CGEIT Practice Test 7 — 10 Questions

Question 1

Which THREE of the following are key aspects of workforce planning in IT?

Accepted Answer

Implementing retention strategies for key talent. Identifying needs, developing talent, and retaining staff are the core pillars of effective workforce planning.

Answer

Selecting the IT department's holiday party venue

Answer

Mandatory office attendance policies

Question 2

Which THREE factors should be evaluated when prioritizing IT investments within a portfolio for maximum benefit realization?

Accepted Answer

Strategic alignment with enterprise objectives.. Portfolio prioritization considers strategic alignment, the financial return, and the risk profile (including deliverability) of the investments.

Answer

Project team experience with specific programming languages.

Answer

The age of the current hardware infrastructure.

Question 3

An enterprise is aligning its IT risk appetite with corporate strategic objectives. Which action should the CGEIT-certified practitioner prioritize first?

Accepted Answer

Define the enterprise risk capacity based on strategic objectives.. Aligning risk appetite requires a clear understanding of the enterprise's strategic goals and its capacity to absorb loss.

Answer

Draft the IT risk register for department heads.

Answer

Conduct a technical vulnerability scan of all production servers.

Answer

Implement an automated GRC risk dashboard.

Question 4

An organization's risk appetite has been set as 'low' for data breaches. A new project introduces a moderate risk of a breach. What is the most appropriate governance action?

Accepted Answer

Implement additional security controls to bring the residual risk within the 'low' appetite.. If a project exceeds appetite, controls must be enhanced or the project must be modified.

Answer

Accept the risk because the project is strategically important.

Answer

Lower the 'low' appetite threshold to 'moderate'.

Answer

Document the risk in the risk register and ignore it for now.

Question 5

In the context of IT governance, what is the primary responsibility of the board of directors?

Accepted Answer

Providing strategic direction and monitoring governance performance.. The board's primary role is oversight, ensuring that IT governance is established and that risks are managed in alignment with enterprise appetite.

Answer

Managing the procurement of software and hardware.

Answer

Developing IT policies and procedures.

Answer

Day-to-day management of IT operations.

Question 6

Which document is essential for formalizing the relationship and expectations between IT and the business units?

Accepted Answer

Service Level Agreement (SLA).. The Service Level Agreement (SLA) is the formal document that sets the requirements, responsibilities, and performance expectations for IT services.

Answer

Governance Policy Statement.

Answer

Project Charter.

Answer

IT Strategic Plan.

Question 7

When should an IT governance framework be reviewed?

Accepted Answer

At regular intervals and upon significant enterprise changes.. Frameworks should be reviewed periodically or when significant changes occur in business strategy or the internal/external environment.

Answer

Never, once it is implemented.

Answer

Only when an audit fails.

Answer

Every day.

Question 8

Which TWO items are considered 'Governance enablers' in COBIT?

Accepted Answer

Organizational structures. Processes and organizational structures are defined as key enablers within the COBIT framework.

Answer

Personal employee cars

Answer

Office air conditioning

Answer

Breakroom snacks

Question 9

A multinational corporation is struggling with IT strategic alignment. The board wants to ensure IT investments directly correlate to business value. Which metric should the governance committee prioritize?

Accepted Answer

Percentage of IT initiatives that directly contribute to documented business strategy goals.. Strategic alignment is best measured by the ratio of IT project benefits realized compared to the planned business value, linking IT spend to financial outcomes.

Answer

Total cost of ownership (TCO) of IT assets.

Answer

System uptime and availability percentages.

Answer

IT project delivery on time and within budget.

Question 10

An organization is evaluating its governance structure against the COBIT 2019 framework. Where should the authority for IT governance decisions reside?

Accepted Answer

The IT Steering Committee.. COBIT 2019 emphasizes that governance accountability rests with the board, but authority is often delegated to a designated governance committee.

Answer

The IT Security Manager.

Answer

The Chief Information Officer (CIO).

Answer

The external auditors.