CITM-001 Certified Information Technology Manager Practice Questions

WPA2-Enterprise with 802.1X is the gold standard for enterprise network authentication. Unlike a shared password (PSK), it requires each user or device to have unique credentials, which are authenticated against a central directory (like Active Directory) via a RADIUS server. This allows for granular control, individual access revocation, and robust security against unauthorized access. MAC filtering and hiding the SSID are easily circumvented and are not considered strong security measures.

This statement accurately reflects the official ITIL 4 definitions. A 'change' is a planned activity to alter a service or component, managed through Change Enablement/Control. An 'incident' is an unplanned event that disrupts service and must be resolved as quickly as possible through Incident Management. Understanding this fundamental distinction is critical for effective IT Service Management.

This plan is the most effective and pragmatic. DRaaS is a cost-effective way to achieve aggressive RTO/RPO targets without the massive capital expenditure of building a secondary data center. Cloud-native SIEM solutions are typically faster to deploy and more scalable than on-premises alternatives, addressing the logging requirement efficiently. This frees up budget to tackle the critical patching issue with an automated tool. This approach addresses all key objectives within a reasonable budget and timeframe by leveraging cloud services.

This option correctly describes the hierarchical relationship often depicted in the DIKW (Data, Information, Knowledge, Wisdom) pyramid. Data consists of raw facts (e.g., sales figures). When this data is processed and put into context (e.g., sales figures by region and quarter), it becomes information. When this information is understood, synthesized with experience, and used for decision-making (e.g., identifying a sales trend and launching a targeted marketing campaign), it becomes knowledge.

Application-level encryption is the most appropriate solution. The application encrypts the data before writing it to the database and decrypts it after reading. This means the data at rest in the database is always encrypted and unreadable, even to a database administrator with full privileges. The encryption keys are managed by the application, not the database, providing a strong separation of duties. This meets the PCI DSS requirement to render data unreadable and protects it from privileged database users.

This is the optimal solution. A platform with federated architecture and geo-fencing capabilities directly addresses data sovereignty requirements like GDPR by ensuring data is stored within a specific geographic region (the EU). This meets compliance mandates without fragmenting the user experience, as federation allows different regional instances to communicate securely. A centralized US deployment would violate GDPR. End-to-end encryption protects data in transit but does not address data residency requirements. Deploying separate, isolated platforms would create a fragmented user experience and hinder cross-regional collaboration.

A SOC 2 Type II report is crucial as it audits the operational effectiveness of a service organization's security, availability, processing integrity, confidentiality, and privacy controls over a period of time. This provides assurance that the vendor's security practices are not just designed well, but are also functioning effectively.

The Payment Card Industry Data Security Standard (PCI DSS) is mandatory for any organization that stores, processes, or transmits cardholder data. Since the firm is in financial services, ensuring the BPO partner is PCI DSS compliant is non-negotiable for protecting payment information.

A spine-and-leaf architecture is the industry standard for modern data centers, especially those requiring low latency and high east-west traffic bandwidth, which is characteristic of HPC clusters. Every leaf switch is connected to every spine switch, ensuring that traffic is always only two hops away from its destination. This design provides predictable low latency and high throughput, making it ideal for the HPC requirement. Logical segmentation can then be achieved using technologies like VLANs or VXLANs.

A CRM platform is specifically designed to manage and analyze customer interactions and data throughout the customer lifecycle. Implementing a new, integrated CRM directly supports the goal of improving customer experience by providing a 360-degree view of the customer, enabling personalized service, and streamlining communication across sales, marketing, and support teams. The other options are valuable IT initiatives but are less directly aligned with the specific business goal of enhancing customer experience.

The statement is false. The Zachman Framework is an ontology or a taxonomy, not a prescriptive methodology. It provides a structured way of viewing and defining an enterprise from different perspectives (e.g., Planner, Owner, Designer) and across different interrogatives (What, How, Where, Who, When, Why). It describes the artifacts to create but doesn't prescribe the process for creating them. Frameworks like TOGAF are process-oriented and prescriptive.