DPI Guiding Principles And GRC Practice Question
When auditing a legacy application, an IT governance team discovers that no documentation exists. Instead of demanding a massive documentation project, the team applies 'Start where you are'. What should they do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Inspect the running application code and configuration directly to establish an accurate baseline of its current state.
'Start where you are' means investigating the current state directly through observation and testing rather than assuming or starting from scratch with unverified data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Scrap the application immediately and rewrite it from scratch.
Why it's wrong here
Scrapping without assessment wastes resources and ignores current utility.
- ✓
Inspect the running application code and configuration directly to establish an accurate baseline of its current state.
Why this is correct
Inspecting the actual current state rather than relying on guesswork embodies 'Start where you are'.
- ✗
Assume the application is fully compliant based on its age and sign off on the audit.
Why it's wrong here
Assuming compliance without verification violates risk governance.
- ✗
Hire an external consultant to write a 200-page historical report.
Why it's wrong here
This is bureaucratic and ignores practical investigation.
About these practice questions
One of 315 original DPI practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official AXELOS / PeopleCert exam blueprint
This DPI practice question is part of Courseiva's free AXELOS / PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DPI exam.