Acquisition of Resources CGEIT Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A global logistics company needs to acquire a new fleet management system. The system must support real-time tracking across multiple countries, comply with varying data protection laws, and integrate with existing ERP and telematics systems. The budget is fixed, and the timeline is tight due to a regulatory deadline. The IT governance leader must balance functionality, compliance, and cost. What is the most appropriate approach?

   • AChoose a vendor that already operates in all target countries to simplify compliance.
   • BSelect the vendor with the lowest cost to stay within budget, then address compliance later.
   • CNegotiate directly with a preferred vendor to expedite the timeline.
   • DIssue an RFP with weighted criteria that prioritize compliance and integration capabilities, and evaluate vendors against these criteria.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary goal of post-acquisition integration planning?

   • ATo evaluate the vendor's performance for future projects
   • BTo document the acquisition for audit purposes
   • CTo negotiate a lower price after the contract is signed
   • DTo ensure the acquired resources are smoothly implemented and transitioned into operations
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a common risk in IT acquisitions?

   • AToo many internal stakeholders
   • BVendor failure to deliver on time or meet requirements
   • COverly detailed requirements
   • DExcessive competition among vendors
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which element of an IT contract defines the expected performance levels and remedies if those levels are not met?

   • AService level agreement (SLA)
   • BStatement of work (SOW)
   • CNon-disclosure agreement (NDA)
   • DMaster services agreement (MSA)
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A multinational enterprise is acquiring a new HR system that will process employee data across the EU, US, and Asia. The vendor's data centers are located in the US and Singapore. The EU operations require GDPR compliance, and the US operations require compliance with local laws. The IT governance leader must ensure the acquisition meets all regulatory requirements. What is the most critical action?

   • ARequire all employee data to be stored in the EU.
   • BAccept the vendor's standard data processing agreement without review.
   • CEnsure the contract includes appropriate data transfer mechanisms, such as standard contractual clauses, and specifies data residency options.
   • DSelect a vendor with data centers in every country where the enterprise operates.
   Reveal Solution Discussion Select an answer first