Isaca CGEIT Exam - Topic 3 Question 45 Discussion

Actual exam question for Isaca's CGEIT exam

Question #: 45
Topic #: 3

An independent consultant has been hired to conduct an ad hoc audit of an enterprise's information security office with results reported to the IT governance committee and the board Which of the following is MOST important to provide to the consultant before the audit begins?

AAcceptance of the audit risks and opportunities

BThe scope and stakeholders of the audit

CThe organizational structure of the security office

DThe policies and framework used by the security office

Show Suggested Answer

Suggested Answer: B

by Brett at May 04, 2022, 11:55 AM

Limited Time Offer

25%

Off

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lavina

4 months ago

Not sure if the audit risks are that important at the start.

upvoted 0 times

...

Allene

4 months ago

Agree, understanding the scope is essential for a successful audit.

upvoted 0 times

...

Loreen

4 months ago

Surprised this isn't a no-brainer—organizational structure is key too!

upvoted 0 times

...

Ollie

4 months ago

I think the policies and framework are more crucial.

upvoted 0 times

...

Nicolette

5 months ago

Definitely need the scope and stakeholders first!

upvoted 0 times

...

Lili

5 months ago

Acceptance of audit risks seems relevant, but I wonder if that should come after the consultant understands the scope and stakeholders.

upvoted 0 times

...

Kattie

5 months ago

I feel like the policies and framework used by the security office could be really important too, but I guess it depends on what the audit is focusing on.

upvoted 0 times

...

Jamal

5 months ago

I remember a similar question where understanding the organizational structure was emphasized. It might help the consultant know who to talk to.

upvoted 0 times

...

Loreta

5 months ago

I think the scope and stakeholders of the audit are crucial, but I'm not entirely sure if that's the most important thing to provide first.

upvoted 0 times

...

Candra

5 months ago

I've got this! The SIP domain needs to be set in the signaling-group and ip-network-region forms. Those are the two key places to configure the SIP domain in the Avaya Aura CM.

upvoted 0 times

...

Catalina

5 months ago

This seems straightforward enough. I'll review the options and select the one that matches the default value described in the question.

upvoted 0 times

...

Casie

5 months ago

Hmm, I'm a bit unsure about this one. I'll need to carefully review each option and think through the Java syntax rules for float and double declarations.

upvoted 0 times

...

Mira

5 months ago

Okay, I think I understand the question. The key is to identify the old and new paradigms mentioned in the internal audit report description.

upvoted 0 times

...

Huey

5 months ago

I feel like this question is similar to one we did on redundancy protocols, but I can't quite remember if ICMP was involved in the conditions for heartbeats.

upvoted 0 times

...