MENU
The BEST way to decide how to prioritize issues identified in an IT risk and control self-assessment (CSA) is to understand the risk and:
Suggested Answer: A
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
ME
Merlyn
11 months ago
Agreed with A, but B is also important for prioritization.
VI
Vincenza
12 months ago
Wait, funds for remediation? That seems off...
TA
Tamra
12 months ago
C is too simplistic, we need to consider more factors.
CH
Charlena
12 months ago
I think B makes more sense, criticality matters!
CR
Craig
1 year ago
Definitely A, impact to the enterprise is key.
OR
Ora
1 year ago
Funds required for remediation could be a factor, but I don’t think it should be the primary focus. It’s tricky!
DO
Dorothy
1 year ago
I’m leaning towards the number of IT systems affected, but I feel like that might not capture the full picture.
LO
Lorrie
1 year ago
I remember a practice question that emphasized the criticality of IT services affected. That seems like a strong contender for prioritization.
DE
Devorah
1 year ago
I think the impact to the enterprise is really important, but I’m not entirely sure if that’s the only factor we should consider.
LA
Laurel
1 year ago
Okay, let me see. A help desk is typically there to assist customers with any issues or questions they have, so I think the best answer is C. Responding to customer inquiries makes the most sense to me.
MA
Mammie
1 year ago
Okay, let me think this through. The question says the user has no phone device associated with their account, so I'll need to create a device type that can handle phone calls.
VA
Valene
1 year ago
Ah, I remember learning about these configuration items. If I had to guess, I'd say setting BREAK_ONLY_BEFORE_DATE to false could give you a nice performance boost. But I'll double-check my understanding before answering.
LI
Lisha
1 year ago
I think the key here is that UC wants to share code internally, not publicly. Option A about private packages and scoped registries seems like the best fit based on that requirement. I'll mark that as my answer unless I see something that contradicts it.