Isaca Exam CGEIT Topic 8 Question 61 Discussion

Actual exam question for Isaca's CGEIT exam

Question #: 61
Topic #: 8

A CIO was notified that a new employee was observed wearing a headset with an optical lens at the organization's data center. The individual was entering voice commands into the device. When approached, the employee explained the device is a new personal technology serving as a hands-free version of a smart phone. The CIO is concerned with potential security vulnerabilities of allowing such devices, and whether they should be banned from the facility. What should be the NEXT course of action in response to the ClO's concern?

ADefine a risk mitigation strategy.

BUpdate the acceptable use policy.

CResearch competitor usage of similar devices.

DAssess the risk associated with the device.

Show Suggested Answer

Suggested Answer: C

by Tresa at Jul 24, 2023, 01:42 PM

Limited Time Offer

25%

Off

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Devorah

1 months ago

I bet the CIO is just jealous they didn't get the cool new hands-free device first. Maybe we should all petition for one!

upvoted 0 times

...

Jestine

1 months ago

Hmm, I wonder if the employee was just trying to play Candy Crush hands-free. Maybe we should buy them a stand for their phone instead of banning the device.

upvoted 0 times

Catarina

10 days ago

B) Update the acceptable use policy.

upvoted 0 times

...

Gerardo

16 days ago

A) Define a risk mitigation strategy.

upvoted 0 times

...

Donte

1 months ago

Research competitor usage? Really? I'd much rather focus on our own security than worry about what others are doing. Let's just handle our own house first.

upvoted 0 times

...

Pearline

1 months ago

I'd go with updating the acceptable use policy. It's the most proactive approach to address this new technology before it becomes a bigger issue.

upvoted 0 times

Fairy

6 days ago

A) Define a risk mitigation strategy.

upvoted 0 times

...

Dierdre

2 months ago

Definitely need to assess the risk first before deciding on any action. Can't just jump to banning the device without understanding the potential vulnerabilities.

upvoted 0 times

Dwight

2 days ago

A) Define a risk mitigation strategy.

upvoted 0 times

...

Paris

13 days ago

D) Assess the risk associated with the device.

upvoted 0 times

...

Dominga

16 days ago

Definitely need to assess the risk first before deciding on any action. Can't just jump to banning the device without understanding the potential vulnerabilities.

upvoted 0 times

...