Which of the following should be the PRIMARY goal of implementing service level agreements (SLAs) with an outsourcing vendor?

A. Establishing penalties for not meeting service levels
B. Complying with regulatory requirements
C. Achieving operational objectives
D. Gaining a competitive advantage

Reviewing which of the following should be the FIRST step when evaluating the possibility of outsourcing an IT system?

A. Outsourcing strategy
B. IT staff skill sets
C. Outsourced business processes
D. Service level agreements (SLAs)

A CEO wants to establish a governance framework to facilitate the alignment of IT and business strategies. Which of the following should be a KEY requirement of this framework?

A. A service delivery strategy
B. Defined resourcing levels
C. A defined enterprise architecture
D. An outsourcing strategy

The PRIMARY reason for periodically evaluating IT resource staffing requirements is to:

A. ensure the enterprise has sufficient resources to address changing business and IT needs.
B. ascertain the IT function has sufficient skilled staff to maintain daily operations.
C. verify that human resource recruitment and retention processes meet enterprise IT objectives.
D. confirm IT-related responsibilities are defined for the enterprise's business and IT staff.

Which of the following is the MOST appropriate mechanism for measuring overall IT organizational performance?

A. IT balanced scorecard
B. Service level metrics
C. Maturity model
D. IT portfolio return on investment

The use of an enterprise architecture framework BEST supports IT governance by providing:

A. key information for IT service level management.
B. IT standards for application development.
C. business information for IT capacity planning.
D. reference models to align IT with business.

Who should be accountable for quantifying the business impact of a potential breach of a server containing retail transactions for the last year?

A. Information systems security officer
B. Head of retail
C. Chief risk officer
D. Chief information officer

An enterprise is implementing its FIRST mobile sales channel. Final approval for accepting the associated IT risk should be obtained from which of the following?

A. IT steering committee
B. Chief information officer
C. Business sponsor
D. Risk manager

Which of the following is the BEST IT architecture concept to ensure consistency, interoperability, and agility for infrastructure capabilities?

A. Establishment of an IT steering committee
B. Standards-based reference architecture and design specifications
C. Design of policies and procedures
D. Establishment of standard vendor and technology designations

An enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating in-house email capabilities. Which of the following IT strategic actions should be triggered by this decision?

A. Update and communicate data storage and transmission policies.
B. Develop a data protection awareness education training program.
C. Monitor outgoing email traffic for malware.
D. Implement a data classification and storage management tool.