CGEIT Practice Test 3 — 25 Questions

Question 1

Which THREE principles are central to COBIT 2019 governance?

Accepted Answer

Dynamic governance system. Meeting stakeholder needs, holistic approach, and dynamic governance are core COBIT 2019 principles.

Answer

Maximizing individual developer freedom

Answer

Outsourcing everything

Question 2

If a project is completed but the expected benefits are not realized, what is the best initial step for a CGEIT professional?

Accepted Answer

Analyze the 'Benefit Dependency Network' to identify where the link between output and outcome failed.. The professional must investigate the cause, which usually lies in the gap between technical delivery and operational adoption.

Answer

Ignore the missing benefits as long as the system works.

Answer

Start a new, more expensive project.

Answer

Blame the technical team for poor coding.

Question 3

What is the primary role of the Chief Information Officer (CIO) in governance?

Accepted Answer

Ensuring IT management acts in accordance with the board's governance directives.. The CIO is the bridge, responsible for translating the board's governance direction into IT management execution.

Answer

Setting the overall corporate strategy.

Answer

Performing all internal IT audits.

Answer

Solely focused on hiring technical staff.

Question 4

Which metric is the most effective indicator of IT governance success?

Accepted Answer

Degree of alignment between IT investments and business value realized. Value realization is the ultimate test of IT governance effectiveness.

Answer

Total cost of IT hardware and software maintenance

Answer

Number of IT projects completed on time

Answer

Number of IT security patches applied per month

Question 5

A global company needs to compare IT investment performance across different business units using different currencies and operational models. Which metric is most suitable for normalization?

Accepted Answer

Normalized TCO relative to business unit output.. Total Cost of Ownership (TCO) normalization allows for a comparison of cost-to-benefit ratios that are not skewed by regional accounting differences or currency fluctuations.

Answer

Number of active projects per business unit.

Answer

IT spend as a percentage of total head count.

Answer

Local currency ROI calculations.

Question 6

Which THREE components are critical for an IT governance system to be effective?

Accepted Answer

Defined processes. Processes, organizational structures, and information flows are core components of a governance system.

Answer

Unlimited breakroom coffee

Answer

The latest gaming console

Question 7

Which THREE factors should the board of directors consider when establishing IT governance oversight mechanisms?

Accepted Answer

Regulatory and compliance requirements.. Board oversight must focus on risk appetite, strategic alignment, and compliance.

Answer

Daily network uptime statistics.

Answer

Detailed software configuration standards.

Question 8

A large enterprise is transitioning to a hybrid cloud environment. How should the governance policy be updated to maintain effective oversight?

Accepted Answer

Develop policies addressing shared responsibility and cloud governance controls.. Governance policies must evolve to cover new risk models, such as shared responsibility in cloud environments, ensuring oversight remains intact.

Answer

Centralize all IT infrastructure back to on-premises.

Answer

Shift all responsibility for security to the cloud provider.

Answer

Eliminate the need for internal IT policies.

Question 9

In the context of the COBIT 2019 framework, what does 'Governance' mean?

Accepted Answer

Evaluation, direction, and monitoring of enterprise activities.. Governance ensures that stakeholder needs, conditions, and options are evaluated to determine balanced, agreed-upon enterprise objectives.

Answer

Execution of technical tasks.

Answer

Managing the budget of the IT department.

Answer

Developing software applications.

Question 10

Which activity is essential for effective IT resource governance?

Accepted Answer

Monitoring and reporting on resource utilization. Monitoring resource usage against planned budgets and performance targets is the core of resource governance.

Answer

Writing code for new applications

Answer

Updating user passwords

Answer

Purchasing new server hardware

Question 11

Which THREE of the following are key aspects of workforce planning in IT?

Accepted Answer

Implementing retention strategies for key talent. Identifying needs, developing talent, and retaining staff are the core pillars of effective workforce planning.

Answer

Selecting the IT department's holiday party venue

Answer

Mandatory office attendance policies

Question 12

Which THREE factors should be evaluated when prioritizing IT investments within a portfolio for maximum benefit realization?

Accepted Answer

Strategic alignment with enterprise objectives.. Portfolio prioritization considers strategic alignment, the financial return, and the risk profile (including deliverability) of the investments.

Answer

Project team experience with specific programming languages.

Answer

The age of the current hardware infrastructure.

Question 13

An enterprise is aligning its IT risk appetite with corporate strategic objectives. Which action should the CGEIT-certified practitioner prioritize first?

Accepted Answer

Define the enterprise risk capacity based on strategic objectives.. Aligning risk appetite requires a clear understanding of the enterprise's strategic goals and its capacity to absorb loss.

Answer

Draft the IT risk register for department heads.

Answer

Conduct a technical vulnerability scan of all production servers.

Answer

Implement an automated GRC risk dashboard.

Question 14

An organization's risk appetite has been set as 'low' for data breaches. A new project introduces a moderate risk of a breach. What is the most appropriate governance action?

Accepted Answer

Implement additional security controls to bring the residual risk within the 'low' appetite.. If a project exceeds appetite, controls must be enhanced or the project must be modified.

Answer

Accept the risk because the project is strategically important.

Answer

Lower the 'low' appetite threshold to 'moderate'.

Answer

Document the risk in the risk register and ignore it for now.

Question 15

In the context of IT governance, what is the primary responsibility of the board of directors?

Accepted Answer

Providing strategic direction and monitoring governance performance.. The board's primary role is oversight, ensuring that IT governance is established and that risks are managed in alignment with enterprise appetite.

Answer

Managing the procurement of software and hardware.

Answer

Developing IT policies and procedures.

Answer

Day-to-day management of IT operations.

Question 16

Which document is essential for formalizing the relationship and expectations between IT and the business units?

Accepted Answer

Service Level Agreement (SLA).. The Service Level Agreement (SLA) is the formal document that sets the requirements, responsibilities, and performance expectations for IT services.

Answer

Governance Policy Statement.

Answer

Project Charter.

Answer

IT Strategic Plan.

Question 17

When should an IT governance framework be reviewed?

Accepted Answer

At regular intervals and upon significant enterprise changes.. Frameworks should be reviewed periodically or when significant changes occur in business strategy or the internal/external environment.

Answer

Never, once it is implemented.

Answer

Only when an audit fails.

Answer

Every day.

Question 18

Which TWO items are considered 'Governance enablers' in COBIT?

Accepted Answer

Organizational structures. Processes and organizational structures are defined as key enablers within the COBIT framework.

Answer

Personal employee cars

Answer

Office air conditioning

Answer

Breakroom snacks

Question 19

A multinational corporation is struggling with IT strategic alignment. The board wants to ensure IT investments directly correlate to business value. Which metric should the governance committee prioritize?

Accepted Answer

Percentage of IT initiatives that directly contribute to documented business strategy goals.. Strategic alignment is best measured by the ratio of IT project benefits realized compared to the planned business value, linking IT spend to financial outcomes.

Answer

Total cost of ownership (TCO) of IT assets.

Answer

System uptime and availability percentages.

Answer

IT project delivery on time and within budget.

Question 20

An organization is evaluating its governance structure against the COBIT 2019 framework. Where should the authority for IT governance decisions reside?

Accepted Answer

The IT Steering Committee.. COBIT 2019 emphasizes that governance accountability rests with the board, but authority is often delegated to a designated governance committee.

Answer

The IT Security Manager.

Answer

The Chief Information Officer (CIO).

Answer

The external auditors.