CGEIT Practice Test 2 — 25 Questions

Question 1

Why should benefit realization planning start at the inception of an IT investment?

Accepted Answer

To ensure that the desired business outcomes are clearly defined and measurable.. Benefit realization planning must begin at inception because the entire investment rationale depends on defining what business outcomes the investment is meant to deliver and how those outcomes will be measured. If the desired outcomes are not clearly articulated and made measurable up front, there is no baseline against which to track value delivery, and the initiative risks drifting into a technology project with no demonstrable business return. CGEIT frames IT investment management around value delivery, so anchoring measurable outcomes at the start is what enables later benefit tracking, stage-gate reviews, and post-implementation evaluation.

Answer

To secure the budget before the project is approved.

Answer

To identify technical risks in the software architecture.

Answer

To ensure that the project team is selected correctly.

Question 2

A global retail enterprise runs its e-commerce platform on a mix of on-premises servers and IaaS virtual machines. The CIO wants to ensure that IT resource capacity decisions are driven by business demand signals rather than by infrastructure team convenience. Which governance mechanism BEST supports this objective?

Accepted Answer

Establish a demand management process that translates business forecasts into capacity plans reviewed by the IT steering committee.. Capacity governance must connect business demand to resource provisioning. A demand management process that feeds business forecasts into capacity plans, with steering committee oversight, ensures decisions are driven by business needs rather than infrastructure convenience. The other options either delegate to technical teams, use cost allocation alone, or apply rigid thresholds that ignore demand signals.

Answer

Delegate all capacity decisions to the infrastructure operations team because they have the deepest technical knowledge.

Answer

Adopt a policy that requires all new capacity to be procured only after the existing infrastructure reaches 95% utilization.

Answer

Implement a chargeback model that bills business units for every CPU cycle consumed on the e-commerce platform.

Question 3

When assessing the feasibility of a project, why is it necessary to evaluate the 'risk of benefit realization'?

Accepted Answer

To determine if the expected value can realistically be achieved under current conditions.. Evaluating the risk of benefit realization determines whether the projected business value can actually be delivered given current organizational, technical, and market conditions. It separates optimistic benefit forecasts from achievable outcomes by factoring in uncertainty, dependencies, and constraints. This assessment directly informs investment decisions and whether the business case is defensible.

Answer

To ensure the project follows the vendor's best practices.

Answer

To ensure the technical project has no bugs.

Answer

To reduce the number of stakeholders involved.

Question 4

A manufacturing firm's CIO is establishing benefits ownership for a portfolio of IT-enabled change programs. The steering committee wants to ensure each benefit has clear accountability so that realization can be tracked and intervened upon. Which TWO of the following are essential components of effective benefits ownership? (Choose two.)

Accepted Answer

A named business owner who is accountable for the outcome and has authority over the processes that generate the benefit.. Effective benefits ownership requires an accountable business owner with authority over the process that generates the benefit, plus an agreed measure with baseline and target. Together these create a clear contract for delivery and a basis for intervention. Tracking by the PMO, custody by finance, or executive reporting are supporting mechanisms but do not themselves establish ownership or make the benefit measurable.

Answer

Assignment of benefit tracking to the project management office for the duration of the program.

Answer

A commitment from the CIO to report benefit status directly to the board each quarter.

Answer

A benefits register maintained exclusively by the finance department to ensure consistency of valuation.

Question 5

Which document is essential for formalizing the relationship and expectations between IT and the business units?

Accepted Answer

Service Level Agreement (SLA).. A Service Level Agreement (SLA) is the formal document that defines the services IT will deliver, the expected performance levels, responsibilities of both parties, and remedies for non-performance. It is the primary instrument for codifying the relationship and mutual expectations between IT and business units. While other documents set direction or authorize work, the SLA operationalizes the IT-business relationship.

Answer

Governance Policy Statement.

Answer

Project Charter.

Answer

IT Strategic Plan.

Question 6

A global company needs to compare IT investment performance across different business units using different currencies and operational models. Which metric is most suitable for normalization?

Accepted Answer

Normalized TCO relative to business unit output.. Normalized Total Cost of Ownership relative to business unit output adjusts for differences in currency, scale, and operating model by expressing IT cost per unit of business output (e.g., per transaction, per revenue dollar, per customer). This creates an apples-to-apples comparison across units that operate in different currencies and with different cost structures. It is the only option that both normalizes for currency and contextualizes cost against productive output.

Answer

Number of active projects per business unit.

Answer

IT spend as a percentage of total head count.

Answer

Local currency ROI calculations.

Question 7

Which type of IT resource is most likely to become a bottleneck during a rapid increase in business demand?

Accepted Answer

Computing infrastructure. Computing infrastructure (servers, storage, network capacity) is a finite, physical resource that cannot scale instantly, so a rapid spike in business demand will exhaust capacity and create a bottleneck. Policies, culture, and documentation are intangible and do not constrain throughput in the same way. This makes computing infrastructure the most likely bottleneck under sudden demand growth.

Answer

Policies and procedures

Answer

Organizational culture

Answer

Strategic documentation

Question 8

A governance review reveals that IT decision-making is too slow to support rapid market changes. What should be done?

Accepted Answer

Delegate specific decision-making authorities to lower levels based on defined thresholds. When governance slows decision-making, the correct remedy is to redesign decision rights, not to remove oversight or centralise further. Delegating specific authorities to lower levels with defined thresholds (e.g., spend limits, risk tiers) preserves accountability while enabling speed. This is a core principle of effective governance design — matching decision latency to the pace of the business.

Answer

Require the board of directors to approve every IT change

Answer

Remove all governance oversight requirements to speed up decisions

Answer

Stop all development until the governance process is redesigned

Question 9

A large organization is attempting to reduce technical debt. Which resource management approach is most effective?

Accepted Answer

Allocating a set percentage of capacity to technical debt remediation in every sprint/cycle. The most effective approach to reducing technical debt is to allocate a consistent, planned percentage of capacity in every sprint or cycle to remediation, making debt reduction a continuous, funded activity rather than a one-off project. This prevents debt from compounding and balances new feature delivery with maintainability. It also embeds remediation into governance and resource management routines.

Answer

Outsourcing the maintenance of legacy systems

Answer

Pausing all new development until all legacy systems are replaced

Answer

Waiting for a major system failure to justify remediation budget

Question 10

When balancing risk and value in IT investment, what is the primary consideration for the CGEIT practitioner?

Accepted Answer

Optimizing the realization of benefits while maintaining risk exposure within the enterprise appetite.. The primary consideration for a CGEIT practitioner is to optimize value realization while keeping risk exposure within the enterprise's defined risk appetite. This balances the pursuit of benefits with the constraint of acceptable risk, aligning IT investment with business strategy. It is not about eliminating risk or ignoring it for ROI.

Answer

Prioritizing compliance over all other business requirements.

Answer

Total elimination of IT risk.

Answer

Maximizing the return on investment (ROI) regardless of risk exposure.

Question 11

An organization's risk appetite has been set as 'low' for data breaches. A new project introduces a moderate risk of a breach. What is the most appropriate governance action?

Accepted Answer

Implement additional security controls to bring the residual risk within the 'low' appetite.. The organization has explicitly set a 'low' risk appetite for data breaches, meaning any risk above that threshold is unacceptable without treatment. Since the project introduces a moderate breach risk that exceeds the stated appetite, governance must direct treatment — implementing additional controls to reduce residual risk to within the 'low' appetite. This preserves both the project's value and the board-approved risk posture, which is the core purpose of risk appetite-driven governance.

Answer

Accept the risk because the project is strategically important.

Answer

Lower the 'low' appetite threshold to 'moderate'.

Answer

Document the risk in the risk register and ignore it for now.

Question 12

An organization adopts a multi-cloud strategy. Which governance challenge is most significant regarding resource optimization?

Accepted Answer

The lack of consistent visibility, policy enforcement, and cost management across platforms. In a multi-cloud environment, the dominant governance challenge for resource optimisation is the fragmentation of visibility, policy, and cost control across providers. Each cloud has its own management console, IAM model, tagging conventions, and billing structure, making it difficult to enforce consistent governance or optimise spend holistically. This fragmentation — not provisioning speed or talent — is what undermines governance effectiveness.

Answer

The slower speed of provisioning resources

Answer

The difficulty of finding cloud architects

Answer

The increased cost of data egress fees between clouds

Question 13

A corporation is shifting from a centralized to a decentralized IT structure. How does this affect governance?

Accepted Answer

Governance must define common standards while allowing local decision-making flexibility.. When IT shifts from centralized to decentralized, governance must adapt by defining common enterprise-wide standards (security, data, architecture) while granting business units flexibility for local decisions. This federated model preserves enterprise coherence without stifling local responsiveness. Governance does not disappear — it changes form to balance control and autonomy.

Answer

The board should take over all local IT decisions.

Answer

The governance framework is no longer required.

Answer

Decentralization makes IT governance impossible.

Question 14

Which stakeholder is ultimately accountable for the governance of IT in an enterprise?

Accepted Answer

The Board of Directors. Ultimate accountability for IT governance rests with the Board of Directors (D). In governance frameworks such as COBIT and ISO/IEC 38500, the board is responsible for setting direction, ensuring IT delivers value, optimizing risk, and optimizing resources. While IT steering committees, the CIO, and audit provide oversight and execution, the board holds the ultimate fiduciary accountability to stakeholders for how IT is governed.

Answer

The IT Steering Committee

Answer

The Internal Audit department

Answer

The Chief Information Officer (CIO)

Question 15

A large enterprise is transitioning to a hybrid cloud environment. How should the governance policy be updated to maintain effective oversight?

Accepted Answer

Develop policies addressing shared responsibility and cloud governance controls.. In a hybrid cloud model, governance must be updated to reflect the shared responsibility model, where the cloud provider secures the cloud infrastructure while the enterprise remains accountable for data, identities, and configurations in the cloud. Developing policies that explicitly address shared responsibility and cloud-specific governance controls (e.g., CASB, CSPM, contract SLAs) ensures oversight is maintained across both on-premises and cloud environments. This aligns with CGEIT's focus on aligning IT governance with enterprise strategy and risk.

Answer

Centralize all IT infrastructure back to on-premises.

Answer

Shift all responsibility for security to the cloud provider.

Answer

Eliminate the need for internal IT policies.

Question 16

An organization is updating its IT governance policies. Which element must be included to ensure policy enforcement?

Accepted Answer

Defined roles, responsibilities, and accountability mechanisms. To ensure policy enforcement, an IT governance policy must include defined roles, responsibilities, and accountability mechanisms (B). Policies without assigned ownership and consequences are unenforceable; defining who is responsible for compliance, who monitors it, and what happens when it is violated is what turns a policy document into an enforceable governance instrument. This aligns with COBIT's emphasis on organizational structures and accountability.

Answer

A copy of the IT department's budget spreadsheet

Answer

A detailed technical configuration guide for all servers

Answer

A list of all software vendor names used by the company

Question 17

What is the primary benefit of asset management within IT resource governance?

Accepted Answer

Providing visibility into the IT inventory for optimization and compliance. Asset management in IT resource governance provides visibility into the IT inventory — hardware, software, licenses, and configurations — enabling optimization (cost, utilization, lifecycle) and compliance (license audits, regulatory requirements). This visibility is the foundation for informed investment, retirement, and risk decisions. Without it, governance cannot know what resources exist or whether they are being used effectively.

Answer

Reducing the need for IT staff

Answer

Ensuring all hardware is painted the same color

Answer

Automating the password reset process

Question 18

A project delivers a new system, but the benefits are not realized due to an outdated manual process that was not updated. Where did the benefits management plan fail?

Accepted Answer

In the business change management and process alignment components.. Benefits realization depends not only on delivering the technology but also on changing the business processes and organizational behaviors that surround it. If an outdated manual process remains in place after the system goes live, the expected benefits cannot materialize — this is a failure of the business change management and process alignment components of the benefits management plan.

Answer

In the software coding standards.

Answer

In the technical design phase.

Answer

In the project budget management.

Question 19

An organization is merging with another company. How should the governance structures be reconciled?

Accepted Answer

Conduct a gap analysis and develop a unified governance framework.. When merging organizations, governance structures should be reconciled through a gap analysis that identifies differences, overlaps, and best practices, followed by development of a unified framework. This ensures the merged entity has a coherent governance model aligned with its new strategy, risk profile, and regulatory obligations. Simply adopting one side's framework or keeping both creates inconsistency and accountability gaps.

Answer

Adopt the framework of the company with more employees.

Answer

Keep both frameworks as they are.

Answer

Abandon both frameworks and start from scratch.

Question 20

What is the primary difference between a Project Manager and a Benefits Owner?

Accepted Answer

The project manager is responsible for the technical output; the benefits owner is responsible for the business outcome.. The project manager owns delivery of the project's defined scope, schedule, and technical outputs within constraints, while the benefits owner is accountable for realizing the intended business outcomes and value after delivery. In CGEIT terms, this separation reflects the distinction between project execution (outputs) and benefits realization (outcomes), which is central to IT governance and value delivery.

Answer

There is no difference between these two roles.

Answer

The project manager is responsible for the company's financial results.

Answer

The benefits owner manages the daily development tasks.