Understand How Governance Impacts DPI (2.2, 2.2.1, 2.2.1.1, 2.2.2, 2.2.3) ITIL-4-STRATEGIC-LEADER-MODULES Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How do governance principles most directly influence the operation of digital products and information (DPI)?

   • AThey replace the need for operational management by automating all decision-making processes.
   • BThey only apply to external-facing digital products, not to internal information systems.
   • CThey set the boundaries and rules within which DPI teams make decisions and take action.
   • DThey define the specific user interface design and user experience standards for each digital product.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A financial services firm is developing a new mobile banking app. The governance board has mandated that all customer data must be encrypted at rest and in transit, and that the app must undergo a security review before each release. The development team is concerned this will slow down their agile delivery. Which governance approach best balances the need for control with the team's need for speed?

   • AEmbed automated security checks into the CI/CD pipeline and use a risk-based review process for releases.
   • BRequire a full manual security audit before every release, regardless of the change size.
   • CPostpone all security reviews until after the app is launched to speed up delivery.
   • DAllow the development team to self-certify compliance without any external oversight.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A government agency is developing a new digital identity system for citizens. The system will store sensitive personal data and must be highly secure. The agency also wants to ensure that the system is user-friendly and accessible to all citizens, including those with limited digital skills. The governance board is concerned about the risk of data breaches and the potential for excluding vulnerable populations. Which approach best balances these concerns?

   • ADelay the project until a perfect solution is found that fully addresses both security and accessibility.
   • BPrioritize security above all else, making the system highly secure but complex to use.
   • CDesign the system with a user-centric approach, but include robust security measures and provide alternative access methods for those without digital skills.
   • DPrioritize accessibility above all else, simplifying the system even if it means reducing security controls.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A public sector organization is developing a digital service for citizens to apply for permits. The governance board has two objectives: to improve citizen experience (value co-creation) and to ensure the service is secure and compliant with data protection laws. The organization has limited budget and must deliver within a fixed timeframe. Which approach best balances these objectives?

   • AOutsource the entire project to a vendor with a fixed-price contract, transferring all governance responsibility.
   • BFocus exclusively on security and compliance, and simplify the citizen experience to minimize risk.
   • CLaunch a basic version quickly to meet the deadline, and address security and compliance in a later update.
   • DPrioritize citizen experience in the design, but include mandatory security and compliance checkpoints at each stage of development.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A multinational corporation is deploying a new HR self-service portal across multiple countries. Each country has different data privacy laws, and the company wants to ensure the portal provides a consistent user experience while complying with local regulations. The governance board is under pressure to deliver quickly. Which approach best balances these competing demands?

   • AUse the most restrictive country's data privacy rules as the global standard for all countries.
   • BDevelop a core portal with a common set of features, and configure local compliance modules for each country.
   • CAllow each country to develop its own portal independently to ensure full compliance.
   • DDelay the rollout until a global privacy standard is agreed upon by all countries.
   Reveal Solution Discussion Select an answer first