An organization is developing a governance framework to ensure consistent security practices. They have defined a high-level rule that 'all remote access must be secured.' To make this rule actionable, which of the following should be created NEXT?

A guideline that suggests best practices for remote access.

A standard that specifies the approved encryption protocols and authentication methods for remote access.

A practice that documents how remote access is currently done.

A procedure that describes the exact steps to configure a VPN client.

A manufacturing company's corporate strategy focuses on expanding into new markets through digital customer engagement. The IT department is developing its annual strategy. Which IT initiative is MOST aligned with the corporate strategy?

Consolidating data centers to reduce operational costs.

Migrating all on-premises servers to a colocation facility.

Upgrading the enterprise resource planning (ERP) system to the latest version.

Implementing a customer relationship management (CRM) system with mobile and web capabilities.

A large university is planning to modernize its student information system. The IT department wants to ensure that the new system aligns with the university's academic and administrative processes. Which approach would BEST support this alignment?

Conduct a survey of student satisfaction with the current system.

Purchase a commercial off-the-shelf (COTS) student information system and customize it heavily.

Assign a project manager to oversee the implementation and report to the IT director.

Develop an enterprise architecture that maps current and future business processes, data, applications, and technology.

A company's corporate strategy is to become the lowest-cost provider in its industry. The IT department has proposed two major initiatives: (1) a customer-facing mobile app to increase sales, and (2) an automation project to reduce operational costs. The IT budget can only fund one. Which initiative should be prioritized to BEST align with the corporate strategy?

The automation project, because it directly supports the cost leadership strategy.

Neither project, because IT investments should be minimized to reduce costs.

The mobile app, because it increases sales and revenue.

Both projects, because they both provide value.

How does IT governance ensure IT investments are aligned with business goals?

By requiring all IT projects to be approved by the CIO

By separating IT strategy from business strategy

By focusing only on cost reduction in IT

By establishing a process for prioritizing IT projects based on business value

Certified Information Systems Auditor

Domain 2Objective 1

IT Governance and Strategy CISA Practice Questions (Page 6)

Part of the Governance and Management of IT domain, which accounts for 18% of the CISA exam.

32questions here

7free pages

7concepts

18%of the exam

Questions 26–30

26application · medium
An organization is developing a governance framework to ensure consistent security practices. They have defined a high-level rule that 'all remote access must be secured.' To make this rule actionable, which of the following should be created NEXT?
Select an answer first
27application · medium
A manufacturing company's corporate strategy focuses on expanding into new markets through digital customer engagement. The IT department is developing its annual strategy. Which IT initiative is MOST aligned with the corporate strategy?
Select an answer first
28application · medium
A large university is planning to modernize its student information system. The IT department wants to ensure that the new system aligns with the university's academic and administrative processes. Which approach would BEST support this alignment?
Select an answer first
29expert · hard
A company's corporate strategy is to become the lowest-cost provider in its industry. The IT department has proposed two major initiatives: (1) a customer-facing mobile app to increase sales, and (2) an automation project to reduce operational costs. The IT budget can only fund one. Which initiative should be prioritized to BEST align with the corporate strategy?
Select an answer first
30foundation · easy
How does IT governance ensure IT investments are aligned with business goals?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.