Compliance, Ethics, and Culture CGEIT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a strategy for fostering a culture that supports good governance and compliance?

   • ARewarding employees who meet business targets regardless of compliance breaches.
   • BCommunicating governance expectations only to senior management.
   • CLeadership demonstrating commitment to governance through their own actions and decisions.
   • DImplementing governance policies without explaining the rationale.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following best describes the primary obligation of an enterprise with respect to legal and regulatory compliance for IT?

   • ATo ensure that all IT activities and data handling comply with applicable laws, regulations, and contractual requirements.
   • BTo comply only with regulations that are explicitly mentioned in the enterprise's IT strategy document.
   • CTo implement the most advanced security technology available to prevent any possible breach.
   • DTo delegate all compliance responsibilities to external auditors and legal counsel.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company that operates in the EU and the US is implementing a new CRM system that will store personal data of customers in both regions. The company wants to ensure compliance with both GDPR and CCPA. Which action is most appropriate?

   • AComply only with GDPR because it is more comprehensive than CCPA.
   • BConsult with legal counsel to determine which regulation applies to each customer.
   • CImplement a single set of privacy controls that meet the stricter requirements of both regulations.
   • DStore EU customer data in the EU and US customer data in the US to simplify compliance.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is an example of applying an ethical reasoning framework to an IT governance dilemma?

   • ASelecting the vendor with the most aggressive sales pitch.
   • BWeighing the potential benefits of a new data analytics project against the privacy rights of individuals.
   • CChoosing the technology that is cheapest to implement.
   • DDeferring the decision to the legal department without discussion.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A technology startup has a culture of 'move fast and break things,' which has led to several compliance violations. The new CISO wants to shift the culture to one that values security and compliance without stifling innovation. Which approach is most likely to succeed?

   • AImplement a strict change management process that requires multiple approvals for any code deployment.
   • BMandate that all developers complete a comprehensive security certification program.
   • CEmbed security and compliance champions within development teams to provide real-time guidance.
   • DCreate a separate compliance team that reviews all code after deployment.
   Reveal Solution Discussion Select an answer first