CGEIT Governance OF Enterprise IT Practice Test 4 — 15 Questions

Question 1

Which TWO items are commonly included in an IT Governance Policy?

Accepted Answer

Scope of governance. Policies define the scope of the framework and the roles/responsibilities of the stakeholders.

Answer

Network IP addresses

Answer

Server rack layout

Answer

Daily task list

Question 2

Which TWO mechanisms are used by governance to monitor performance?

Accepted Answer

Independent internal audit. Reporting and internal auditing are key mechanisms for governance monitoring.

Answer

Hardware inventory scan

Answer

Daily stand-up meetings

Answer

Office security badge logs

Question 3

Which TWO are common challenges in IT governance implementation?

Accepted Answer

Cultural resistance. Lack of executive support and cultural resistance are the most common barriers to effective governance.

Answer

Insufficient desk space

Answer

Slow elevator speed

Answer

Unreliable office internet

Question 4

Which THREE principles are central to COBIT 2019 governance?

Accepted Answer

Dynamic governance system. Meeting stakeholder needs, holistic approach, and dynamic governance are core COBIT 2019 principles.

Answer

Maximizing individual developer freedom

Answer

Outsourcing everything

Question 5

Which TWO metrics are used to measure strategic alignment?

Accepted Answer

Percentage of projects aligned with business strategy. Portfolio alignment and value delivery metrics are key indicators of strategic alignment.

Answer

Number of server reboots

Answer

Average salary of IT staff

Answer

Number of printers repaired

Question 6

Which TWO stakeholders are essential for successful IT governance?

Accepted Answer

Executive Management. The Board of Directors and the Executive Management are the essential top-level stakeholders for governance.

Answer

Local IT repair technicians

Answer

Delivery drivers

Answer

External janitorial staff

Question 7

Which THREE types of risks should IT governance oversee?

Accepted Answer

Operational risks. Operational, strategic, and compliance risks are the primary categories of risk within IT governance.

Answer

Risk of office plant death

Answer

Risk of printer paper jam

Question 8

Which TWO items are considered 'Governance enablers' in COBIT?

Accepted Answer

Organizational structures. Processes and organizational structures are defined as key enablers within the COBIT framework.

Answer

Personal employee cars

Answer

Office air conditioning

Answer

Breakroom snacks

Question 9

Which TWO are common IT governance structures?

Accepted Answer

Architecture Review Board. The IT steering committee and the architecture board are classic governance structures.

Answer

Coffee and Donut Club

Answer

Software testing team

Answer

Help desk support

Question 10

Which THREE items are required for an effective IT investment governance process?

Accepted Answer

Project prioritization process. Business case approval, project prioritization, and ROI measurement are the core steps in investment governance.

Answer

Employee birthday party planning

Answer

Office chair selection

Question 11

During a strategic alignment review, the governance committee identifies that IT investments are not delivering expected value. What is the most effective first step for the committee?

Accepted Answer

Conduct a portfolio review to map current IT investments to strategic business objectives. The committee must first assess the transparency and accuracy of the IT investment portfolio against business goals.

Answer

Cancel all current IT projects and restart with new priorities

Answer

Outsource the IT portfolio management function to a third-party consultant

Answer

Reduce the IT budget by 20% to increase efficiency metrics

Question 12

A newly appointed CIO is establishing an IT governance framework. Which approach best ensures that IT governance activities are integrated into existing business decision-making processes?

Accepted Answer

Embedding IT governance roles and responsibilities into existing business management functions. Integrating IT governance into existing business processes ensures sustainability and adoption, rather than creating a siloed IT governance structure.

Answer

Requiring all IT decisions to be signed off by the board of directors

Answer

Implementing an IT-only governance framework based strictly on COBIT 2019

Answer

Creating a separate IT governance committee with independent reporting lines

Question 13

Which document is primary evidence that the board of directors is fulfilling its oversight responsibility for IT governance?

Accepted Answer

The minutes of board meetings documenting IT strategy review and approval. The IT strategy, when reviewed and approved by the board, demonstrates active oversight.

Answer

An IT incident report detailing recent system downtime

Answer

A technical architecture document describing the enterprise network

Answer

A list of software licenses purchased by the IT department

Question 14

An enterprise is transitioning to a hybrid cloud environment. Which governance mechanism is most critical to ensure compliance with data sovereignty regulations?

Accepted Answer

Implementing a robust data classification policy and control framework. Defining data classification and governance policies is the prerequisite for managing data residency in a hybrid cloud.

Answer

Automated provisioning of infrastructure using Infrastructure as Code (IaC)

Answer

Establishing a service level agreement (SLA) with the cloud provider

Answer

Increasing the frequency of penetration testing on cloud endpoints

Question 15

A company is experiencing friction between IT and business units regarding project priorities. What governance structure should be strengthened to resolve this?

Accepted Answer

The IT Steering Committee. An IT steering committee is specifically designed to facilitate communication and priority alignment between IT and business leadership.

Answer

The IT Change Advisory Board (CAB)

Answer

The Security Operations Center (SOC)

Answer

The IT Infrastructure Architecture board