Compliance, Ethics, and Culture CGEIT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which compliance framework is primarily focused on protecting the privacy and personal data of individuals within the European Union?

   • AGDPR (General Data Protection Regulation)
   • BHIPAA (Health Insurance Portability and Accountability Act)
   • CPCI DSS (Payment Card Industry Data Security Standard)
   • DSOX (Sarbanes-Oxley Act)
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   An IT project manager is asked to implement a new system that will reduce costs but will result in the layoff of several employees. The manager is concerned about the ethical implications. Which ethical framework would focus on the fairness of the decision and the impact on the affected employees?

   • AVirtue ethics, because it focuses on the character of the decision-maker.
   • BRights-based ethics, because it emphasizes the rights of all stakeholders, including employees.
   • CUtilitarianism, because it weighs the overall benefits against the harms.
   • DEthical egoism, because it prioritizes the manager's own interests.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A manufacturing company is subject to environmental regulations that require reporting of emissions data. The IT department manages the system that collects this data. The compliance team is concerned about the accuracy of the data. Which control is most appropriate to mitigate the risk of inaccurate reporting?

   • ARequire manual sign-off by the plant manager on all emissions reports.
   • BConduct an annual audit of the emissions reporting process.
   • CImplement automated data validation rules that flag anomalies before the data is submitted.
   • DStore all emissions data in a secure, immutable database.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a common purpose of compliance frameworks such as GDPR, SOX, and HIPAA in the context of IT governance?

   • ATo provide a structured set of requirements that help the enterprise manage IT risks and meet legal obligations.
   • BTo serve as a one-size-fits-all solution applicable to every industry without adaptation.
   • CTo guarantee that the enterprise will never experience a data breach.
   • DTo replace the need for internal IT policies and procedures.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A hospital is subject to HIPAA and is implementing a new electronic health record (EHR) system. The IT governance team must ensure compliance. Which control is most directly required by HIPAA's Security Rule?

   • APurchasing cyber liability insurance to cover potential data breaches.
   • BEncrypting all data at rest and in transit, without exception.
   • CImplementing audit controls that record and examine activity in the EHR system.
   • DConducting annual employee background checks for all staff with EHR access.
   Reveal Solution Discussion Select an answer first