[UPDATED 2023] ISACA CGEIT Questions Prepare with Free Demo of PDF
NEW 2023 Certification Sample Questions CGEIT Dumps & Practice Exam
ISACA CGEIT (Certified in the Governance of Enterprise IT) certification is a professional certification that is designed for individuals who are involved in managing, advising, and providing assurance services related to the governance of enterprise IT. Certified in the Governance of Enterprise IT Exam certification exam is designed to test the candidate's knowledge, skills, and abilities in the areas of IT governance, risk management, strategic alignment, and value delivery. Certified in the Governance of Enterprise IT Exam certification is intended to demonstrate that the candidate has the expertise required to ensure that IT investments are aligned with the organization's objectives and that they are managed effectively to achieve these objectives.
ISACA CGEIT certification is a comprehensive exam that covers a wide range of topics related to IT governance. CGEIT exam covers four domains: Governance of Enterprise IT, IT Governance Frameworks, Strategic Management, and Risk Management. CGEIT exam is designed to assess the knowledge, skills, and abilities required to effectively manage the governance of enterprise IT.
The CGEIT certification exam is a comprehensive test that evaluates the candidate's knowledge of IT governance, risk management, strategic alignment, and value delivery. CGEIT exam consists of 150 multiple-choice questions that must be completed within four hours. CGEIT exam is computer-based and can be taken at a designated testing center or remotely via online proctoring. The passing score for the exam is 450 out of 800 points.
NEW QUESTION # 291
Which of the following statements explains the difference between the IT strategy committee and the IT steering committee?
- A. The IT strategy committee provides direction to management relative to IT strategy, whereas the IT steering committee monitors the resource and priority conflicts.
- B. The IT strategy committee assists the executive in the delivery of the IT strategy, whereas the IT steering committee advises the board and management on IT strategy.
- C. The IT strategy committee focuses on implementation, whereas the IT steering committee focuses on the current and future strategic IT issues.
- D. The IT strategy committee aligns and approves the IT architecture, whereas the IT steering committee monitors the resource and priority conflicts.
Answer: A
NEW QUESTION # 292
Fred is the project manager of the PKL project. He is working with his project team to
complete the quantitative risk analysis process as a part of risk management planning.
Fred understands that once the quantitative risk analysis process is complete, the process will need to be completed again in at least two other times in the project. When will the quantitative risk analysis process need to be repeated?
- A. Quantitative risk analysis process will be completed again after the plan risk response planning and as part of procurement.
- B. Quantitative risk analysis process will be completed again after the cost management planning an as a part of monitoring and controlling.
- C. Quantitative risk analysis process will be completed again after the risk response planning and as a part of monitoring and controlling.
- D. Quantitative risk analysis process will be completed again after new risks are identified and as pa of monitoring and controlling.
Answer: C
NEW QUESTION # 293
Which of the following is the BEST way to provide effective IT risk management?
- A. Implementing a cost-effective mitigation program
- B. Appointing a chief risk officer
- C. Establishing an incident management program
- D. Embedding risk management in operations
Answer: A
NEW QUESTION # 294
CORRECT TEXT
Fill in the blank with an appropriate phrase.
The _______ portion of the issue log records the previous pending issues that have been taken care of.
Answer:
Explanation:
resolved issues
NEW QUESTION # 295
Which of the following IT processes contained in the Deliver and Support domain of COBIT manages the operations?
- A. DS13
- B. DS10
- C. DS9
- D. DS8
Answer: A
NEW QUESTION # 296
An IT strategy committee wants to ensure stakeholders understand who owns each strategic objective. To enable this understanding, which of the following should be communicated to stakeholders?
- A. Risk owners
- B. A RACI chart
- C. Performance measure
- D. The strategic plan
Answer: B
NEW QUESTION # 297
Which of the following BEST reflects mature risk management in an enterprise?
- A. Responsive risk awareness culture
- B. A regularly updated risk register
- C. Ongoing investment in risk mitigation
- D. Ongoing risk assessment
Answer: A
NEW QUESTION # 298
Which of the following roles in Service Design is responsible for delivering a particular service within the agreed service levels and also acts as the counterpart of the Service Level Manager when negotiating OLAs?
- A. The Service Level Manager
- B. The Service Owner
- C. The Service Design Manager
- D. The Service Catalogue Manager
Answer: B
NEW QUESTION # 299
Which of the following outsourcing defines the performance objectives reached by negotiation between the user and the provider of a service, or between an outsourcer and an organization?
- A. Contract
- B. Outsource
- C. Proposal
- D. Service level Agreement (SLA)
Answer: D
NEW QUESTION # 300
Which of the following types of risks includes currency risk, liquidity risk, and technology obsolescence?
- A. Operational risk
- B. Strategic risk
- C. Hazard risk
- D. Asset risk
Answer: D
Explanation:
Section: Volume C
NEW QUESTION # 301
Which of the following has the tendency or inclination of outlook that is a troublesome source of error in human sensing?
- A. Bias (of measurement)
- B. Vulnerability
- C. Risk
- D. Defect
Answer: A
NEW QUESTION # 302
Which of the following components of a policy BEST enables the governance of enterprise IT?
- A. Roles and responsibilities
- B. Terms and definitions
- C. Regulatory requirements
- D. Disciplinary actions
Answer: A
NEW QUESTION # 303
To ensure that information can be traced to the originating event and accountable parties, an enterprise should FIRST:
- A. improve business process controls.
- B. review retention requirements for source information.
- C. capture source information and supporting evidence.
- D. review information event logs tor potential incidents.
Answer: B
NEW QUESTION # 304
Following a major IT incident that resulted in a loss to the enterprise, a CIO is preparing for a meeting with the board of directors to discuss what may have failed internally. Which of the following should the CIO do FIRST to provide assurance to the board?
- A. Ensure IT and enterprise risk management alignment.
- B. Review the IT control environment.
- C. Verify continuous monitoring is being performed.
- D. Review the incident response policy.
Answer: A
NEW QUESTION # 305
When deciding to develop a system with sensitive data, which of the following is MOST important to include in a business case?
- A. Skills gap analysis
- B. A risk assessment to determine the appropriate controls
- C. The additional cost of encrypting sensitive data
- D. Updated enterprise architecture (EA)
Answer: C
NEW QUESTION # 306
A project manager must have certain interpersonal skills to communicate with stakeholders and manage their expectations of the project work. Which of the following interpersonal skills has been identified as one of the biggest reasons for project success or failure?
- A. Motivation
- B. Influencing
- C. Communication
- D. Political and cultural awareness
Answer: C
NEW QUESTION # 307
Which of the following is the MOST valuable input when quantifying the loss associated with a major risk event?
- A. IT environment threat modeling
- B. Key risk indicators (KRIs)
- C. Recovery time objectives (RTOs)
- D. Business impact analysis (BIA) report
Answer: B
NEW QUESTION # 308
Which of the following is the BEST method for determining an enterprise's current appetite for risk?
- A. Interviewing senior management
- B. Reviewing recent audit findings
- C. Assessing social media adoption
- D. Evaluating the balanced scorecard
Answer: A
NEW QUESTION # 309
A business case indicates an enterprise would reduce costs by implementing a bring your own device (BYOD) program allowing employees to use personal devices for email. Which of the following should be the FIRST governance action?
- A. Update the network infrastructure.
- B. Assess the enterprise architecture (EA).
- C. Assess the BYOD risk.
- D. Update the BYOD policy.
Answer: C
NEW QUESTION # 310
When assessing the impact of a new regulatory requirement, which of the following should be the FIRST course of action?
- A. Update affected IT policies.
- B. Assess the budget impact of the new regulation.
- C. Map the regulation to business processes.
- D. Implement new regulatory requirements.
Answer: C
NEW QUESTION # 311
The IT program manager does not see the value of conducting risk assessments for a new major IT project.
The manager is reluctant to cooperate with internal auditors and the newly formed steering committee. Midway through the project, program requirements were changed because the CEO is a friend of a vendor and wants to implement this vendor's new technology. This decision will cause the current IT program budget to be insufficient and will be shown as overspending, After the requirement change request, the IT program manager should FIRST:
- A. request additional funding from the business owner to cover the additional scope.
- B. report the matter to internal audit as a program deviation to be reviewed.
- C. obtain confirmation from the business and a decision by the steering committee.
- D. align IT with the business and agree to the business request.
Answer: C
NEW QUESTION # 312
You are the project manager of the NHQ project for your company. You are working with your project team to complete a risk audit. A recent issue that your project team responded to, and management approved, was to increase the project schedule because there was risk surrounding the installation time of a new material. Your logic was that with the expanded schedule there would be time to complete the installation without affecting downstream project activities. What type of risk response is being audited in this scenario?
- A. Mitigation
- B. Avoidance
- C. Lag Time
- D. Parkinson's Law
Answer: B
Explanation:
Section: Volume A
NEW QUESTION # 313
Mark is the project manager of the BFL project for his organization. He and the project team are creating a probability and impact matrix using RAG rating. There is some confusion and disagreement among the project team as to how a certain risk is important and priority for attention should be managed. Where can Mark determine the priority of a risk given its probability and impact?
- A. Look-up table
- B. Risk management plan
- C. Project sponsor
- D. Risk response plan
Answer: A
NEW QUESTION # 314
......
CGEIT Deluxe Study Guide with Online Test Engine: https://www.exam4docs.com/CGEIT-study-questions.html
CGEIT Test Prep Training Practice Exam Questions Practice Tests: https://drive.google.com/open?id=1j5piG7rMrSiO94DedUxyNVCj1bkb_oL4
