MENU
An audit report has revealed that data scientists are analyzing sensitive "big data" files using an offsite cloud because corporate servers do not have the necessary processing capabilities. A review of policies indicates this practice is not prohibited. Which of the following should be the FIRST strategic action to address the report?
Suggested Answer: A
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
40 comments · newest first
RE
Rebecka
10 months ago
I disagree, a private cloud might not be the best solution right away.
MA
Margery
11 months ago
Revising the info security policy should be the top priority.
LA
Lauryn
11 months ago
Surprised this practice isn't already prohibited!
CE
Cecily
11 months ago
I think updating data governance practices is more important.
JA
Jackie
11 months ago
Sounds like a risk analysis is definitely needed first.
AR
Arleen
12 months ago
I feel like recommending a private cloud could be a good solution, but it might be premature without understanding the risks first.
AR
Arlette
12 months ago
Revising the information security policy sounds like a solid option, but I wonder if we should first assess the risks involved with the current practice.
PE
Penney
12 months ago
I’m not entirely sure, but updating data governance practices might be important too. I remember a similar question where governance was key to compliance.
TI
Tijuana
1 year ago
I think the first step should be to authorize a risk analysis. It seems like we need to understand the potential risks before making any changes.
EU
Eun
1 year ago
I'm a bit confused by this question. There are a few options that seem reasonable, but I'm not sure which one would be the most strategic first step. I'll need to re-read the details carefully.
DE
Desmond
1 year ago
Okay, I think the key here is to address the policy issue first. Revising the information security policy seems like the logical first move to set the right framework for addressing this.
DO
Dortha
1 year ago
Hmm, this is a tricky one. I'm not sure if a risk analysis or updating data governance is the best first step. I'll need to think this through carefully.
SK
Skye
1 year ago
This seems like a straightforward question about addressing a security issue. I'd start by carefully reviewing the options and considering the potential risks and benefits of each approach.
WE
Werner
1 year ago
Hmm, I'm a bit unsure about this one. I know Citrix has various access control options, but I'm not sure which one would be the best fit for this specific scenario. I'll need to think it through carefully.
DI
Dierdre
1 year ago
Okay, let me think this through step-by-step. The code is creating a vector of `B` objects, then using `transform()` to add 1 to each element, and finally printing them out in reverse order. I think the answer is B, but I'll double-check my work.
MO
Monte
1 year ago
Okay, I think I've got a handle on this. The communication of changes to external users under a GNU license seems like the least complex management issue here. The others require more ongoing effort.
KA
Kanisha
1 year ago
Hmm, I'm a bit torn between CentOS and Debian GNU/Linux. Both are based on Red Hat, but Debian might be a bit more user-friendly for a small hobby project. I'll have to think this one through a bit more.
SH
Sharee
1 year ago
I'm pretty confident the answer is C. Hardware-virtualized GPU seems like the right choice for running 3D applications in a Citrix environment with NVIDIA GRID. The question provides enough information to determine that.
SH
Shannon
1 year ago
Oh, big data on the cloud? That's like letting the cat out of the bag, if you ask me. Better tighten up that security policy, pronto!
TE
Tesha
1 year ago
C) Revise the information security policy.
CA
Carmelina
1 year ago
B) Update data governance practices.
JE
Jenifer
1 year ago
A) Authorize a risk analysis of the practice.
RO
Royce
1 year ago
Hold up, why aren't they just using the private cloud option? That's a no-brainer, D all the way!
CE
Celestina
1 year ago
It's important to update data governance practices as well.
VE
Verdell
1 year ago
I agree, using a private cloud would be a good solution.
NO
Norah
1 year ago
They should definitely consider the private cloud option.
MA
Maile
1 year ago
Interesting scenario. I think option B is the way to go - updating the data governance practices could help ensure proper controls are in place for sensitive data.
JA
Janna
1 year ago
D) Recommend the use of a private cloud.
ME
Merissa
1 year ago
C) Revise the information security policy.
BA
Barney
1 year ago
B) Update data governance practices.
CL
Cletus
1 year ago
A) Authorize a risk analysis of the practice.
MI
Miesha
1 year ago
Ooh, this is a tough one. I'm leaning towards C - revising the information security policy seems like the most proactive approach to address the issue.
FE
Felice
1 year ago
I think updating data governance practices could also help address the issue.
ZO
Zona
1 year ago
I agree with Vilma, it's important to assess the risks first.
CH
Chantell
2 years ago
Hmm, the report sounds concerning. I'd go with option A - a risk analysis is crucial to understand the potential impact and determine the best course of action.
KA
Kate
1 year ago
I agree, we should also ensure our data governance practices are up to date to prevent future issues.
VI
Vivienne
1 year ago
B) Update data governance practices.
ST
Stevie
1 year ago
That sounds like a good idea. We need to assess the risks before making any decisions.
OS
Osvaldo
1 year ago
A) Authorize a risk analysis of the practice.
VI
Vilma
2 years ago
We should authorize a risk analysis of the practice.