stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Certified in the Governance of Enterprise IT (CGEIT) Preparatory Program Quiz 1 Flashcards | StudBud
Explore
/
Certified in the Governance of Enterprise IT (CGEIT) Preparatory Program Quiz 1
Certified in the Governance of Enterprise IT (CGEIT) Preparatory Program Quiz 1
23 terms
·
StudBud Administration
·
1 play
Imported from external platform
Flashcards
23 cards
F
Practice quiz
P
Host live
L
Questions
23
Answers
1
2. Who decides on requests to implement non-approved banking technology standards?
The enterprise investment committee
The IS audit committee.
The IT architecture review committee
The IT steering committee
2
12. Why is the Information Security Strategy important for a large Bank?
Helps IT auditors ensure compliance with rules and regulations.
Provides users guidance on how to operate securely in everyday tasks.
Provides a basis for determining the best logical security architecture.
Provides achieving outcomes management wants & in managing security risk
3
9. In the risk management process, a cost benefit analysis is MAINLY performed:
As part of an initial risk assessment
During an information asset valuation.
When insurance is calculated for risk transfer
As part of risk response planning.
4
4. What's the best method to verify deployment of system security patches on servers as an IT GRC Manager in a bank?
Trace OS patch logs to system change control requests.
Trace OS patch logs to OS vendor’s update documentation.
Trace change control requests to operating system (OS) patch logs.
Review change control documentation for key servers.
5
21. What's the objective of regularly testing information system controls as an IT GRC Manager in Financial Institution?
Identify design flaws, failures and redundancies proactively
Assess the control risk and formulate opinion on the level of reliability.
Evaluate risk assessment need and recommend corrective action(s).
Provide the necessary evidence to support management assertions
6
18. The MOST significant risk when defining information architecture is:
Failure to adjust best practice models to suit the business requirements.
Incorrectly assigning information ownership.
Failure to identify and categorize critical information assets.
Incorrectly defining the risk taxonomy.
7
13. In order to BEST support the enterprise’s business goals, the information technology area should:
Monitor performance through the use of metrics.
Ensure the availability of system solutions required by the business areas.
Build solutions from business requirements aligned with business strategy.
Define architecture implementation.
8
16. What is the MOST important criteria for a risk-based process when implementing ISO ISMS 27001 standard in your bank?
The risk management mission statement
The current state and desired future state
Risk management staffing requirements
Risk mitigation investment plans
9
23. For IT-related risk scenarios in a new Mobile Banking Application, what's most important to identify?
Hypothetical risk scenarios
Information system environment
External risk scenarios
Business objectives
10
20. What primary advantage of adopting a risk management maturity model in a Bank's risk management process?
Permit alignment with business objectives.
Ensure that security controls are effective.
Enable continuous improvement.
Help improve governance and compliance.
11
19. What Cyber risks addressed by WAF on Financial Institution's Online Trading Platform?
WAF can natively call up Enforcement Authority
WAF natively inspects Trading platform Application logi
All of the above
WAF detects attacks based on the signatures and pattern of the web traffic.
12
7. While implementing the governance of enterprise IT, which of the following is the MOSTcritical consideration?
IT architecture
Stakeholder needs
Process maturity
Organizational structure
13
1. Which of the following MOST accurately reflects key areas of the governance of enterprise IT?
Plan, Do, Check, Act
Evaluate, Direct, Monitor
Requirement analysis, Design, Development, Implementation, Support
Initiate, Plan, Execute, Monitor, Control.
14
10. What is the best action for unupdated corporate IT standards in a bank's IT Management risk assessment?
Report that IT standards are adequate and do not need to be updated.
Review the standards and identify the possible risks to the organization.
Determine that the standards should be updated annually.
Review the IT policy and see how frequently IT standards should be updated.
15
6. Which is the best control to remove system access for contractors & temporary users in bank's access provisioning?
Require managers to email security when the user leaves.
Establish predetermined, automatic expiration dates.
Ensure that everyone has signed a security acknowledgement.
Log all account usage and send it to their manager.
16
22. Select the three key parameters in the Technology Risk Management Guidelines for an effective BCP and DRP in a Bank.
Mean Time to Respond (MTTR).
Mean time between failures (MTBF)
Business Impact Analysis (BIA)
Recovery Time Objective (RTO)
Recovery point objective (RPO)
Mean Time to Detect (MTTD)
17
3. What provides the overall risk status of the enterprise for the Risk Management Committee?
Risk management
Risk profile
Risk analysis
Risk appetite
18
5. Which option best satisfies the bank's governance and management objectives when establishing a governance system?
Information owner and quality criteria
Policies and frameworks
Risk appetite and risk profile
Metrics and assurance
19
14. Which of the following MOST accurately key driver for the implementation of the governance enterprise IT for FI's?
Compliance failures related to regulatory issues.
A high number of access violation attempts captured through monitoring.
Appointment of a new chief information officer to the organization
Changes in sourcing arrangements with key suppliers
20
15. Select the three key financial crime addressed by the COSMIC platform developed by Monetary Authority of Singapore
Proliferation financing
Misuse of documentation
Misuse of legal persons
Misuse of trade finance for illicit purposes
21
17. The MOST important step for defining the IT strategic plan and road map is to:
Create the IT tactical plan first.
Obtain approval from the chief information officer.
Aggregate all IT programs.
Obtain support from key stakeholders.
22
11. Which of the following is the MAIN objective of governance of enterprise IT?
Obtain funding for current and future IT projects.
Use technology to support business needs.
Optimize the use of available IT resources.
Take advantage of the latest technology
23
8. Which of the following is the PRIMARY role of the banking IT steering committee?
Designing the IT architecture
Prioritizing strategic IT projects
Defining and justifying IT-enabled projects
Monitoring process performance
