MENU
A CIO was notified that a new employee was observed wearing a headset with an optical lens at the organization's data center. The individual was entering voice commands into the device. When approached, the employee explained the device is a new personal technology serving as a hands-free version of a smart phone. The CIO is concerned with potential security vulnerabilities of allowing such devices, and whether they should be banned from the facility. What should be the NEXT course of action in response to the ClO's concern?
Suggested Answer: C
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
DE
Desirae
11 months ago
Defining a risk mitigation strategy is key here. Let's not jump to conclusions!
MA
Margurite
11 months ago
Researching competitors seems pointless. We need to focus on our own security.
BE
Beatriz
11 months ago
Wait, are these headsets really that advanced? I had no idea!
MI
Ming
11 months ago
I think updating the policy is a must. Can't have random devices in the data center.
EL
Eleonore
12 months ago
Sounds like a security nightmare! Better assess the risks first.
LO
Lonny
12 months ago
Competitor usage might not be the best focus right now. We should really prioritize understanding the specific risks of this device first, right?
CH
Chanel
12 months ago
This reminds me of a practice question we did on risk management. I think defining a risk mitigation strategy could come after assessing the risks.
NO
Novella
1 year ago
I'm not entirely sure, but I think updating the acceptable use policy could be important too. It might help clarify what devices are allowed.
KR
Kristel
1 year ago
I remember discussing the importance of assessing risks before making any decisions about new technology. Option D seems like the right step to take first.
TH
Theodora
1 year ago
I'm a little confused by this question. I'm not sure if administrators can add things like reports or policies to organizational groups. I'll have to review my notes on administrative capabilities to answer this one confidently.
MA
Malcom
1 year ago
Designing a new system sounds great, but we need to understand the actual issues before jumping to solutions, right? I guess brainstorming is the way to go.
LE
Leonora
1 year ago
This looks like a straightforward SQL question. I'm pretty confident I can handle this - the key is to carefully read through the options and select the three that are true.
DE
Devorah
1 year ago
I bet the CIO is just jealous they didn't get the cool new hands-free device first. Maybe we should all petition for one!
JE
Jestine
1 year ago
Hmm, I wonder if the employee was just trying to play Candy Crush hands-free. Maybe we should buy them a stand for their phone instead of banning the device.
SH
Sherron
1 year ago
D) Assess the risk associated with the device.
RA
Raymon
1 year ago
Hmm, that could be a good compromise.
CA
Catarina
1 year ago
B) Update the acceptable use policy.
GE
Gerardo
1 year ago
A) Define a risk mitigation strategy.
DO
Donte
1 year ago
Research competitor usage? Really? I'd much rather focus on our own security than worry about what others are doing. Let's just handle our own house first.
PE
Pearline
1 year ago
I'd go with updating the acceptable use policy. It's the most proactive approach to address this new technology before it becomes a bigger issue.
VA
Valene
1 year ago
C) Research competitor usage of similar devices.
VI
Virgina
1 year ago
B) Update the acceptable use policy.
FA
Fairy
1 year ago
A) Define a risk mitigation strategy.
DI
Dierdre
1 year ago
Definitely need to assess the risk first before deciding on any action. Can't just jump to banning the device without understanding the potential vulnerabilities.
MI
Miesha
1 year ago
D) Assess the risk associated with the device.
JA
Janella
1 year ago
Definitely need to assess the risk first before deciding on any action. Can't just jump to banning the device without understanding the potential vulnerabilities.
MU
Muriel
1 year ago
B) Update the acceptable use policy.
DW
Dwight
1 year ago
A) Define a risk mitigation strategy.
PA
Paris
1 year ago
D) Assess the risk associated with the device.
DO
Dominga
1 year ago
Definitely need to assess the risk first before deciding on any action. Can't just jump to banning the device without understanding the potential vulnerabilities.
PI
Pilar
1 year ago
B) Update the acceptable use policy.
RO
Robt
1 year ago
D) Assess the risk associated with the device.
EL
Elza
1 year ago
Definitely, it's important to assess the risk before making any decisions.
PE
Pearline
1 year ago
A) Define a risk mitigation strategy.
GI
Giuseppe
1 year ago
A) Define a risk mitigation strategy.
VA
Vallie
1 year ago
Updating the acceptable use policy could also help address the CIO's concerns.
DE
Demetra
2 years ago
I agree with Dorthy. Assessing the risk associated with the device is crucial.
DO
Dorthy
2 years ago
I think we should define a risk mitigation strategy.