CGEIT Practice Test 4 — 25 Questions

Question 1

When establishing an IT governance committee, what is a key requirement for its effectiveness?

Accepted Answer

It must include representation from both business and IT.. A committee must have representation from both business and IT to ensure that decisions are aligned with business priorities and that IT has a voice.

Answer

It must be composed only of technical experts.

Answer

It must be chaired by the CIO.

Answer

It must meet at least once a week.

Question 2

An organization is merging with another company. How should the governance structures be reconciled?

Accepted Answer

Conduct a gap analysis and develop a unified governance framework.. The governance team must perform a gap analysis of both frameworks and synthesize them to support the new, combined organizational strategy.

Answer

Adopt the framework of the company with more employees.

Answer

Keep both frameworks as they are.

Answer

Abandon both frameworks and start from scratch.

Question 3

What is the primary objective of infrastructure resource management in a governance context?

Accepted Answer

Ensuring IT resources support business goals efficiently and effectively. Infrastructure management aims to balance cost, performance, and capacity to support business objectives.

Answer

Maximizing the utilization of all available hardware

Answer

Minimizing the total number of IT personnel required

Answer

Upgrading all infrastructure to the latest available versions annually

Question 4

Which factor most significantly influences the design of an IT governance system?

Accepted Answer

The organization's strategy and business goals.. Enterprise strategy is the primary driver for IT governance, as the framework must support the business objectives.

Answer

The specific software vendors used.

Answer

The current IT hardware lifecycle.

Answer

The number of employees in the IT department.

Question 5

Which THREE factors should be considered when tailoring a COBIT 2019 governance system?

Accepted Answer

Adoption strategy. Size, threat landscape, and adoption strategy are key design factors in COBIT 2019.

Answer

Office paint color

Answer

Employee cafeteria menu

Question 6

Which of the following best describes 'strategic alignment' in IT governance?

Accepted Answer

Ensuring IT plans and business plans are synchronized. Strategic alignment is the process of ensuring that IT objectives and activities directly support the enterprise's mission and goals.

Answer

Requiring IT staff to wear uniforms

Answer

Purchasing the most advanced technology available

Answer

Ensuring the data center is located in a seismically safe area

Question 7

A large organization is attempting to reduce technical debt. Which resource management approach is most effective?

Accepted Answer

Allocating a set percentage of capacity to technical debt remediation in every sprint/cycle. Allocating a fixed percentage of resources to technical debt reduction in every development cycle ensures continuous progress.

Answer

Outsourcing the maintenance of legacy systems

Answer

Pausing all new development until all legacy systems are replaced

Answer

Waiting for a major system failure to justify remediation budget

Question 8

An organization wants to improve its IT governance maturity. What is the most important first step?

Accepted Answer

Assessing the current state of governance maturity.. Assessing the current state (maturity) of the governance system is the essential first step before setting goals for improvement.

Answer

Buying an expensive IT governance tool.

Answer

Implementing all COBIT objectives at once.

Answer

Changing the IT leadership team.

Question 9

Which document outlines the authority and responsibilities of the IT governance committee?

Accepted Answer

The committee charter.. The committee charter is the formal document that defines the purpose, authority, and responsibilities of a governance body.

Answer

The annual financial report.

Answer

The IT project plan.

Answer

The employee handbook.

Question 10

Which TWO documents are essential for establishing governance oversight?

Accepted Answer

Governance policy. The governance policy and the committee charter are the foundational documents for oversight.

Answer

Server maintenance schedule

Answer

Vendor contact list

Answer

IT ticket log

Question 11

Which TWO of the following are critical success factors for implementing a new IT governance program?

Accepted Answer

Active support and commitment from senior leadership. Leadership support and cultural integration are essential for the success of any governance program.

Answer

Replacing all existing IT management staff

Answer

Focusing exclusively on technical automation tools

Answer

Ignoring existing business processes to start fresh

Question 12

A newly appointed CIO is establishing an IT governance framework. Which approach best ensures that IT governance activities are integrated into existing business decision-making processes?

Accepted Answer

Embedding IT governance roles and responsibilities into existing business management functions. Integrating IT governance into existing business processes ensures sustainability and adoption, rather than creating a siloed IT governance structure.

Answer

Requiring all IT decisions to be signed off by the board of directors

Answer

Implementing an IT-only governance framework based strictly on COBIT 2019

Answer

Creating a separate IT governance committee with independent reporting lines

Question 13

Which TWO are common IT governance structures?

Accepted Answer

Architecture Review Board. The IT steering committee and the architecture board are classic governance structures.

Answer

Coffee and Donut Club

Answer

Software testing team

Answer

Help desk support

Question 14

What is the primary role of the IT governance framework in an enterprise?

Accepted Answer

To align IT strategy with business strategy and deliver value. The framework provides the structure, processes, and mechanisms to ensure IT meets business goals and manages risk.

Answer

To serve as a technical manual for system administration

Answer

To automate all IT monitoring and reporting

Answer

To replace the need for IT management

Question 15

Which THREE of the following are common challenges when implementing IT governance?

Accepted Answer

Lack of strategic alignment between IT and business. Resistance to change, lack of leadership support, and lack of alignment are common failures.

Answer

The high cost of office furniture

Answer

The inability to find enough IT technicians

Question 16

Which THREE of the following should be considered when assessing the resource requirements for a new IT project?

Accepted Answer

Necessary computing and storage infrastructure capacity. Human expertise, infrastructure capacity, and long-term maintenance costs are all critical factors in assessing project resource needs.

Answer

The preferred lunch break times of the project manager

Answer

The personal hobbies of the project team members

Question 17

Which TWO mechanisms are used by governance to monitor performance?

Accepted Answer

Independent internal audit. Reporting and internal auditing are key mechanisms for governance monitoring.

Answer

Hardware inventory scan

Answer

Daily stand-up meetings

Answer

Office security badge logs

Question 18

Which of the following is an example of an IT governance 'outcome'?

Accepted Answer

Increased alignment of IT services with business objectives.. An outcome is the result of effective governance, such as the achievement of business objectives through IT-enabled value.

Answer

Completion of a training course.

Answer

The purchasing of a new software license.

Answer

A new server installation.

Question 19

A governance review reveals that IT decision-making is too slow to support rapid market changes. What should be done?

Accepted Answer

Delegate specific decision-making authorities to lower levels based on defined thresholds. The governance model should be reviewed to streamline decision-making without sacrificing oversight, often through delegation of authority.

Answer

Require the board of directors to approve every IT change

Answer

Remove all governance oversight requirements to speed up decisions

Answer

Stop all development until the governance process is redesigned

Question 20

Which of the following is the primary purpose of a Key Risk Indicator (KRI)?

Accepted Answer

To serve as an early warning signal of potential risk events.. KRIs are early warning signs that risk exposure is changing.

Answer

To ensure that all employees have completed security awareness training.

Answer

To provide a detailed log of all security threats blocked by the firewall.

Answer

To measure the success of past risk mitigation strategies.