Discuss Isaca CGEIT Exam Topic 8 Question 30

Which of the following provides the BEST evidence of an IT risk-aware culture across an enterprise?

ABusiness staff report identified IT risks.

BIT risks are communicated to the business.

CIT risk-related policies are published.

DThe IT infrastructure is resilient.

Suggested Answer: A

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Corrie 11 months ago

Wait, are we really saying IT risks are communicated well? That’s hard to believe!

Ruthann 12 months ago

D doesn’t really show awareness, just resilience.

Dustin 12 months ago

C sounds good, but do people actually read those policies?

Mammie 12 months ago

A is important too, but it’s not enough on its own.

Afton 1 year ago

I think B is the best choice. Communication is key!

Cherry 1 year ago

Option D seems off to me; resilience in infrastructure doesn't necessarily mean the culture is risk-aware. I think it’s more about communication and policies.

Corrie 1 year ago

I feel like option A could also be a sign of awareness, but I'm not confident. It seems like just reporting risks isn't the same as having a culture around it.

Alison 1 year ago

I remember a practice question where we discussed how published policies (option C) could indicate a risk-aware culture. But I wonder if just having policies is enough without communication.

Yuette 1 year ago

I think option B makes sense because if IT risks are communicated, it shows that the business is aware of them. But I'm not entirely sure if that's the best evidence.

William 1 year ago

I'm a bit unsure about this one. I'll need to double-check the PTA documentation to make sure I have the right command.

Latonia 1 year ago

This question seems straightforward, I think the key is to focus on redundancy and diverse routes for the IP storage network.

Francine 1 year ago

D sounds right to me; avoiding single points of failure is a key reason to implement failover systems, if I recall correctly.

Stefan 1 year ago

Ah, I think I know the answer! It's option A - we need to set up some default filters in the configuration file to get the filtered search working in SOLR4.

Isaca CGEIT Exam - Topic 8 Question 30 Discussion