CGEIT Practice Exam 4 — 20 Questions

Question 1

Which THREE of the following are key aspects of workforce planning in IT?

Accepted Answer

Implementing retention strategies for key talent. Identifying needs, developing talent, and retaining staff are the core pillars of effective workforce planning.

Answer

Selecting the IT department's holiday party venue

Answer

Mandatory office attendance policies

Question 2

Which THREE factors should be evaluated when prioritizing IT investments within a portfolio for maximum benefit realization?

Accepted Answer

Strategic alignment with enterprise objectives.. Portfolio prioritization considers strategic alignment, the financial return, and the risk profile (including deliverability) of the investments.

Answer

Project team experience with specific programming languages.

Answer

The age of the current hardware infrastructure.

Question 3

An enterprise is aligning its IT risk appetite with corporate strategic objectives. Which action should the CGEIT-certified practitioner prioritize first?

Accepted Answer

Define the enterprise risk capacity based on strategic objectives.. Aligning risk appetite requires a clear understanding of the enterprise's strategic goals and its capacity to absorb loss.

Answer

Draft the IT risk register for department heads.

Answer

Conduct a technical vulnerability scan of all production servers.

Answer

Implement an automated GRC risk dashboard.

Question 4

An organization's risk appetite has been set as 'low' for data breaches. A new project introduces a moderate risk of a breach. What is the most appropriate governance action?

Accepted Answer

Implement additional security controls to bring the residual risk within the 'low' appetite.. If a project exceeds appetite, controls must be enhanced or the project must be modified.

Answer

Accept the risk because the project is strategically important.

Answer

Lower the 'low' appetite threshold to 'moderate'.

Answer

Document the risk in the risk register and ignore it for now.

Question 5

In the context of IT governance, what is the primary responsibility of the board of directors?

Accepted Answer

Providing strategic direction and monitoring governance performance.. The board's primary role is oversight, ensuring that IT governance is established and that risks are managed in alignment with enterprise appetite.

Answer

Managing the procurement of software and hardware.

Answer

Developing IT policies and procedures.

Answer

Day-to-day management of IT operations.

Question 6

Which document is essential for formalizing the relationship and expectations between IT and the business units?

Accepted Answer

Service Level Agreement (SLA).. The Service Level Agreement (SLA) is the formal document that sets the requirements, responsibilities, and performance expectations for IT services.

Answer

Governance Policy Statement.

Answer

Project Charter.

Answer

IT Strategic Plan.

Question 7

When should an IT governance framework be reviewed?

Accepted Answer

At regular intervals and upon significant enterprise changes.. Frameworks should be reviewed periodically or when significant changes occur in business strategy or the internal/external environment.

Answer

Never, once it is implemented.

Answer

Only when an audit fails.

Answer

Every day.

Question 8

Which TWO items are considered 'Governance enablers' in COBIT?

Accepted Answer

Organizational structures. Processes and organizational structures are defined as key enablers within the COBIT framework.

Answer

Personal employee cars

Answer

Office air conditioning

Answer

Breakroom snacks

Question 9

A multinational corporation is struggling with IT strategic alignment. The board wants to ensure IT investments directly correlate to business value. Which metric should the governance committee prioritize?

Accepted Answer

Percentage of IT initiatives that directly contribute to documented business strategy goals.. Strategic alignment is best measured by the ratio of IT project benefits realized compared to the planned business value, linking IT spend to financial outcomes.

Answer

Total cost of ownership (TCO) of IT assets.

Answer

System uptime and availability percentages.

Answer

IT project delivery on time and within budget.

Question 10

An organization is evaluating its governance structure against the COBIT 2019 framework. Where should the authority for IT governance decisions reside?

Accepted Answer

The IT Steering Committee.. COBIT 2019 emphasizes that governance accountability rests with the board, but authority is often delegated to a designated governance committee.

Answer

The IT Security Manager.

Answer

The Chief Information Officer (CIO).

Answer

The external auditors.

Question 11

A newly appointed CIO is establishing an IT governance framework. Which approach best ensures that IT governance is integrated into the enterprise's existing management structure?

Accepted Answer

Map IT governance activities to existing business decision-making processes and accountabilities.. Integrating governance into existing management structures is a core tenet of COBIT to ensure IT is not siloed.

Answer

Require all IT departments to report directly to the Chief Risk Officer.

Answer

Adopt a proprietary framework developed by a third-party IT consulting firm.

Answer

Implement a parallel IT governance board independent of the executive committee.

Question 12

Which stakeholder should provide the final approval for the IT governance policy?

Accepted Answer

The Board of Directors.. The board of directors (or equivalent) has ultimate accountability for the organization's governance, including IT governance.

Answer

The IT Steering Committee.

Answer

The Chief Technology Officer (CTO).

Answer

The Chief Information Security Officer (CISO).

Question 13

What is the primary purpose of an IT governance framework?

Accepted Answer

To provide a structured approach for achieving IT value and managing risk.. The purpose is to ensure that IT goals align with business goals and that risks are managed while resources are used responsibly.

Answer

To automate IT operations.

Answer

To ensure 100% system uptime.

Answer

To minimize IT costs at all times.

Question 14

How should IT governance ensure that IT-related risks are identified and managed?

Accepted Answer

By incorporating risk management into the enterprise's IT governance policy.. Governance frameworks integrate risk management by setting policies and requiring management to establish risk assessment processes.

Answer

By eliminating IT risk entirely.

Answer

By outsourcing all IT operations to a third party.

Answer

By performing all risk assessments at the board level.

Question 15

Which TWO roles are typically involved in the IT Steering Committee?

Accepted Answer

Chief Information Officer (CIO). Both executive business leadership and senior IT leadership must participate for the committee to be effective.

Answer

Security Support Staff

Answer

External Custodial Services

Answer

Junior Software Developer

Question 16

When establishing an IT governance committee, what is a key requirement for its effectiveness?

Accepted Answer

It must include representation from both business and IT.. A committee must have representation from both business and IT to ensure that decisions are aligned with business priorities and that IT has a voice.

Answer

It must be composed only of technical experts.

Answer

It must be chaired by the CIO.

Answer

It must meet at least once a week.

Question 17

An organization is merging with another company. How should the governance structures be reconciled?

Accepted Answer

Conduct a gap analysis and develop a unified governance framework.. The governance team must perform a gap analysis of both frameworks and synthesize them to support the new, combined organizational strategy.

Answer

Adopt the framework of the company with more employees.

Answer

Keep both frameworks as they are.

Answer

Abandon both frameworks and start from scratch.

Question 18

What is the primary objective of infrastructure resource management in a governance context?

Accepted Answer

Ensuring IT resources support business goals efficiently and effectively. Infrastructure management aims to balance cost, performance, and capacity to support business objectives.

Answer

Maximizing the utilization of all available hardware

Answer

Minimizing the total number of IT personnel required

Answer

Upgrading all infrastructure to the latest available versions annually

Question 19

Which factor most significantly influences the design of an IT governance system?

Accepted Answer

The organization's strategy and business goals.. Enterprise strategy is the primary driver for IT governance, as the framework must support the business objectives.

Answer

The specific software vendors used.

Answer

The current IT hardware lifecycle.

Answer

The number of employees in the IT department.

Question 20

Which THREE factors should be considered when tailoring a COBIT 2019 governance system?

Accepted Answer

Adoption strategy. Size, threat landscape, and adoption strategy are key design factors in COBIT 2019.

Answer

Office paint color

Answer

Employee cafeteria menu