A multinational corporation is selecting a new IT service provider for its global network infrastructure. The company has operations in regions with strict data residency laws. The evaluation team has narrowed the candidates to two vendors: Vendor A offers the lowest cost and a strong global presence, but its data centers are not located in all required regions. Vendor B has data centers in all required regions but is significantly more expensive. The company's legal department has stated that data residency is a non-negotiable compliance requirement. Which of the following is the MOST appropriate decision?

Select Vendor A and plan to use a third-party data center in the required regions to store data.

Select Vendor A and rely on contractual clauses to ensure data residency compliance.

Reopen the RFP and seek additional vendors who can meet both cost and data residency requirements.

Select Vendor B because it meets the data residency requirement, even though it is more expensive.

Which of the following is a key activity in capacity management?

Developing disaster recovery plans

Conducting annual performance reviews of IT staff

Negotiating contracts with IT vendors

Forecasting future capacity requirements based on business growth projections

A manufacturing company is selecting a new ERP vendor. The company has a strict requirement that the vendor must have experience in the manufacturing industry and provide local support. Which of the following should be the PRIMARY criterion in the vendor selection process?

The vendor offers the most advanced technology features, even if they are not required.

The vendor has a large number of clients globally, indicating market stability.

The vendor's total cost of ownership is the lowest among all bidders.

The vendor's proposed solution includes all required manufacturing-specific functionalities and a local support team.

Why is IT vendor management important to an organization?

It ensures that vendors are always the lowest-cost option

It eliminates the need for internal IT staff

It helps ensure that vendor services align with business needs and deliver value

It guarantees that all vendor services are error-free

What is the primary goal of vendor exit management?

To transition services away from the vendor with minimal disruption to the organization

To prevent the vendor from working with competitors

To terminate the contract as quickly as possible

To ensure that the vendor is not paid for any outstanding services

Certified Information Systems Auditor

Domain 2Objective 3

Resource and Vendor Management CISA Practice Questions (Page 1)

Part of the Governance and Management of IT domain, which accounts for 18% of the CISA exam.

40questions here

8free pages

11concepts

18%of the exam

Questions 1–5

1expert · hard
A multinational corporation is selecting a new IT service provider for its global network infrastructure. The company has operations in regions with strict data residency laws. The evaluation team has narrowed the candidates to two vendors: Vendor A offers the lowest cost and a strong global presence, but its data centers are not located in all required regions. Vendor B has data centers in all required regions but is significantly more expensive. The company's legal department has stated that data residency is a non-negotiable compliance requirement. Which of the following is the MOST appropriate decision?
Select an answer first
2foundation · easy
Which of the following is a key activity in capacity management?
Select an answer first
3application · medium
A manufacturing company is selecting a new ERP vendor. The company has a strict requirement that the vendor must have experience in the manufacturing industry and provide local support. Which of the following should be the PRIMARY criterion in the vendor selection process?
Select an answer first
4foundation · easy
Why is IT vendor management important to an organization?
Select an answer first
5foundation · easy
What is the primary goal of vendor exit management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.