Exam Questions and CORRECT Answers
On the topic of a framework for governance: Before implementing an IT balanced scorecard
(BSC) for projects, an enterprise must. - CORRECT ANSWER Define KPI's for each project:
By Defining key performance indicators (KPIs) for each strategic project, the enterprise will be
in a position to measure the actual success of the project in terms of meeting business needs
expressed in performance parameters or numbers.
On the topic of a framework for governance: Which of the following has the GREATEST impact
on the design of the IT governance framework? - CORRECT ANSWER Organizational
structure and leadership: IT governance leverages enablers, such as organizational structure and
leadership, to ensure that stakeholder needs, conditions, and options are evaluated to determine
balanced, agreed-on enterprise objectives to be achieved. Leadership is commonly expressed
through the organizational principles, policies, and frameworks.
On the topic of a framework for governance: Which of the following BEST provides an internal
control environment? - CORRECT ANSWER Processes that ensure specific outcomes: When
this occurs a strong internal control environment is formed.
On the topic of a framework for governance: Which of the following should make final data
access decisions for a critical project? - CORRECT ANSWER Data owners: Data owners are
the best position to decide about access, based on the person's role and responsibilities.
On the topic of a framework for governance: Which on of the following analyses BEST
describes the intent of the security metrics from a governance standpoint? - CORRECT
ANSWER Security management performance compared to business objectives: The purpose
of security metrics is to measure security performance against business objectives; therefore, this
option best describes the intent.
On the topic of a framework for governance: Which of the following most enhances the
oversight of the bard of directors over the effectiveness of IS internal controls? - CORRECT
ANSWER An audit committee: To perform an effective oversight role on management, it is
essential that the board of directors receive independent and reliable feedback and evidence. This
is possible through an audit committee.