Certified in the Governance of Enterprise IT (CGEIT) Sample Questions
The vendor-neutral Certified in the Governance of Enterprise IT (CGEIT) certification created by ISACA is also known as CGEIT. The certification is made to confirm the expertise of IT managers who are in charge of IT enterprise governance. You will undoubtedly benefit from this qualification in terms of a pay boost and a successful career. The article provides a list of Certified in the Governance of Enterprise IT (CGEIT) Sample Questions that cover core exam topics including –
- Domain 1: Governance of Enterprise IT (40%)
- Domain 2: IT Resources (15%)
- Domain 3: Benefits Realization (26%)
- Domain 4: Risk Optimization (19%)
Q1)Which of the following factors should an organization prioritize FIRST when setting priorities for IT projects in Certified in the Governance of Enterprise IT (CGEIT) ?
- A. Benchmarking IT performance results against rivals
- B. The effect on the company of the anticipated project results
- C. The enterprise’s technical capabilities to carry out the tasks
- D. Expectations of the process owner based on operational advantages
Correct Answer: B
Q2)The lack of resources has led to pricey project overruns on all of the ongoing projects, according to senior management. The goals and anticipated results of many of the initiatives also seem to be similar. Which of the following would streamline the procedure for determining funding priorities the BEST in Certified in the Governance of Enterprise IT (CGEIT) ?
- A. Portfolio management
- B. Value governance
- C. Project management
- D. Business case development
Correct Answer: D
Q3)A significant corporate growth that would double the size of the organization has been started, according to the CEO of a sizable company. IT will need to accommodate the anticipated increase in demand. First, the CIO should:
- A. Adjust the IT strategic strategy to reflect the choice.
- B. hire IT personnel in accordance with the growth choice.
- C. go over the resource usage matrix.
- D. Integrate IT staff with the operational divisions.
Correct Answer: C
Q4)Which of the following is BEST made possible in a large organization by portfolio management in Certified in the Governance of Enterprise IT (CGEIT) ?
- A. Performance management
- B. Risk reduction
- C. Value creation
- D. Human resource optimization
Correct Answer: B
Q5)Which of the following is BEST enabled by portfolio management in a large organization?
- A. Portfolio management
- B. Procurement management
- C. Project management
- D. Risk management
Correct Answer: D
Q6)Which of the following should be the FIRST thing a small, freshly founded organization considers when instituting IT governance?
- A. Endorsing standards and enterprise architecture
- B. Specifying the IT project management process
- C. Setting aside money for IT governance software
- D. Delegating tasks and duties within IT
Correct Answer: D
Q7)Which of the following techniques is BEST for assessing the success of IT governance?
- A. Service level management
- B. Balanced scorecard
- C. Risk control self-assessment
- D. Strengths, weaknesses, opportunities, and threats (SWOT) analysis
Correct Answer: B
Q8)A two-year-old IT risk management programme is evaluated by an internal auditor. Which of the following conclusions ought to worry the CIO the MOST?
- A. There is no clear definition of the organisational responsibility for IT risk management.
- B. IT risk training records are not adequately kept on hand for the required amount of time.
- C. None of the IT risk management team’s members hold any certifications in risk management.
- D. The IT risk management team has identified a small number of essential risk indicators, and they are the only ones being monitored. The remainder will be monitored gradually.
Correct Answer: D
Q9)An organization has found that there is significant IT investment duplication. Which of the following approaches would be MOST useful in solving this problem?
- A. Forming a steering committee for IT
- B. Giving centralised IT the authority to decide on IT investments
- C. Keeping track of IT investment investments
- D. Increasing how often IT investment audits are conducted
Correct Answer: A
Q10)The primary transactional application of a business was determined to be noncompliant by a regulatory audit. In addition to penalties and necessary adjustments, a deal was reached to put in place a system of IT governance rules. Which of the following BEST receives accountability for these controls?
- A. Internal audit director
- B. CIO
- C. The board of directors
- D. Application users
Correct Answer: A
Q11)A company is preparing to shift its strategic direction. As a result, there will be a huge rise in IT risk. Which of the following actions should the CIO take FIRST?
- A. Create a plan for the related IT reorganisation.
- B. Suggest delaying the corporate change.
- C. Inform executive management about the risk.
- D. Carry out IT updates in line with the strategy.
Correct Answer: D
Q12)What anticipated strategic organisational benefit from the standardisation of technology platforms is the GREATEST?
- A. Reduces IT operational training costs
- B. Reduces response time
- C. Meets regulatory compliance requirements
- D. Optimizes infrastructure investments
Correct Answer: D
Q13)Which of the following is the BEST approach for an organisation to use to address new legal and regulatory obligations that are relevant to IT?
- A. Assess how other IT companies are handling the new standards.
- B. Adopt a policy of zero tolerance for regulatory compliance issues.
- C. Handle as a risk that must be evaluated before a response is created.
- D. Evaluate the costs and benefits to see if compliance is necessary.
Correct Answer: D
Q14)Which of the following is MOST important for maintaining an IT governance programme that has just been put into place?
- A. Begin an enterprise-wide effort to raise understanding of IT governance.
- B. Appoint a board representative to serve as the program’s sponsor.
- C. Ensure that IT standards, guidelines, and policies are in place.
- D. Regularly compare the programme against other programmes in the same industry.
Correct Answer: C
Q15)Even though it is beyond the enterprise’s risk tolerance, a company chooses to accept the IT risk associated with a subsidiary that is located in another nation. The BEST defense for this choice would be which of the following?
- A. Local market common practices
- B. Risk framework alignment
- C. Technical gaps among subsidiaries
- D. Compliance with local regulations
Correct Answer: C
Q16)When a CEO realizes his company is falling behind its rivals in consumer mobile products, he orders a quick deployment of many new mobile services over the course of the following year. The company’s CIO should first:
- A. Find contractors with expertise in developing mobile applications.
- B. entrust the development of training programmes for their staff to direct reports.
- C. instil a sense of urgency within the IT team that having understanding of mobile devices is essential.
- D. ask for a review of present internal mobile technology capabilities.
Correct Answer: D
Q17)The new strategic objective is “One business function” in the wake of a merger involving two sizable firms. Which of the following should be the FIRST step to achieving this goal—one IT system?
- A. Create an all-inclusive IT steering group.
- B. Identify the specifications for each business function.
- C. Develop a common enterprise architecture.
- D. Establish service level agreements with each corporate function.
Correct Answer: B
Q18)Which of the following strategies is the BEST way to make sure IT technical skills serve the business?
- A. Ensure that the funding for IT technical training is sufficient.
- B. Use customer service satisfaction surveys to identify training needs.
- C. Match the training needs with the skills required to support the business strategy.
- D. Host yearly career fairs geared toward recent graduates in IT-related industries.
Correct Answer: C
Q19)The IT strategy committee has established a data governance strategy including privacy goals relating to access controls, authorised use, and data gathering. What action should the committee take NEXT?
- A. Require a data privacy policy to be written.
- B. Create a budget for data privacy.
- C. Complete a data privacy effect analysis.
- D. Require employees to complete data privacy training.
Correct Answer: A
Q20)A risk management strategy is being developed by an IT governance committee for a portfolio of investments that use IT. Which of the following should be the policy’s primary factor to consider?
- A. Risk appetite of the enterprise
- B. Risk management framework
- C. Value obtained with minimum risk
- D. Possible investment failures
Correct Answer: B
