IT Governance and Strategy CISA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A multinational retailer has separate IT departments in each regional office, each reporting to its own regional CFO. The CIO wants to ensure that global IT investments are prioritized consistently with the corporate strategy. Which governance change would BEST achieve this alignment?

   • AAdopt a decentralized model where each region defines its own IT strategy.
   • BEstablish a corporate IT steering committee with regional representation to review and approve major IT investments.
   • CRequire each regional IT department to submit a yearly budget to the corporate finance team.
   • DCentralize all IT decision-making under the CIO, eliminating regional IT departments.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   An organization has a policy that requires all employees to use multi-factor authentication (MFA) for remote access. However, the IT department has not defined which MFA methods are acceptable. As a result, employees are using a variety of methods, some of which are not secure. What is the MOST effective governance action?

   • ARevoke remote access for all employees until they comply with the policy.
   • BDefine a standard that specifies the approved MFA methods and configurations.
   • CAllow employees to choose any MFA method as long as they use MFA.
   • DProvide training on MFA best practices.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a commonly used enterprise architecture framework?

   • ACOBIT
   • BITIL
   • CTOGAF
   • DISO 9001
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization's IT policy states that 'all data must be classified according to its sensitivity.' To implement this policy, the organization needs to define specific criteria for each classification level. Which document should be developed?

   • AA standard that defines the data classification levels and the criteria for each level.
   • BA guideline that recommends classification best practices.
   • CA procedure that explains how to label data.
   • DA practice that describes how data is currently classified.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company's IT governance framework is based on COBIT. The board of directors wants to ensure that IT is aligned with business goals. Which COBIT component is MOST directly used to achieve this alignment?

   • AThe COBIT goals cascade, which links enterprise goals to IT-related goals and enabling processes.
   • BThe COBIT audit guidelines, which provide guidance for auditors.
   • CThe COBIT maturity models, which assess process capability.
   • DThe COBIT information model, which defines information criteria.
   Reveal Solution Discussion Select an answer first