IT Resource Lifecycle and Asset Management CGEIT Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company is planning to replace its aging server fleet. The IT team wants to ensure that the replacement plan considers the full lifecycle of the new servers. Which of the following should be included in the plan?

   • AOnly the initial purchase cost and installation expenses.
   • BA plan to lease the servers for five years and then return them to the vendor.
   • CA schedule for regular maintenance and a plan for eventual decommissioning and disposal.
   • DA warranty extension for the first three years only.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A healthcare organization is procuring a new electronic health record (EHR) system. The vendor offers a significantly lower price if the organization waives the right to audit the vendor's security controls. What should the organization do?

   • AAccept the waiver but add a clause requiring the vendor to notify the organization of any security breach.
   • BNegotiate a compromise where the organization can audit only the vendor's data center, not its application security.
   • CReject the waiver and insist on contractual audit rights to ensure compliance with healthcare regulations.
   • DAccept the lower price to stay within budget, but require the vendor to provide a summary of its security certifications.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   During which phase of the IT resource lifecycle would an organization typically conduct a post-implementation review to evaluate whether the resource met its intended objectives?

   • AAcquisition
   • BDisposal
   • COperation
   • DPlanning
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A software company is negotiating a contract with a cloud provider. The provider's standard contract includes a clause that allows the provider to change pricing with 30 days' notice. The company's financial controller is concerned about budget predictability. What should the company negotiate for?

   • AA clause that requires the company's consent for any pricing change.
   • BA fixed-price contract for the duration of the agreement.
   • CA longer notice period, such as 90 days, for pricing changes.
   • DA discount on the first year of service to offset potential increases.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A hospital's IT system experienced a ransomware attack. The backup system was also compromised because the backups were stored on the same network. The hospital needs to restore operations quickly while preventing future incidents. What is the most critical improvement to implement?

   • AIncrease the frequency of backups to every hour.
   • BTrain staff on phishing awareness to prevent future attacks.
   • CStore backups offline or in an isolated environment that is not accessible from the production network.
   • DPurchase additional antivirus software for all servers.
   Reveal Solution Discussion Select an answer first