Isaca CGEIT Dumps

Question # 1

Which of the following should be the PRIMARY governance objective for selecting key riskindicators (KRIs) related to legal and regulatory compliance?

A. Identifying the risk of noncompliance 
B. Demonstrating sound risk management practices 
C. Measuring IT alignment with enterprise risk management (ERM) 
D. Ensuring the effectiveness of IT compliance controls 

Show Answer

Question # 2

The PRIMARY objective of building outcome measures is to: 

A. monitor whether the chosen strategy is successful  
B. visualize how the strategy will be achieved. 
C. demonstrate commitment to IT governance. 
D. clarify the cause-and-effect relationship of the strategy. 

Show Answer

Question # 3

Which of the following are PRIMARY factors in ensuring the success of an enterprisequality assurance program?

A. Enterprise risk appetite and tolerance 
B. Risk management and control frameworks 
C. Continuous improvement plans 
D. A process maturity framework and documented procedures 

Show Answer

Question # 4

An enterprise wishes to establish key risk indicators (KRIs) in an effort to better manage ITrisk. Which of the following should be identified FIRST?

A. Risk mitigation strategies  
B. Enterprise architecture (EA) components  
C. The enterprise risk appetite 
D. Key performance metrics 

Show Answer

Question # 5

Which of the following is the BEST method to monitor IT governance effectiveness? 

A. Service level management 
B. Balanced scorecard 
C. Risk control self-assessment (CSA) 
D. SWOT analysis 

Show Answer

Question # 6

A board of directors has just received a report indicating that only a small number of ITinitiatives have been completed on time and within budget, A third of the projects werecancelled prior to completion, and more than half will cost almost double their originalestimates. An analysis has determined that no one is held responsible for the completion ofinvestment initiatives, and there is no consistency in execution. Which of the followingwould BEST help the enterprise address these problems?

A. Establishing a project governance framework 
B. Assigning business management to an IT investment review board 
C. Establishing an IT risk management plan 
D. Aligning IT investment priorities to the business  

Show Answer

Question # 7

Which of the following provides the BEST assurance on the effectiveness of IT service management processes?

A. Performance of incident response 
B. Continuous monitoring 
C. Key risk indicators (KRIs) 
D. Compliance with internal controls 

Show Answer

Question # 8

In which of the following situations is it MOST appropriate to use a quantitative riskassessment?

A. There is a lack of accurate and reliable past and present risk data.  
B. The risk assessment needs to be completed in a short period of time. 
C. The objectivity of the risk assessment is of primary importance.  
D. The risk assessment is needed for an IT project business case. 

Show Answer

Question # 9

The MOST effective way to ensure that IT supports the agile needs of an enterprise is to: 

A. perform process modeling. 
B. outsource infrastructure management. 
C. develop a robust enterprise architecture (EA). 
D. implement open source systems. 

Show Answer

Question # 10

Which of the following is the PRIMARY purpose of an effective set of key risk indicators (KRIs)? 

A. Identifying possible future adverse impacts on the enterprise 
B. Evaluating existing technology for risk monitoring capabilities 
C. Establishing executive level buy-in of the risk program 
D. Quantifying the productivity of the risk management team 

Show Answer

Question # 11

What should be done FIRST when feedback indicates recently implemented softwareproducts are not meeting business unit expectations?

A. Review help desk logs.  
B. Confirm user acceptance testing (UAT) was completed.  
C. Request a gap analysis. 
D. Institute a new software training program 

Show Answer

Question # 12

An enterprise is approaching the escalation date of a major IT risk. The IT steeringcommittee wants to ascertain who is responsible for the risk response. Where should thecommittee find this information?

A. Resource management plan  
B. RACl chart 
C. Risk management plan  
D. Risk register 

Show Answer

Question # 13

The PRIMARY benefit of integrating IT resource planning into enterprise strategic planningis that it enables the enterprise to:

A. allocate resources efficiently to achieve desired goals. 
B. adjust business goals depending upon resource availability. 
C. prioritize resource allocation based on sourcing strategy. 
D. develop tactical plans to achieve resource optimization. 

Show Answer

Question # 14

An IT investment review board wants to ensure that IT will be able to support businessinitiatives. Each initiative is comprised of several interrelated IT projects. Which of thefollowing would help ensure that the initiatives meet their goals?

A. Review of project management methodology 
B. Review of the business case for each initiative 
C. Establishment of portfolio management 
D. Verification of initiatives against the architecture 

Show Answer

Question # 15

An enterprise has a large backlog of IT projects. The current strategy is to execute projectsas they are submitted, but executive management does not believe this method is optimal.Which of the following is the MOST important action to address this concern?

A. Implement stage-gating to determine the value of each project. 
B. Establish a performance dashboard that determines business value. 
C. Implement a methodology to prioritize projects based on resource availability. 
D. Create a combined business/IT committee to determine project prioritization. 

Show Answer

Question # 16

Of the following, who should be responsible for ensuring the regular review of qualitymanagement performance against defined quality metrics?

A. Process owners 
B. Risk management team 
C. Internal auditors 
D. Executive management 

Show Answer

Question # 17

IT has launched new portfolio management policies and processes to improve thealignment of IT projects with enterprise goals. The latest audit report indicates that noimprovement has been made due to confusion in the decision-making process. Which ofthe following is the BEST course of action for the CIO?

A. Deliver prioritization and facilitation training. 
B. Implement a performance management framework. 
C. Create an IT portfolio management risk framework. 
D. Develop and communicate an accountability matrix. 

Show Answer

Question # 18

An airline wants to launch a new program involving the use of artificial intelligence (Al) andmachine learning The mam objective of the program is to use customer behavior todetermine new routes and markets Which of the following should be done NEXT?

A. Consult with the enterprise privacy function  
B. Define the critical success factors (CSFs)  
C. Present the proposal to the IT strategy committee 
D. Perform a business impact analysis (BIA) 

Show Answer

Question # 19

Which of the following BEST demonstrates the effectiveness of enterprise IT governance? 

A. An IT balanced scorecard is used.  
B. Business objectives are achieved.  
C. Business objectives are defined. 
D. IT processes are measured. 

Show Answer

Question # 20

An enterprise learns that a new privacy regulation was recently published to protectcustomers in the event of a breach involving personally identifiable information (Pll). The ITrisk management team's FIRST course of action should be to:

A. evaluate the risk appetite for the new regulation. 
B. define the risk tolerance for the new regulation. 
C. determine if the new regulation introduces new risk. 
D. assign a risk owner for the new regulation.

Show Answer