Resource and Vendor Management CISA Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   An organization has outsourced its application development to a vendor. The vendor has been delivering features on time, but the quality has been inconsistent, with several critical bugs reported in production. The contract includes a KPI for defect rate, but the vendor argues that the KPI is not clearly defined. Which of the following is the MOST appropriate action for the organization to take?

   • ATerminate the contract and bring development in-house.
   • BWork with the vendor to clarify the definition of the defect rate KPI and agree on a measurement methodology.
   • CImpose penalties on the vendor based on the organization's own interpretation of the KPI.
   • DAccept the vendor's argument and focus on the on-time delivery metric.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A company's IT infrastructure is experiencing performance degradation during peak business hours. The IT manager suspects that the current servers are reaching their capacity limits. The company is planning to launch a new product that is expected to increase demand by 50%. Which of the following is the MOST appropriate approach to capacity management?

   • AImmediately purchase additional servers to handle the expected increase in demand.
   • BOutsource the infrastructure to a cloud provider to handle the variable demand.
   • COptimize the existing applications to reduce their resource consumption before making any hardware changes.
   • DConduct a capacity assessment to analyze current usage trends and forecast future requirements, then implement a scaling strategy.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   An organization is planning to replace its aging servers. The IT manager needs to ensure that the new servers meet the performance requirements of the applications for the next five years. Which of the following is the MOST important factor to consider during the acquisition phase?

   • AThe initial purchase price of the servers.
   • BThe vendor's reputation for providing timely software updates.
   • CThe expected growth in application usage and data volume over the next five years.
   • DThe ease of integrating the new servers with existing legacy systems.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company is considering outsourcing its IT help desk to a third-party vendor. The vendor will have access to the company's internal systems and user data. Which of the following is the MOST important risk mitigation step before signing the contract?

   • ANegotiate a lower price to compensate for the potential risks of outsourcing.
   • BConduct a thorough due diligence review of the vendor's security controls and financial stability.
   • CEnsure the vendor has a backup help desk in a different geographic region.
   • DRequire the vendor to sign a non-disclosure agreement (NDA) to protect confidential information.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the primary purpose of IT vendor management?

   • ATo ensure that vendors are paid as quickly as possible
   • BTo transfer all IT risks to the vendor
   • CTo control costs, mitigate risks, and ensure the quality of services provided by vendors
   • DTo minimize the number of vendors used by the organization
   Reveal Solution Discussion Select an answer first