Management of Contracted Services and Relationships CGEIT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which activity is part of ongoing contract management?

   • AMonitoring vendor performance against the contract
   • BDefining the enterprise's IT strategy
   • CDesigning the service architecture
   • DConducting initial vendor due diligence
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a key mitigation for business continuity risk in outsourcing?

   • AEliminating all vendor contracts
   • BTransferring all risk to the vendor without verification
   • CIgnoring the risk until an incident occurs
   • DRequiring the vendor to have a business continuity plan
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the purpose of ensuring contracted services comply with relevant laws and regulations?

   • ATo increase the vendor's market share
   • BTo avoid legal penalties and protect the enterprise's reputation
   • CTo simplify the contract negotiation process
   • DTo reduce the need for performance monitoring
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A multinational corporation is outsourcing its customer support to a vendor that operates in multiple countries. The corporation must comply with the General Data Protection Regulation (GDPR) for EU customer data. The vendor proposes to process all data in a non-EU country to reduce costs. What should the corporation do?

   • AAccept the proposal because the vendor is responsible for compliance.
   • BTerminate the outsourcing plan because GDPR makes it impossible to use non-EU vendors.
   • CRequire the vendor to process all data within the EU to avoid transfer issues.
   • DEnsure the contract includes appropriate safeguards for international data transfers, such as standard contractual clauses.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization has an ongoing contract with a managed security services provider. The provider has been meeting SLA targets, but the organization's security team has noticed that the provider's reports are becoming less detailed and response times are increasing. The contract includes a change management process. What should the organization do?

   • AWait until the SLA is breached before taking action.
   • BTerminate the contract immediately and find a new provider.
   • CReduce the scope of the contract to lower the risk.
   • DInitiate a formal performance review with the provider to discuss the trend and agree on corrective actions.
   Reveal Solution Discussion Select an answer first