors for substance use Individual Interpersonal/Relationship Community Society Unit 5- Analyzing Influences to Examine Ways to Increase Safety and Reduce Violence HATE CRIME - a crime, usually violent, motivated by prejudice or intolerance toward an individualâs national origin, ethnicity, color, religion, gender, gender identity, sexual orientation, or disability. Explain how the media influences violence in society. The Pyramid of Hate Explain the escalation of hate using the Pyramid of Hate visual. List several hate crime motivators. Example: age HEALTHY Relationship Signs - comfortable pace, trust, honesty, independence, respect, equality, kindness, taking responsibility, healthy conflict, fun UNHEALTHY Relationship Signs - intensity, possessiveness, manipulation, isolation, sabotage, belittling, guilting, volatility, deflecting responsibility, betrayal Sexual Assault is a sexual behavior WITHOUT consent. Human trafficking - the recruitment, harboring, transportation, provision, or obtaining of a person for labor or services, using force, fraud, or coercion for the purpose of subjection to involuntary servitude, peonage, debt bondage, or slavery. Sex trafficking - commercial sex act induced by force, fraud, or coercion, or in which the person induced to perform such an act has not attained 18 years of age. Trafficking happens using⌠⢠Force - using violence to control someone. ⢠Fraud - using lies to control someone. ⢠Coercion - using threats to control someone. Unit 6- Family Life and Human Sexuality Agency - A belief about yourself and the extent to which you can act on that belief. ⢠The ability to choose freely oneâs own narrative. ⢠To embrace the idea that I am the cause (or agent) of my own thoughts and actions. ⢠Personal agency is a personal responsibility for who we are, what we experience, what we do about that experience, and how we shape our world to give us more of the experiences we want. SEXUAL Agency ⢠The ability to choose your own interests and desires vs. what we see in the media or othersâ perceptions ⢠The ability to identify, communicate, and negotiate oneâs sexual needs ⢠The ability to initiate behaviors that allow for the satisfaction of those needs Sexually Explicit Material - photographs, videos, films, magazines, and books whose primary themes, topics, or depictions involve sexuality that may cause sexual arousal. Sexual scripts - thoughts, patterns, or behavior that a person has about themselves in a romantic or sexual context. It is how people picture themselves or want to project themselves in front of others. Reproductive Rights of Teens - In Maryland, teens have the right to an abortion, keep their child, obtain and use birth control, paternity tests, adoption, give up custody of their child within 10 days of birth (Safe Haven Law). ⢠REPRODUCTIVE RIGHTS- legal rights and the freedom of the individual to control decisions regarding contraception, abortion, sterilization and childbirth. ⢠SAFE HAVEN LAW- a distressed parent who is unable or unwilling to care for their infant can safely give up custody of their baby, no questions asked. CONSENT is an agreement between participants to engage in sexual activity. ⢠It is clearly and freely communicated, verbal, and affirmative. Consent CANNOT be given if⌠⢠A person is underage, one or both partners is intoxicated or incapacitated by drugs or alcohol, one partner is asleep or unconscious, one partner feels pressured, threatened or intimidated, or one partner holds a position of power or authority over the other. Unit 7- Advocating for Enhanced Nutrition, Food Systems, and Health Outcomes Dietary Guidelines for Americans Guideline 1: Follow a Healthy Dietary Pattern at Every Life Stage Guideline 2: Customize and Enjoy Food and Beverage Choices to Reflect Personal Preferences, Cultural Traditions, and Budgetary Considerations Guideline 3: Focus on Meeting Food Group Needs with Nutrient-Dense Foods and Beverages, and Stay Within Calorie Limits Guideline 4: Limit Foods and Beverages Higher in Added Sugars, Saturated Fat, and Sodium, and Limit Alcoholic Beverages FOOD DESERT- a neighborhood where there is little or limited access to healthy and affordable food such as fruits, vegetables, whole grains, low-fat milk and other foods that make up the full range of a healthy diet. FOOD INSEQURITY lack of access to a sufficient amount of food because of limited funds. More than 49 million American households are considered food insecure and are vulnerable to poor health as a result. PROCCESED FOODS- any raw agricultural commodities that have been washed, cleaned, milled, cut, chopped, heated, pasteurized, blanched, cooked, canned, frozen, dried, dehydrated, mixed or packaged â anything done to them that alters their natural state.New Trends in Agriculture Extension approaches Extension has been, and still is, under attack from a wide spectrum of politicians and economists over its cost and financing. As a result, Extension Systems have had to make changes, by restating the systemâs mission, developing a new vision for the future, and formulating plans for the necessary transition to achieve the desired change. 1. Privatization of Agricultural Extension Service Privatization: Process of funding and delivering the extension services by private individual or organization is called Private Extension. Concept: Privatization of extension refers to services rendered in rural area & allied aspects of extension personnel working in private agencies or organization for which farmers are expected to pay a fee & it can be viewed as supplementary or alternative to public extension services (Sarvanan & Shivalinge 1980). Privatization approaches ⢠Share cropping system ⢠Village extension contract system ⢠Public extension through private delivery ⢠Service for vouchers Strengths of Private Extension System ⢠More demand - driven rather than supply â driven ⢠High quality of services in terms of satisfying information needs of clientele, trained manpower, sustained finances and resource allocation ⢠Provides for an information mix and choices available to farmers ⢠Enhanced efficiency of staff ⢠Assure continuous supply and quality agricultural products ⢠More effective because farmer can select an adviser who is the best able to help ⢠Healthy competition among service provider will lead to better quality and lower costs for service Weakness of Private Extension System ⢠Concentrate on area having favorable physical environment ⢠More face-to-face contacts (person oriented) ⢠Increased dependence of farmers and hence exploitation ⢠No education role ⢠Deprivation of small farmers ⢠Hamper the free flow of information 2. Cyber Extension or e-extension Concepts Cyber space: it is the imaginary or virtual space of computers connected with each other on Networks, across the Globe. Cyber extension: it means 'using the power of online networks, computer communications and digital interactive multimedia to facilitate dissemination of agriculture technology. Cyber Extension thus can be defined as the extension over cyber space. Important tools of cyber extension E-Mail, Telnet, File Transfer Protocol (FTP), Gopher, Archie and World Wide Web (WWW) Strengths of Cyber Extension ⢠Access to the astounding information and continuously available ⢠Information rich and instantaneously available of information ⢠Interactive communication ⢠The information is available from any point on the globe ⢠Communication is dynamic ⢠Cut steps from traditional process ⢠Save money, time and effort ⢠Multiplicity of purpose Issues and Concerns of Cyber Extension ⢠Lack of Reliable Telecom Infrastructure in Rural Areas ⢠Erratic or no Power Supply ⢠Lack of ICT Trained manpower (willing to serve) in Rural Areas ⢠Lack of content (locally relevant and in local languages) ⢠Lack of Information Services to Rural Clientele ⢠Low Purchasing power of the Rural communities ⢠Lack of Holistic Approaches ⢠Issues of Sustainability Application of cyber extension ⢠Village information shops Dr. M.S. SwaminathanResearch Foundation, Chennai ⢠Information villagers MANAGE in Ranga Reddy District in Andhra pradesh ⢠Gyandoot net initiative of District Dhar, Madhya Pradesh. ⢠Warna wired village of National Informatics Center (NIC) in Kolhapur- Sangli Districts of Maharashtra 3. Market-Led-Extension (MLE) Concepts Market: A congregation of prospective buyers & sellers with a common motive of trading a particular commodity. Extension: It is the spreading/reaching out to the mass Market-led-extension: Agriculture & economics coupled with extension is the perfect blend for reaching at the door steps of common man with the help of technology. Dimensions of market-led extension ⢠Marketing mix: A planned mix of the controllable elements of a product's marketing plan commonly termed as 4Ps: product, price, place, and promotion. These four elements are adjusted until the right combination is found that serves the needs of the product's customers, while generating optimum income. ⢠Marketing plan: A marketing plan is a comprehensive document that outlines a business and marketing efforts for the coming year. It describes business activities involved in accomplishing specific marketing objectives within a set time frame. A marketing plan also includes a description of the current marketing position of a business, a discussion of the target market and a description of the marketing mix that a business will use to achieve their marketing goals. ⢠Market Intelligence: It is the information relevant to a companyâs markets, gathered and analyzed specifically for the purpose of accurate and confident decision making. Market intelligence includes the process of gathering data from the companyâs external environment, whereas the business intelligence process is primarily based on internal recorded events â such as sales, shipments and purchases. ⢠Market oriented production ⢠Use of Technology Strengths of market-led extension ⢠SWOT analysis of the market ⢠Organization of Farmersâ Interest Groups (FIGs) ⢠Enhancing the interactive and communication skills of the farmers ⢠Establishing marketing and agro-processing linkages ⢠Advice on product planning ⢠Educating the farming community ⢠Direct marketing ⢠Acquiring complete market intelligence ⢠Publication of agricultural market information Production of video films of success stories ⢠Challenges to market-led extension ⢠Gigantic size of extension system ⢠Information technology Diverse conditions ⢠Market intelligence ⢠Reforms in agricultural extension system Government Initiatives ⢠Central warehousing Corporation-1965 ⢠MSP by Commission for Agricultural Cost and Price (CACP) ⢠Food Corporation of India ⢠Then some others as: Cotton Corporation of India (CCI), Jute Corporation of India (JCI), National Dairy Development Board (NDDB), Agriculture and Processed food Export Development Authority (APEDA) etc. 4. Farmer--Led-Extension (FLE) Farmer--led-extension is defined as 'the provision of training by farmers to farmers, often through the creation of a structure of farmer promoters and farmer trainers' (Scarborough et al., 1997). Philosophy and principles ⢠Farmers and local institutions (e.g. producer organizations or village leaders) should play a key role in selecting farmer-trainers and monitoring and evaluating them. This helps make the programmes more accountable to the community or groups that they serve. ⢠Farmer-trainers are âof the communityâ; they communicate in local languages and are more sensitive to local cultures, mannerisms, farming practices, and farmersâ needs. ⢠Farmer-trainers should be selected on the basis of their skills and interest in sharing information, not just on their farming expertise. ⢠Farmer-trainers need strong linkages with and support from development agents (whether government, non-government organization (NGO), or private), the people who train and backstop them. Farmer-trainers generally serve as a complement to existing extension systems, rather than being a substitute for them. ⢠Facilitating organizations and local institutions need to be proactive in ensuring that women as well as men become farmer-trainers. ⢠Simple and appropriate reference materials should be made available to the farmer trainers. Essential Elements of Farmer--led-extension ⢠The group ⢠The Field ⢠The Facilitator ⢠The curriculum ⢠Programme leader ⢠Financing Special features of Farmer--led-extension ⢠All learning is field based & it is primary venue for learning ⢠FLE group learning constantly over the experimentation period ⢠FLE promotes healthy decisions & quality decisions ⢠Farmers conduct their own field studies with comparisons or treatments ⢠Facilitates Farmer-to-Farmer communication ⢠Field staff serve as facilitators ⢠FLE is a unique way to educate farmers ⢠It is an effective platform for sharing of experiences and collectively solving agriculture related problems. 5. Expert system Expert system is an intelligent computer program that uses knowledge and inferences procedures to solve problems (Daniel Hunt, 1986). Objectives of developing expert system ⢠To enhance the performance of agricultural extension personnel and farmer ⢠To make farming more efficient and profitable ⢠To reduce the time required in solving the problems ⢠To maintain the expert system by continuously upgrading the database Advantages of expert system ⢠Solves critical problems by making logical deductions without taking much time ⢠It combines experimental and conventional knowledge with the reasoning skills of specialists ⢠To enhance the performance of average worker to the level of an expert Limitations of expert system ⢠Expensive computer program ⢠Mostly developed not in regional languages ⢠Requires AC power and internet connection all the time ⢠Complex software requires computer skilled personnel Modules of expert system in agriculture ⢠COMAX: Integrated crop management in cotton ⢠SOYEX: Soybean oil extraction expert system ⢠PLANT/ds: Diagnosis of soybean diseases ⢠MAIZE: Maize expert system for field crop management ⢠SEMAGI: Weed control decision making in sunflowers ⢠Rice Crop Doctor: Developed by National Institute of Agricultural Extension Management (MANAGE) Difference between conventional and expert system of extension Conventional Extension ⢠Universal approachability of same information is a problem ⢠Information is given whatever is available without considering needs and resources ⢠No Cost benefit analysis ⢠Information flow depends on availability of agent ⢠Require users to draw their own conclusion from facts Expert System of Extension ⢠Universal approachability of same information is possible ⢠Information is chosen based on their needs and resources ⢠Cost benefit analysis ⢠Information through Cyber Cafe at any place at any time ⢠Conclusion is drawn based on the decision given by the expertAbstract The main focus of this research is to discuss the perspective of the teamwork and its impaction organizational performance and success. Also highlight the Meanings of Team and its work sprit towards batter organizational performance and specific to its impact on the success of organization that provided the basis for this research study. In this research study a thoroughly focus was on organization and teamwork. The aim of this research is to deliver a participative view of teamwork in the organization, and also discourses the major issues and emphases on the recent work that opens the basis to move research onward. There is much worth in taking a more focus on the essential areas of teamwork. The team signifies the spirit and working capacity of the employees as team to bring organization to the success. The various explanations, definitions, processes, dimensions, team size and benefits etc. regarding the above topic teamwork and organizational success is highlighted. Keywords: Teamwork, Success, Organization, Performance, Work Groups, Employees Introduction It is indeed human beings have learned in their beginning of life to work together as (Team) that have made such a remarkable developments as unique specie. Human beings have experience throughout their social history, lived, loved, grow younger to older and worked together in groups said West M.A. (2012).The mutual social knowledge of living and functioning together creates connection among people, society and families. When work is done cooperatively as a team it can achieve extremely extra work than individually. Team can be defined as in the human society to live, to work and to play and to cooperate with others for particular task. According to John W. Newstrom et al (1993) âteam is the process of assessing performance of workers, passing information and exploring methods to increase performanceâ. If observe closely, one can discover the instances of The Government: Research Journal of Political Science Supplementary Edition Vol. III 88 The Government social (teams) they are functioning either effectively or ineffectively everywhere; organizations, schools, work place, home etc. âCoordinating the events of people is like sand house, making by using a sole particles of sandâ expressed Belbin, R. M.(2010). Moreover it is one of the general myths that the skill of team member is more important than their vigor, attention and determination for the tasks. Another widespread myth is that the team members are not alone accountable for the achievements or failures of their tasks the truth is that the members are the small parts in the teams and their individual abilities effect on the various results in team. The working relationships exist among team that might sight these relationships at different levels of involvement or relationships among the members as they move towards the degree of communication, integration and commitment increases. Terry L.G. et al (1980) expressed that âThe skills are essential if members have to work together efficiently in complex situations, only development of skills and relationships, involvement on the task regarding the particular task might be selected for reaching at target that is considered as a definition of a teamâ. Team often perform higher when they work together with sprit that enable them to achieve a collective goal at the workplace, it is not only benefits to the organization also affects the workers confidence and success. Cooperating on various tasks reduces workloads for all team members and enables them to share duties or ideas. Work as a team is the part of everyone's life, as one is a member of a family team, staff team, school team, and community teams etc., so as to understand how to work effectively as a team member. Especially there is a need when task is threatened with increasingly many problems for example; the energy problem has effects on organization, family life, and social development and the multi-dimensional nature of many problems require a scientific skill based problem solving approach. Terry L.G, et al (1980) expressed that âThe skills, competencies and efforts of team by setting priorities the team can have better impact on the problems solving such efforts can reduce work load, work duplication, and produce a result better than separate effortsâ. There are some processes of teamwork by adopting those the objectives can be achieved easily. Le Pine, et al, (2008) identified10 teamwork processes that fall in three categories following are those. TEAMWORK PROCESSES TRANSITION PROCESSES â˘Mission analysis â˘Goal specification â˘Strategy formulation ACTION PROCESSES â˘Monitoring progress toward goals â˘Systems monitoring â˘Team monitoring and backup behavior â˘Coordination INTERPERSONAL PROCESSES â˘Conflict management â˘Motivation and confidence building â˘Affect management Team Work 89 Teamwork process reduces the work stress on every member which permits members to complete given important task of organization; teamwork offers members an opening to pledge with each other. Also it develops relations between the members who start a teamwork they usually sense appreciated on productive accomplishment of task. It may be cited one of the best instances of surgical team; where surgeon is assisted by his team; nurses, anesthetist and experts etc., everyone knows that their success depends upon the teamwork. In addition they are devoted to the aim that is human life it is easy to succeed with best teamwork. The important role of manager is the team building, trust building, confidence building, in the team to achieve the task. In the Situation where all team members contribute the task, it develops the positive relationship in the team that improves the trust of team members.âFunctions effectively members of team must be flexible, committed, trusting each other and help to each otherâs in the progress and the achievement of goalsâ Expressed PlamĂnek (2008). The accountability of every member in the team must be increased so that they do not let each other down therefore they do their best for the achievements of their teams. In contrast, working alone on a task the pressure is generally high in team in those cases of small confidence impacts fewer on members. Team consists on members who always vary from each otherâs in skills, knowledge and abilities but working together that is an opportunity for them to gain skills and knowledge from each otherâs that they had never before. Working alone on a task is a challenge and using the ideas of each other brings them to come up with a mutual resolution and the achievement of the task. Nowadays theoretical development and research has rested largely a new trend that is emerging within the organizations as an essential process of teamwork. Teamwork has brought a new move in the research and development to the inputs and outputs that bound, constrain and impact on the team processes within organizations said Ilgen, D.R. (1999). The world is changes fast, any one set of instructions canât be sufficient, changes needs flexible members, teams and organizations so as to be effective on task. This paper suggests that in teams members must use the exclusive human abilities. Cannon B.et al (1995) has prĂŠcised dimensions of teams into three categories: Team dimensions 1-Cognitions: include associations, task team-mate characteristics, team mission, objectives, norms, and resources, team role interaction patterns, skills, roles, and team orientation. 2-Skills: consist on adaptability, shared situational awareness and mutual concept to conflict resolution. 90 The Government 3-Attitudes: symbolize motivation, collective potency, shared vision, team cohesion, mutual trust, collective orientation and importance of. Teamsize Researchers have given different approvals about the best size of team as Katzenbachetet al (1993) suggested that the teams should comprise on a dozen or so members which are enough to achieve a task. Although seven is the best size of the team in the organizational practices said Scharf, A. (1989). Several views of researchers are expressed in the literatures and it is difficult to decide which better is because their opinions are based on their own observations. The team size matters in the proper output and performance however from an empirical research it is also difficult to decide the suitable team size and what to accept. This study suggests that team size has a practical link with efficacy such as few or many member shave impact on the performance but size matters. Proper size of team improves the performance maximum stated Campion M. A et al (1996).These different results are expected due to the fact that appropriate team size is required for task, environment and situation where team works. However, larger teams can also experience coordination problems that delay performance. Sheppard, J. A. (1993) expressed that the question of best teamâs size is a complex one; more research is required on this topic to explain the impact of team size on given definite task. Literature Review Across many different organizations and industries teamwork is focused to increase the performance of employeesâ their unity and also create work culture. Organizations those regularly develop new ideas or products using a project-based approach and assemble teams in order to focus responsibilities to achieve the object. Researchers have given dissimilar meanings of âteamsâ. Dyer W.G. (2007) said that âteams are groups of people who trust in cooperation, if members are expert the success of goal is more possibleâ. It is essential due to the problemsolving cooperation added from many minds of team members working on a resolution of problems. Team members contribute their thoughts together to make exclusive plans for dealing with problems and this unity enhance the result due to interaction, trust and teamwork. Teamwork means a "work done by several companions with each doing a part but all subordinating personal prominence to the efficiency of the whole" Merriam, (2012). In addition combined employees are expected less hostile to each other and accepting more of each otherâs decisions. Unity of employees can increase the flow of work in organization. When employeeâs working together as a team, they learn from each other that awareness is based on their personal experiences and from coworkers; Team Work 91 employees from different departments may acquire knowledge from each other. The main object for organizations is to hold the team effort to achieve output and quality; team is a key to achieve quality productivity. According to Maddux et al (2003) âsome of the organizations have major benefits from the use of teamwork which are showed in the following chart: Benefits of Teamwork 1 Improving quality of work life for employees 2 Reducing absenteeism and increasing turnover 3 Increasing innovation and change 4 Improving organizational adaptability and flexibility A real team is mostly one where members are allowed to take decisions that how to complete task. That authority enables them to control the work process, decreases the outside control and increases the sense of duty for work. Team always feels superiority on workplace and they rely on each otherâs being there. PlamĂnek (2008) said that âaffiliation with teamwork gives member a sense of belonging, interaction and recognition of successâ. These actions support to remove the sense of loneliness of team member in organization. Effective teams can also improve efficacy through communication and trust between the team members, quality of work and decrease in absenteeism contribute to positive impact on team. Involving employees in teamwork helps the organization remain open to new ideas.âThe world of organizations is shifting individualism is out and collectivism is in, power is out, empowerment is in.â stated G. M. Parker (1998). This study discovers the experiences and difficulties of teamwork that employees and organizations are facing nowadays due to big transformation and enlarged globalization. In recent years a remarkable amendment has been emerged in the belief of team working organizations. The modern study has explored that the scope of teamwork have been appeared in system rooted in belief, and employees accept changes that denoting a modern organizational system. The organizations which are responsive to the changes appear to achieve greater satisfaction. Although it may be suggested that, the managers should assess the values and beliefs of their employees to play more dedicated role in the development of organization by making sprit to face the modern challenges. Organizational cultural is much significant and it has the excessive impact on the performance of organization and employeesâ but it is quiet arguable topic that the culture of teamwork can be developed according to the requirement. It is difficult to specify the relationships and to assess the reliable set of values to use as they believed symbol across the entire organizations. This review study focus that 92 The Government there is a great influence of organizational culture on the assumptions, values, and beliefs on the individualsâ considerations, actions and performances and so is vice versa, through learning, and training process. However the researchers believe that the organizational setup aids to unite employees of diverse cultures and dissimilar social backgrounds, traditions and have their own beliefs to work. Creating a positive teamwork culture it has several diverse aspects are goal setting, conflict resolution, empowerment, ability to accomplish tasks, measuring output and consideration for other teamwork cultures stated Pack L, et al April 27, (2012). Team work in the organization delivers employees the wisdom of unity; understand to each otherâs, and reducing conflict. In addition teamwork in organization inspires employee for impartiality by affirming that no one is ignored in the organization and all treated equally. It is known that a team in organization is bound and sincere to work with dedication to bring the success. If the employees are committed and recognize the teamwork values and its benefits, as a part of the organization they can contribute a lot to the achievement of organization. One can finds the informal instances of team at these level, family, society, community, tribe and work groups etc., and formally team appears at the level of departments, functional groups, and other organizational units. The employees feel a greater sense of achievement for being a part of an organization, if they attain team work, having freedom to work not forced. The system gives best performance to achieve recognition and credit from their managers and it will increase their effort that helps them to contribute the organizational performance. Each team batter knows about their role and how to achieve tasks. The true spirit of teamwork gives benefit to organization in maintaining its standard by which it becomes identified. The team defines its specialty, and the way it is doing task that is perceived by the organization as well as its managers and it is secured by appreciation. Employees identify what they believe; that exist in their belief system and those understandings call them to change their views to develop and raise attention towards batter performance. The literature contains sufficient definitions of teamwork and the word team is used to denote a set of generally developed as to learn collective values, attitudes and cooperation to work. The study praises that the teamwork is mostly related with the team success for instance, Wagner (1995) described that âin the team individual is less valued and group is more valued, withâ. It is found in the study that individualismcollectivism both regulates the relationships between team size, standing, and cooperation that have better effects on the cooperation of individualists rather than the cooperation of collectivists. Team Work 93 Conclusion The main concentration of this research paper is to examine more in-depth the fundamental of teamwork and its effectiveness to achieve the organizational goals. Teamwork provides vast amounts of knowledge and information, cultural differences each of these building a culture of teamwork and the skill to make the valuable solutions of the problems. To work efficiently, team members need a good understanding of how to do their job, to achieve goal and for that a basic way to ensure understanding is training, then they have to be motivated to do a job. Team is a vital activity of organization, when organization desires to perform sound it has to be confident that team functions effectively. Consequently it is compulsory to know how team performs, what manners within a team happen, and how they make decisions. If there is knowhow of teamwork events, it can be effective for the tasks that they have to accomplish. Organizations build up their own culture through tradition, history and structure these values can be accepted by team workers of an organization. The values and assumptions are the vital tools of organizations and are used as guidance for team. These have to do mostly with the basic dignity and worth of all members of team and the ability, necessity for them to solve the problems and work for the positive change. Through this review study is concluded that there is a good impact of teamwork on the organizations doings and success. Subsequently in recently developed literature there is a great focus amongst the social scientists and scholarsâ in their discussion on the above topic teamwork. The above study is also an evidence of little effort to assess the significance of teamwork in organizations success. teams in organiz Introduction to Hedging Instruments: Forwards, Futures, Options, and Swaps Hedging instruments are financial tools used by businesses and investors to mitigate risk. These instruments help protect against adverse price movements in assets such as commodities, currencies, interest rates, or securities. The four main hedging instruments are forwards, futures, options, and swaps. 1. Forwards A forward contract is a customised agreement between two parties to buy or sell an asset at a predetermined price on a specified future date. Key Characteristics: Over-the-counter (OTC): Traded directly between parties, not on an exchange. Customisation: Can be tailored to suit the needs of the parties involved. Settlement: Occurs at the end of the contract, which may involve physical delivery or cash settlement. Risk: Forwards carry counter-party risk, as there is a possibility one party may default. Example: A company that needs to import raw materials in six months may enter into a forward contract to lock in the current price, avoiding the risk of price increases. 2. Futures A futures contract is similar to a forward, but it is standardised and traded on an exchange. This standardisation eliminates counter-party risk. Key Characteristics: Standardised: Contract size, expiration, and other terms are fixed by the exchange. Mark-to-market: Gains and losses are settled daily. Liquidity: Futures are highly liquid because they are traded on exchanges. Regulation: As they are traded on formal exchanges, they are more regulated than forwards. Example: A wheat farmer may sell futures contracts to hedge against a possible decline in wheat prices before harvest. 3. Options Options provide the right, but not the obligation, to buy or sell an asset at a specified price on or before a certain date. There are two types of options: call options and put options. Call Option: Gives the holder the right to buy an asset at a predetermined price. Put Option: Gives the holder the right to sell an asset at a predetermined price. Key Characteristics: Premium: The buyer pays a premium upfront to obtain the option. Limited Risk: The maximum loss is limited to the premium paid. Flexibility: Options can be used for speculative or hedging purposes. Example: An investor holding stocks may buy a put option to protect against potential declines in the stock's price. 4. Swaps A swap is a contract in which two parties agree to exchange cash flows or liabilities over a specific period. The most common types are interest rate swaps and currency swaps. Key Characteristics: Customizable: Like forwards, swaps are often tailored to meet the needs of the parties involved. Counterparty Risk: Swaps are typically OTC instruments, exposing parties to default risk. Common Uses: Used to manage interest rate risk or currency risk. Example: A company with a variablerate loan may enter into an interest rate swap to exchange its variable payments for fixedrate payments, thus locking in stable costs. Hedging instruments are essential for managing financial risk in volatile markets. Each instrument serves different purposes, with varying levels of complexity, risk, and customization. Whether through forwards, futures, options, or swaps, businesses can better plan for the future by reducing exposure to uncertain price fluctuations. Hedging Strategies for Market Risk, Credit Risk, and Currency Risk 1. Hedging Strategies for Market Risk Market risk (also known as systematic risk) arises from fluctuations in asset prices, such as stocks, bonds, commodities, and interest rates, due to economic factors or market volatility. Key Hedging Instruments for Market Risk: Derivatives (Options, Futures, and Forwards): These instruments allow investors to hedge against unfavorable price movements in stocks, commodities, or interest rates. Example: An investor holding a large stock portfolio might buy a put option to protect against a potential market downturn. If the market declines, the put option increases in value, offsetting losses in the portfolio. Short Selling: Investors can sell borrowed assets with the expectation of buying them back at a lower price, profiting from the decline. Example: A fund manager expecting a market decline may short sell stocks to hedge a portfolio against losses. Common Hedging Strategies: Portfolio Diversification: Reducing market risk by spreading investments across various asset classes (stocks, bonds, commodities) and sectors. Using Index Futures: Large portfolios can be hedged using index futures that track the performance of the overall market. If the market declines, profits from the short position in the futures contract will offset losses in the portfolio. Risk Parity: Allocating assets based on the level of risk rather than the dollar amount invested, balancing risk exposure across asset classes. 2. Hedging Strategies for Credit Risk Credit risk refers to the possibility that a borrower will default on a debt obligation. This is especially important for banks, lenders, and institutions dealing with bonds and loans. Key Hedging Instruments for Credit Risk: Credit Default Swaps (CDS): A financial derivative where the buyer of a CDS pays a premium to the seller in exchange for protection against a default on a loan or bond. Example: A bank holding corporate bonds can buy a CDS to ensure they are compensated if the issuing company defaults. Collateralised Debt Obligations (CDOs): These instruments pool together various debt instruments and allow risk to be distributed among multiple investors. Credit Insurance: Companies may use insurance to protect against the risk of a customer defaulting on payments. Common Hedging Strategies: Diversification of Loan Portfolio: Spreading out credit exposures across various industries, geographies, and borrower profiles reduces the overall risk of default. Tightening Lending Standards: Limiting exposure to highrisk borrowers by implementing stringent credit assessments. AssetBacked Securities: Banks can sell loans or bonds packaged as assetbacked securities to reduce their exposure to credit risk. 3. Hedging Strategies for Currency Risk Currency risk (or exchange rate risk) arises from fluctuations in foreign exchange rates, which can affect companies involved in international trade or with investments in foreign countries. Key Hedging Instruments for Currency Risk: Forward Contracts: A firm agrees to exchange a specified amount of currency at a predetermined exchange rate on a future date. Example: A U.S. exporter expecting payment in euros might enter into a forward contract to sell euros and lock in a favorable exchange rate. Currency Options: These give the right, but not the obligation, to buy or sell currency at a specific price. Example: A U.S.based company buying goods from Japan might buy a call option on the yen to hedge against the risk of yen appreciation. Currency Swaps: Two parties exchange interest payments and principal in different currencies to hedge against exchange rate fluctuations. Common Hedging Strategies: Natural Hedging: Companies can offset currency risk by balancing foreign revenue with costs in the same currency. For example, if a company generates revenue in euros, it can also incur expenses in euros, reducing exposure to exchange rate fluctuations. Multi-Currency Invoicing: Firms can invoice in their home currency, shifting the currency risk to the buyer. Currency Diversification: Holding a diversified basket of currencies can reduce exposure to large fluctuations in any one currency. Effective hedging strategies are crucial for managing various types of risks in financial markets. Market risk can be managed using instruments like futures and options, while credit risk can be mitigated through diversification and credit derivatives. Currency risk, often faced by multinational firms, can be hedged using forward contracts, options, or swaps. Each strategy helps firms and investors protect their portfolios, ensure financial stability, and reduce the impact of adverse movements in the financial markets. Portfolio Risk Management Techniques: Diversification, Asset Allocation, and Risk Budgeting Managing risk is a fundamental aspect of portfolio management. Investors use various techniques to control and reduce the risks inherent in investing. Three key techniques used in portfolio risk management are diversification, asset allocation, and risk budgeting. Each of these techniques helps in mitigating potential losses while aiming to achieve the desired return. 1. Diversification Diversification is a risk management strategy that involves spreading investments across different assets, sectors, or geographic regions to reduce exposure to any single risk. The idea is that different assets perform differently under various market conditions, so losses in one investment can be offset by gains in others. Key Benefits of Diversification: Reduction of Unsystematic Risk: Unsystematic risk, which is unique to a specific company or industry, can be reduced by holding a variety of investments that respond differently to market conditions. Improved Stability: A diversified portfolio is less volatile, as the negative performance of one asset can be balanced by the positive performance of others. Methods of Diversification: Across Asset Classes: Investing in a mix of asset classes such as stocks, bonds, commodities, and real estate. Example: A portfolio with 60% equities, 30% bonds, and 10% commodities is more diversified than one solely consisting of stocks. Within Asset Classes: Diversifying within a single asset class (e.g., holding stocks from different sectors like technology, healthcare, and energy). Geographic Diversification: Investing in assets across various countries or regions to mitigate country-specific risks. Example: Holding U.S. stocks along with emerging market equities can reduce risks related to a downturn in one country's economy. 2. Asset Allocation Asset allocation refers to the process of dividing investments among different asset classes (such as stocks, bonds, and cash) to align with an investor's risk tolerance, time horizon, and financial goals. Asset allocation plays a crucial role in portfolio risk management by determining the overall risk-return profile of the portfolio. Key Elements of Asset Allocation: Strategic Asset Allocation: A longterm approach that involves setting target allocations for different asset classes based on financial goals and risk tolerance. Example: A young investor with a longterm horizon might allocate 70% to stocks, 20% to bonds, and 10% to cash. Tactical Asset Allocation: A more active approach that involves adjusting the asset mix in response to short-term market conditions. Example: If the investor expects an economic downturn, they might temporarily reduce exposure to equities and increase exposure to bonds. Types of Asset Allocation Models: Conservative: Focuses on preserving capital with a larger allocation to bonds and cash (e.g., 20% stocks, 80% bonds). Balanced: A moderate risk approach with an equal focus on growth and income (e.g., 50% stocks, 50% bonds). Aggressive: Targets higher returns by investing predominantly in equities, accepting higher risk (e.g., 80% stocks, 20% bonds). Example of Asset Allocation: A 40 year old investor with moderate risk tolerance may allocate their portfolio as follows: 50% equities, 40% bonds, and 10% in alternative investments such as real estate or commodities. The equities provide growth potential, while the bonds and alternative assets offer stability and income. 3. Risk Budgeting Risk budgeting is a method of allocating risk across different components of a portfolio, rather than focusing solely on returns. The goal is to optimise the portfolioâs risk-return profile by distributing risk in a way that aligns with the investorâs objectives and risk tolerance. Key Concepts of Risk Budgeting: Risk Contribution: Each asset class or investment in the portfolio contributes a certain amount of risk (measured by metrics such as volatility or Value at Risk). Risk budgeting ensures that no single asset class dominates the overall risk of the portfolio. Example: A portfolio may contain 60% stocks and 40% bonds, but if the stocks are highly volatile, they may contribute 90% of the portfolio's risk. Target Risk: Investors set a maximum acceptable level of risk (e.g., a portfolio volatility of 10%) and allocate investments so that the total risk remains within this target. Techniques in Risk Budgeting: Risk Parity: Allocates risk evenly across asset classes, rather than allocating capital based solely on return expectations. Example: In a risk-parity portfolio, both bonds and stocks might be balanced in such a way that they contribute equally to the overall portfolio risk, even though the dollar investment in bonds may be larger due to their lower volatility. Value at Risk (VaR): This technique measures the potential loss in a portfolio over a specific time period, under normal market conditions, at a given confidence level. The risk budget ensures that the potential loss stays within acceptable limits. Example of Risk Budgeting: An investor targets an overall portfolio risk of 8% volatility. After analyzing the risk contribution of each asset class, they determine that equities, which currently make up 60% of the portfolio, contribute 70% of the risk. To adhere to the risk budget, the investor may reduce their equity exposure and increase their allocation to bonds or other less volatile assets. Diversification, asset allocation, and risk budgeting are complementary techniques used in portfolio risk management. Diversification reduces unsystematic risk by spreading investments across various assets. Asset allocation ensures that investments align with an investor's goals and risk tolerance. Risk budgeting focuses on managing the contribution of risk from each asset class to create a balanced and efficient portfolio. Together, these strategies help investors achieve a balance between risk and return, ensuring longterm portfolio stability. Risk Mitigation Through Insurance, Securitisation, and Other Financial Engineering Techniques Risk mitigation is a core objective in financial management, and various strategies can be employed to reduce or manage risks. Three major approaches are insurance, securitisation, and financial engineering techniques. Each of these methods helps firms and individuals transfer, reduce, or eliminate certain financial risks. 1. Insurance as a Risk Mitigation Tool Insurance is a traditional risk transfer method that protects against financial losses by shifting the risk to an insurance company in exchange for premium payments. It is widely used to mitigate various forms of risk, such as operational, liability, and property risks. Key Aspects of Insurance for Risk Mitigation: Risk Transfer: The insurer takes on the risk in exchange for a premium, thus protecting the insured party from unexpected financial losses. Indemnity: In the event of a loss, the insurance policy compensates the insured based on the terms of the contract. Customisable Coverage: Insurance policies can be tailored to address specific risks, such as property damage, business interruption, liability, or cyber risks. Types of Insurance for Businesses: Property and Casualty Insurance: Covers physical assets like buildings, machinery, and inventory from risks like fire, theft, or natural disasters. Liability Insurance: Protects businesses against legal liabilities arising from accidents, negligence, or professional errors. Business Interruption Insurance: Compensates for lost income if a business has to halt operations due to unforeseen events. Credit Insurance: Shields companies from losses due to the nonpayment of trade receivables. 2. Securitisation as a Risk Mitigation Technique Securitisation is a financial engineering process that involves pooling various financial assets (such as loans, mortgages, or receivables) and converting them into marketable securities. This process allows firms to transfer risk to investors, thereby reducing their exposure. Key Elements of Securitisation: Risk Transfer: By securitising assets, companies can transfer the risk of default or nonpayment to investors who purchase the securities. Liquidity Creation: Securitisation converts illiquid assets (like mortgages or loans) into liquid, tradeable securities, improving cash flow for the originating firm. Diversification of Risk: Pooling assets with different risk profiles reduces the impact of individual defaults, spreading the risk across multiple investors. Common Forms of Securitisation: MortgageBacked Securities (MBS): Pools of mortgages are bundled and sold as securities to investors, transferring the risk of mortgage defaults. Example: A bank that issues home loans can bundle those loans into MBS and sell them to investors, transferring the credit risk of potential defaults. Asset-Backed Securities (ABS): Similar to MBS, but backed by other types of assets like credit card receivables, auto loans, or student loans. Collateralised Debt Obligations (CDOs): Structured financial products that pool different types of debt, such as loans and bonds, and sell them as securities with varying risk levels. Example: A bank may issue a portfolio of auto loans and then pool these loans into an assetbacked security (ABS). The ABS is sold to investors, who take on the risk of loan defaults. By securitising the loans, the bank reduces its exposure to credit risk and generates immediate cash flow. 3. Financial Engineering Techniques for Risk Mitigation Financial engineering involves the use of complex financial instruments, derivatives, and structured products to manage or mitigate financial risks. These techniques allow firms to hedge against specific risks, optimize capital structure, and improve financial stability. Common Financial Engineering Techniques: Derivatives: Financial instruments like futures, forwards, options, and swaps are used to hedge against price fluctuations, interest rate changes, or currency movements. Example: A company with significant foreign exchange exposure may use currency forwards or options to hedge against exchange rate fluctuations, ensuring predictable cash flows. Options and Futures: Options: Provides the right (but not the obligation) to buy or sell an asset at a predetermined price, allowing firms to hedge against unfavorable price movements. Example: An airline company can buy options on jet fuel to hedge against rising fuel prices. Futures: Standardized contracts to buy or sell an asset at a set price on a future date, commonly used to hedge commodities or financial assets. Example: A wheat producer may use futures contracts to lock in a favorable price for its crop, hedging against a potential price drop. Swaps: These involve the exchange of cash flows between two parties, often used to manage interest rate risk or currency risk. Interest Rate Swaps: Firms can exchange floatingrate interest payments for fixedrate payments to hedge against rising interest rates. Currency Swaps: Used to hedge exchange rate risk in crossborder transactions by exchanging principal and interest payments in different currencies. Example: A company with a variablerate loan may enter into an interest rate swap to exchange its variable payments for fixedrate payments, locking in stable costs. Structured Products: These are customised financial instruments designed to achieve specific riskreturn objectives. They often combine derivatives with other securities to create tailored risk exposures. Example: A structured note that combines a bond with an embedded option, offering downside protection while allowing for potential upside linked to the performance of an equity index. Credit Derivatives: Tools like credit default swaps (CDS) allow investors to transfer credit risk to other parties. Example: A bondholder worried about a companyâs potential default may purchase a CDS, which pays out in case of a default event. Example: A company may issue a bond with an embedded call option, allowing it to repurchase the bond if interest rates decline. This financial engineering tool enables the company to mitigate the risk of rising interest rates, reducing future borrowing costs. Risk mitigation through insurance, securitisation, and financial engineering offers businesses a variety of tools to manage and transfer risks. Insurance allows for the direct transfer of risk to an insurer, while securitisation helps companies offload risk by packaging and selling assets as securities. Financial engineering techniques, including derivatives, swaps, and structured products, provide sophisticated ways to hedge market, interest rate, and currency risks. Each approach helps organizations improve financial stability, enhance liquidity, and manage potential losses in a volatile market environment.MANAJEMEN