Free Access ISACA.CGEIT.v2022-03-18.q328 Practice Test (Page 24)

Question 111

An airline wants to launch a new program involving the use of artificial intelligence (Al) and machine learning The mam objective of the program is to use customer behavior to determine new routes and markets Which of the following should be done NEXT?

A.Perform a business impact analysis (BIA)

B.Present the proposal to the IT strategy committee

C.Define the critical success factors (CSFs)

D.Consult with the enterprise privacy function

Question 112

Which of the following is the PRIMARY purpose of an effective set of key risk indicators (KRIs)?

A.Establishing executive level buy-in of the risk program

B.Quantifying the productivity of the risk management team

C.Identifying possible future adverse impacts on the enterprise

D.Evaluating existing technology for risk monitoring capabilities

Question 113

Which of the following terms includes performance objectives and criteria (POCs), performance indicators, and any other means that evaluate the success in achieving a specified goal?

A.Precision

B.Performance Measurement System

C.Performance Measure

D.Performance Measurement Category

Question 114

A CEO of a large enterprise is concerned that risk events are not regularly addressed at the C-suite level unless related to emergency incidents. Which of the following is the BEST way for the CEO to ensure risk events are given sufficient time and attention?

A.Instruct managers to take ownership for their department's identified risks.

B.Include the discussion of key enterprise risk as an agenda item at board meetings.

C.Require the development of a risk procedure on how to capture risks.

D.Issue performance objectives that target the elimination of enterprise risks.

Question 115

Management has asked you to perform a risk audit and report back on the results.
Bonny, a project team member asks you what a risk audit is. What do you tell Bonny?

A.A risk audit is a review of all the risk probability and impact for the risks, which are still present in the project but which have not yet occurred.

B.A risk audit is a review of the effectiveness of the risk responses in dealing with identified risks and their root causes, as well as the effectiveness of the risk management process.

C.A risk audit is a review of all the risks that have yet to occur and what their probability of happening are.

D.A risk audit is an audit of all the risks that have occurred in the project and what their true impact on cost and time has been.

Other Version: 1679ISACA.CGEIT.v2025-07-02.q382; 982ISACA.CGEIT.v2024-06-24.q467; 4508ISACA.CGEIT.v2022-08-29.q308; 119ISACA.Prepawaypdf.CGEIT.v2021-09-28.by.pandora.177q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 151Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 165TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 172PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 151Salesforce.Data-Architect.v2025-09-05.q216; 145Adobe.AD0-E605.v2025-09-05.q50

Question 111

Question 112

Question 113

Question 114

Question 115

Download PDF File