Information Governance CGEIT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A manufacturing company's engineering team has created a new product design file. The file is currently in active use by the design team, but the company's retention schedule requires that design files be kept for 10 years after product discontinuation. The file is now being shared with external partners for a joint venture. Which lifecycle stage is the file currently in, and what is the primary governance concern?

   • ARetention stage; the primary concern is ensuring the file is moved to cold storage to meet the 10-year requirement.
   • BMaintenance stage; the primary concern is ensuring the file is backed up daily to prevent data loss.
   • CUse stage; the primary concern is controlling access and ensuring the file is handled according to its classification when shared externally.
   • DCreation stage; the primary concern is ensuring the file is registered in the records management system.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A pharmaceutical company is required by regulation to retain clinical trial data for 15 years after the trial ends. A researcher has requested that the data be deleted after the final study report is published, citing data minimization principles. What is the most appropriate governance action?

   • ARetain the data for the full 15-year period, and then dispose of it according to the retention schedule.
   • BApprove the deletion request, since the study is complete and data minimization is a key privacy principle.
   • CAnonymize the data and then delete it, since anonymized data is no longer subject to the retention requirement.
   • DMove the data to a separate archive and mark it for deletion after 5 years.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following factors is typically considered when classifying information?

   • AThe potential impact on the organization if the information is disclosed or altered.
   • BThe file format of the information (e.g., PDF, Word, Excel).
   • CThe age of the information asset.
   • DThe number of users who access the information.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary responsibility of an information owner?

   • ATo be accountable for the overall protection and use of a specific set of information assets.
   • BTo define the enterprise-wide information governance strategy.
   • CTo audit the use of information assets and report violations to management.
   • DTo perform day-to-day technical tasks such as backups and access control administration.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A multinational bank is drafting a new information governance policy. The compliance team insists the policy must explicitly require that all customer financial data be stored in data centers located within the country of origin. The legal team counters that this requirement conflicts with the bank's global shared-services model, where regional offices process data across borders. Which approach best aligns the policy with both regulatory compliance and enterprise objectives?

   • ARemove data-residency requirements from the policy and rely on the bank's existing encryption standards to satisfy all regulators.
   • BAdopt the compliance team's requirement verbatim to avoid any regulatory risk, and accept the operational impact on the shared-services model.
   • CDelegate the residency decision to each regional office's IT manager, allowing them to set local storage rules independently.
   • DDraft the policy to require compliance with applicable data-residency laws per jurisdiction, while permitting cross-border processing where legally permissible and contractually safeguarded.
   Reveal Solution Discussion Select an answer first