CGEIT practice test

1. Question 1 · 1

   A regulatory audit assessed an enterprise's main transactional application as noncompliant. In addition to fines and required corrections, an agreement was reached to implement a set of governance controls over IT. Accountability for these controls is BEST assigned to which of the following?

   Choose one answer.

   • Internal audit director
   • CIO
   • The board of directors
   • Application users

2. Question 2 · 1

   An enterprise has committed to the implementation of a new IT governance model. The BEST way to begin this implementation is to:

   Choose one answer.

   • prioritize how much and where to invest in IT.
   • identify the role of IT in supporting the business.
   • define policies for data, applications, and organization of infrastructure.
   • identify IT services that currently support the enterprise's capability.

3. Question 3 · 1

   Which of the following is a PRIMARY responsibility of the CIO when an enterprise plans to replace its enterprise resource applications?

   Choose one answer.

   • Ensuring IT architecture requirements are considered
   • Selecting and vetting application vendors
   • Determining critical success factors for related projects
   • Establishing software quality criteria

4. Question 4 · 1

   When establishing a methodology for business cases, it would be MOST beneficial for an enterprise to include procedures for:

   Choose one answer.

   • addressing required changes outside the business case.
   • updating the business case throughout its life cycle.
   • identifying metrics post-implementation to measure project success.
   • entering the business case into the enterprise architecture.

5. Question 5 · 1

   The PRIMARY focus of a committee tasked with evaluating an IT project portfolio should be to ensure:

   Choose one answer.

   • a consistent estimation methodology is leveraged.
   • the enterprise strategy is updated.
   • consistent selection criteria are applied.
   • an industry standard capability maturity model is used.

6. Question 6 · 1

   Which of the following is the MOST important reason for selecting IT key risk indicators (KRIs)?

   Choose one answer.

   • Enabling comparison against similar IT KRIs
   • Increasing the probability of achieving IT goals
   • Assessing the current IT controls model
   • Demonstrating the effectiveness of IT risk policies

7. Question 7 · 1

   Which of the following is the MOST important input for the development of a human resources strategy to address IT skill gaps?

   Choose one answer.

   • Technology direction of the enterprise
   • Training budget allocated for IT staff
   • A recent IT skills matrix
   • Training effectiveness reports

8. Question 8 · 1

   An enterprise recognizes that a large percentage of its IT employees are eligible for retirement in the next five years. A significant amount of institutional knowledge resides with retirement-eligible staff. From the board's perspective, which of the following is the GREATEST concern for the enterprise in this situation?

   Choose one answer.

   • Service delivery to the business
   • Loss of key IT personnel
   • Lack of timeline for succession plan
   • Lack of process documentation

9. Question 9 · 1

   Which of the following groups would be MOST appropriate to decide whether to proceed with an IT-enabled investment at the individual program level?

   Choose one answer.

   • Business sponsors
   • Program management office
   • IT steering committee
   • Board of directors

10. Question 10 · 1

    When assessing the impact of a new regulatory requirement, which of the following should be the FIRST course of action?

    Choose one answer.

    • Update affected IT policies.
    • Implement new regulatory requirements.
    • Assess the budget impact of the new regulation.
    • Map the regulation to business processes.

11. Question 11 · 1

    Which of the following should be the FIRST step for executive management to take in communicating what is considered acceptable use with regard to personally owned devices for company business?

    Choose one answer.

    • Post awareness messages throughout the facility.
    • Develop and disseminate an applicable policy.
    • Provide training on how to protect data on personal devices.
    • Require employees to read and sign a disclaimer.

12. Question 12 · 1

    An enterprise's strategic change requires an IT strategic initiative re-evaluation. Which of the following BEST indicates that an established IT governance framework could handle the re-evaluation?

    Choose one answer.

    • Creation of an IT steering committee to align the IT strategic initiatives to the recent change
    • Inclusion of IT portfolio management procedures with strategic change review activities
    • Development of a business case to evaluate the impact of the strategic change
    • Holding IT investments until an analysis of the strategic change impact was complete

13. Question 13 · 1

    Which of the following BEST indicates that a change management process has been implemented successfully?

    Choose one answer.

    • Degree of control
    • Outcome measures
    • Process performance
    • Maturity levels

14. Question 14 · 1

    Which of the following would provide the BEST input for prioritizing strategic IT improvement initiatives?

    Choose one answer.

    • Business case evaluation
    • Business process analysis
    • Business impact analysis
    • Business dependency assessment

15. Question 15 · 1

    An enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating in-house email capabilities. Which of the following IT strategic actions should be triggered by this decision?

    Choose one answer.

    • Update and communicate data storage and transmission policies.
    • Develop a data protection awareness education training program.
    • Monitor outgoing email traffic for malware.
    • Implement a data classification and storage management tool.

Paid access to all 244 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.