CGEIT Governance OF Enterprise IT — Timed 40 Questions

Question 1

The enterprise is reviewing its IT governance structure. Which THREE of the following are primary responsibilities of the Board of Directors regarding IT governance?

Accepted Answer

Directing the strategic alignment of IT with business goals.. The Board is responsible for strategic alignment, value delivery, and risk management oversight.

Answer

Defining the technical configuration of server clusters.

Answer

Managing the daily IT helpdesk ticket queue.

Question 2

A newly appointed CIO is integrating COBIT 2019 into the existing governance framework. Which action best ensures that the governance system is dynamic?

Accepted Answer

Customizing the governance system based on the enterprise's unique design factors.. COBIT 2019 focuses on the design factor of a dynamic system, emphasizing the need for regular updates to governance components based on changes in enterprise strategy.

Answer

Focusing solely on the 'Ensure Governance Framework Setting and Maintenance' objective.

Answer

Implementing all 40 governance and management objectives immediately.

Answer

Adopting the framework exactly as published in the COBIT core publication.

Question 3

Which THREE factors should the board of directors consider when establishing IT governance oversight mechanisms?

Accepted Answer

Regulatory and compliance requirements.. Board oversight must focus on risk appetite, strategic alignment, and compliance.

Answer

Daily network uptime statistics.

Answer

Detailed software configuration standards.

Question 4

In the context of IT governance, what is the primary responsibility of the board of directors?

Accepted Answer

Providing strategic direction and monitoring governance performance.. The board's primary role is oversight, ensuring that IT governance is established and that risks are managed in alignment with enterprise appetite.

Answer

Managing the procurement of software and hardware.

Answer

Developing IT policies and procedures.

Answer

Day-to-day management of IT operations.

Question 5

A multinational corporation is struggling with IT strategic alignment. The board wants to ensure IT investments directly correlate to business value. Which metric should the governance committee prioritize?

Accepted Answer

Percentage of IT initiatives that directly contribute to documented business strategy goals.. Strategic alignment is best measured by the ratio of IT project benefits realized compared to the planned business value, linking IT spend to financial outcomes.

Answer

Total cost of ownership (TCO) of IT assets.

Answer

System uptime and availability percentages.

Answer

IT project delivery on time and within budget.

Question 6

The IT steering committee is evaluating a high-cost digital transformation project. What should the committee prioritize to ensure strategic alignment?

Accepted Answer

The business value proposition and contribution to organizational goals.. The primary role of the steering committee is to ensure the project supports the enterprise's strategic objectives.

Answer

The potential for technical debt reduction.

Answer

The specific vendor selection process used for the software purchase.

Answer

Detailed technical architectural specifications.

Question 7

A newly appointed CIO is establishing an IT governance framework. Which approach best ensures that IT governance is integrated into the enterprise's existing management structure?

Accepted Answer

Map IT governance activities to existing business decision-making processes and accountabilities.. Integrating governance into existing management structures is a core tenet of COBIT to ensure IT is not siloed.

Answer

Require all IT departments to report directly to the Chief Risk Officer.

Answer

Adopt a proprietary framework developed by a third-party IT consulting firm.

Answer

Implement a parallel IT governance board independent of the executive committee.

Question 8

A large multinational corporation is transitioning to COBIT 2019. The governance board needs to prioritize governance objectives. Which action should the IT governance lead take first?

Accepted Answer

Conduct a design factors assessment.. The first step in COBIT 2019 is to perform a design factors analysis to tailor the governance system to the enterprise's unique context.

Answer

Implement the IT Balanced Scorecard.

Answer

Adopt all 40 governance objectives immediately.

Answer

Draft new board-level IT policies.

Question 9

What is the primary purpose of an IT governance framework?

Accepted Answer

To provide a structured approach for achieving IT value and managing risk.. The purpose is to ensure that IT goals align with business goals and that risks are managed while resources are used responsibly.

Answer

To automate IT operations.

Answer

To ensure 100% system uptime.

Answer

To minimize IT costs at all times.

Question 10

A firm is experiencing 'governance drift' where IT initiatives are no longer aligned with corporate strategy. Which action should the governance committee take first?

Accepted Answer

Perform a review of business strategy and IT design factors.. The first step in addressing governance drift is to re-evaluate the strategic goals and determine if the governance framework needs re-designing to accommodate changes.

Answer

Replace the existing CIO.

Answer

Conduct an audit of all current IT projects.

Answer

Increase the IT budget to support more initiatives.

Question 11

A large enterprise is transitioning to a hybrid cloud environment. How should the governance policy be updated to maintain effective oversight?

Accepted Answer

Develop policies addressing shared responsibility and cloud governance controls.. Governance policies must evolve to cover new risk models, such as shared responsibility in cloud environments, ensuring oversight remains intact.

Answer

Centralize all IT infrastructure back to on-premises.

Answer

Shift all responsibility for security to the cloud provider.

Answer

Eliminate the need for internal IT policies.

Question 12

Which document is essential for formalizing the relationship and expectations between IT and the business units?

Accepted Answer

Service Level Agreement (SLA).. The Service Level Agreement (SLA) is the formal document that sets the requirements, responsibilities, and performance expectations for IT services.

Answer

Governance Policy Statement.

Answer

Project Charter.

Answer

IT Strategic Plan.

Question 13

An organization is evaluating its governance structure against the COBIT 2019 framework. Where should the authority for IT governance decisions reside?

Accepted Answer

The IT Steering Committee.. COBIT 2019 emphasizes that governance accountability rests with the board, but authority is often delegated to a designated governance committee.

Answer

The IT Security Manager.

Answer

The Chief Information Officer (CIO).

Answer

The external auditors.

Question 14

An organization is failing to achieve the expected ROI on IT investments. Which governance mechanism is most likely missing?

Accepted Answer

An IT Steering Committee focused on value realization.. The IT Steering Committee is responsible for reviewing and approving business cases, ensuring projects are prioritized based on value and ROI.

Answer

Regular penetration testing.

Answer

A robust incident management process.

Answer

Standardized server configurations.

Question 15

Which stakeholder should provide the final approval for the IT governance policy?

Accepted Answer

The Board of Directors.. The board of directors (or equivalent) has ultimate accountability for the organization's governance, including IT governance.

Answer

The IT Steering Committee.

Answer

The Chief Technology Officer (CTO).

Answer

The Chief Information Security Officer (CISO).

Question 16

A firm identifies that its IT governance framework is too burdensome for its agile, small-team structure. What is the most appropriate governance action?

Accepted Answer

Tailor the governance system by adjusting design factors.. COBIT 2019 suggests 'design factors' like enterprise size and agile development methodology to tailor the framework to be efficient and non-burdensome.

Answer

Standardize all processes across the company.

Answer

Ignore the framework until the company grows.

Answer

Appoint more auditors to monitor compliance.

Question 17

What is the primary indicator that IT strategic alignment is successful?

Accepted Answer

Business goals are met through the effective use of IT.. Successful alignment is visible when IT investments and operations directly support the achievement of the enterprise's strategic goals.

Answer

IT cost as a percentage of revenue is minimized.

Answer

The IT department is fully staffed.

Answer

IT projects are completed on time.

Question 18

When establishing an IT governance committee, what is a key requirement for its effectiveness?

Accepted Answer

It must include representation from both business and IT.. A committee must have representation from both business and IT to ensure that decisions are aligned with business priorities and that IT has a voice.

Answer

It must be composed only of technical experts.

Answer

It must be chaired by the CIO.

Answer

It must meet at least once a week.

Question 19

A company is integrating a new AI technology. How should the governance structure oversee this risk?

Accepted Answer

Update governance policies and risk thresholds for new technology.. Emerging technology requires the IT steering committee to review the risk appetite and update governance policies to manage new types of ethical and operational risks.

Answer

Mandate that no new AI technology is used.

Answer

Allow the IT team to proceed without oversight.

Answer

Focus solely on the cost of the technology.

Question 20

Which role is generally responsible for implementing the governance policies defined by the board?

Accepted Answer

Executive Management.. Management, led by the executive suite, is responsible for executing the strategies and policies set by the board.

Answer

Internal Audit.

Answer

The Board of Directors.

Answer

The IT support team.