Isaca CGEIT Exam - Topic 8 Question 30 Discussion

Actual exam question for Isaca's CGEIT exam

Question #: 30
Topic #: 8

[All CGEIT Questions]

Which of the following provides the BEST evidence of an IT risk-aware culture across an enterprise?

ABusiness staff report identified IT risks.

BIT risks are communicated to the business.

CIT risk-related policies are published.

DThe IT infrastructure is resilient.

Show Suggested Answer

Suggested Answer: A

by Colette at May 09, 2022, 04:47 AM

Limited Time Offer

25%

Off

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Corrie

5 months ago

Wait, are we really saying IT risks are communicated well? That’s hard to believe!

upvoted 0 times

...

Ruthann

6 months ago

D doesn’t really show awareness, just resilience.

upvoted 0 times

...

Dustin

6 months ago

C sounds good, but do people actually read those policies?

upvoted 0 times

...

Mammie

6 months ago

A is important too, but it’s not enough on its own.

upvoted 0 times

...

Afton

6 months ago

I think B is the best choice. Communication is key!

upvoted 0 times

...

Cherry

6 months ago

Option D seems off to me; resilience in infrastructure doesn't necessarily mean the culture is risk-aware. I think it’s more about communication and policies.

upvoted 0 times

...

Corrie

6 months ago

I feel like option A could also be a sign of awareness, but I'm not confident. It seems like just reporting risks isn't the same as having a culture around it.

upvoted 0 times

...

Alison

6 months ago

I remember a practice question where we discussed how published policies (option C) could indicate a risk-aware culture. But I wonder if just having policies is enough without communication.

upvoted 0 times

...

Yuette

6 months ago

I think option B makes sense because if IT risks are communicated, it shows that the business is aware of them. But I'm not entirely sure if that's the best evidence.

upvoted 0 times

...

William

6 months ago

I'm a bit unsure about this one. I'll need to double-check the PTA documentation to make sure I have the right command.

upvoted 0 times

...

Latonia

6 months ago

This question seems straightforward, I think the key is to focus on redundancy and diverse routes for the IP storage network.

upvoted 0 times

...

Francine

6 months ago

D sounds right to me; avoiding single points of failure is a key reason to implement failover systems, if I recall correctly.

upvoted 0 times

...

Stefan

6 months ago

Ah, I think I know the answer! It's option A - we need to set up some default filters in the configuration file to get the filtered search working in SOLR4.

upvoted 0 times

...