CGEIT IT Resources Practice Test 4 — 15 Questions

Question 1

An enterprise's data center lease expires in 18 months. The CIO must present a resource strategy to the board covering compute, storage and network capacity for a workload portfolio with stable legacy systems and highly variable digital channels. Which approach BEST aligns IT resource governance with business demand uncertainty?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Adopt a hybrid model that keeps stable legacy workloads on controlled infrastructure and uses elastic cloud services for variable digital channels, governed by a demand forecasting and capacity review process.. Matching infrastructure commitment to workload demand profiles, with stable systems on controlled platforms and variable channels on elastic services, optimizes resource use under uncertainty. Adding demand forecasting and recurring capacity review turns the decision into a governed, revisable process rather than a one-time bet, which is what the board needs before a lease expiry.

Answer

Commit to a full private cloud refresh sized for current peak demand across all workloads.

Answer

Migrate all workloads to public cloud immediately to eliminate the data center lease decision.

Answer

Extend the lease on a month-to-month basis and defer the capacity strategy until demand patterns become clearer.

Question 2

A multinational manufacturer maintains data centers in three regions. The board has mandated a 20% reduction in IT infrastructure spend without reducing service levels. The CIO proposes consolidating to a single hyperscale cloud provider. The governance committee is concerned about concentration risk and regulatory data residency. Which approach BEST balances the board mandate with governance concerns?

Accepted Answer

Adopt a multi-cloud architecture with workload placement policies that enforce data residency and provide provider redundancy. The governance committee needs an approach that satisfies the cost mandate while maintaining control over regulatory and concentration risks. A multi-cloud architecture with enforceable workload placement policies achieves both by making residency and redundancy requirements explicit design constraints. The other options either accept unmitigated risk, fail to meet the cost target, or improperly delegate accountability that cannot be outsourced.

Answer

Retain all three existing data centers and pursue cost reduction through server virtualization and storage tiering initiatives

Answer

Outsource all infrastructure operations to a managed service provider that assumes responsibility for cost and compliance outcomes

Answer

Consolidate to the single hyperscale provider but negotiate a contractual service level agreement with financial penalties for outages

Question 3

A multinational corporation is standardizing its IT resource governance across 30 countries. The CIO must ensure that resource allocation decisions are aligned with enterprise strategy while respecting local regulatory requirements. Which TWO of the following are the MOST effective governance mechanisms to achieve this balance? (Choose two.)

Accepted Answer

Establish a global IT investment committee with delegated authority to approve resource allocations above a defined threshold.. A global investment committee with delegated authority ensures strategic alignment for major allocations, while a global policy with a formal exception process for regulatory needs provides consistency with necessary local flexibility. Together they balance enterprise strategy and local compliance. The other mechanisms are either too rigid, too decentralized, or overcentralized to achieve that balance effectively.

Answer

Delegate all resource allocation decisions to local country managers and rely on annual audits to ensure alignment.

Answer

Require each country to submit an annual IT budget for central approval without any local discretion.

Answer

Create a centralized project management office that controls all IT projects globally, including local regulatory projects.

Question 4

An enterprise's audit finds that privileged administrator accounts for its core ERP platform are shared among several engineers, with no individual attribution. Which IT resource governance action should be prioritized FIRST?

Accepted Answer

Implement privileged access management with unique named accounts, session logging and just-in-time elevation.. Shared privileged accounts destroy attribution and violate least privilege over a critical IT resource. Implementing unique named accounts with session logging and just-in-time elevation directly remediates the audit finding, restores accountability and reduces standing access. The other actions either leave the root cause unaddressed or introduce disproportionate change before the basic control gap is closed.

Answer

Require engineers to sign an updated acceptable use policy covering shared accounts.

Answer

Increase the frequency of vulnerability scans on the ERP servers.

Answer

Move the ERP platform to a managed service provider that administers its own privileged accounts.

Question 5

A hospital's IT governance committee is reviewing its IT resource management practices. The committee wants to ensure that IT resources are effectively governed to support clinical and administrative needs. Which TWO of the following are key components of an effective IT resource governance framework? (Choose two.)

Accepted Answer

Clearly defined roles and responsibilities for IT resource management, including ownership and stewardship.. The two key components are clearly defined roles and responsibilities and continuous monitoring and reporting. These provide the accountability and data-driven oversight necessary for effective IT resource governance. They ensure that resources are managed with clear ownership and that performance and utilization are regularly assessed to support informed decision-making and alignment with organizational objectives.

Answer

An annual external audit of all IT resource expenditures to ensure cost minimization.

Answer

A decentralized approach where each department independently manages its own IT resources without central coordination.

Answer

A policy that mandates the use of a single vendor for all IT hardware and software to simplify management.

Question 6

A retail enterprise's IT steering committee is reviewing how application portfolio resources should be governed. The portfolio has grown to over 400 applications, many with overlapping functionality and unclear ownership. The committee wants to establish a repeatable governance process for rationalizing the portfolio. Which TWO of the following actions are MOST effective for this purpose? (Choose two.)

Accepted Answer

Mandate that all new application acquisitions follow a standardized business case and architecture review process. Effective application portfolio governance rests on two pillars: visibility and prevention. An inventory with capability mapping and ownership provides the visibility needed to make rationalization decisions, while a standardized intake process prevents new duplication from accumulating. Together they form a repeatable, evidence-based cycle. Delegation, arbitrary targets, and wholesale replacement each fail to establish sustainable governance over application resources.

Answer

Set a fixed target of retiring 25% of applications within twelve months to create urgency for the rationalization effort

Answer

Migrate the entire portfolio to a single vendor's SaaS platform to eliminate integration and ownership complexity

Answer

Delegate all application retirement decisions to individual business unit leaders to accelerate the rationalization process

Question 7

An IT governance committee is reviewing the enterprise's resource management practices. The committee wants to ensure that IT human resources are deployed in a way that supports both current operations and strategic initiatives. Which action should the committee recommend to achieve this?

Accepted Answer

Implement a skills inventory and succession planning process that maps current competencies to strategic workforce needs.. A skills inventory and succession planning process is the most effective action because it systematically identifies competency gaps and ensures that human resources are developed and deployed to meet strategic objectives while maintaining operational continuity. The other actions either address capacity without capability or apply untargeted measures that do not guarantee alignment with strategic workforce needs.

Answer

Outsource all non-strategic IT functions to reduce internal headcount and free up staff for strategic projects.

Answer

Require all IT staff to work on both operational support and strategic projects on a rotating basis.

Answer

Increase the IT training budget by 10 percent across the board to improve overall staff capabilities.

Question 8

A global enterprise is consolidating its application portfolio and must govern the retirement of redundant systems. The CIO asks the governance committee to identify actions that directly optimize IT resource consumption during decommissioning. (Choose two.)

Accepted Answer

Map application dependencies and data flows before shutdown to sequence retirements safely.. Safe sequencing and active reclamation are the two actions that directly optimize resources during decommissioning. Dependency mapping prevents disruptive shutdowns and rollbacks, while reclaiming infrastructure, licenses and contracts converts retirement into realized savings. Retaining full copies, waiting for unanimous user confirmation or allowing self-funded duplication all prolong consumption and defeat the consolidation's resource governance purpose.

Answer

Retain full production copies of all retired systems indefinitely for potential future reference.

Answer

Delay decommissioning until every user has individually confirmed they no longer need the system.

Answer

Allow each business unit to keep its redundant system if it funds the cost from its own budget.

Question 9

An energy company's IT department has accumulated significant technical debt in its custom billing systems. The CIO wants to establish a governance mechanism to ensure technical debt is managed as an IT resource concern. Which action should the governance committee take FIRST?

Accepted Answer

Establish a technical debt register that quantifies debt items by remediation cost, business risk, and impact on delivery velocity. Technical debt is an IT resource concern because it consumes future capacity and introduces risk. The governance committee's first step is to establish visibility through a register that quantifies each debt item's remediation cost, risk, and velocity impact. Only with that evidence can the committee make defensible decisions about refactoring allocations, development freezes, or outsourcing. The other options prescribe remedies before the problem has been measured.

Answer

Freeze all new feature development until the existing technical debt has been fully remediated

Answer

Require development teams to allocate a fixed percentage of each sprint to refactoring legacy code

Answer

Outsource maintenance of the billing systems to a third party contractually obligated to reduce defect rates

Question 10

An enterprise's board is concerned that IT projects routinely exceed budgets while business units report that critical initiatives wait months for skilled staff. A review finds that resource demand is approved project by project with no enterprise view of supply. Which governance improvement BEST addresses this?

Accepted Answer

Introduce an enterprise IT resource capacity plan that forecasts supply and demand and is used to prioritize and sequence investments.. The root issue is the absence of an enterprise view of resource supply against demand. A governed capacity plan forecasts skills and budget, then informs prioritization and sequencing so commitments match reality. Contingency padding, decentralized approval or threshold-based outsourcing all treat symptoms and leave the structural mismatch between approved demand and available supply unmanaged.

Answer

Delegate project approval fully to business units so decisions happen closer to demand.

Answer

Require each project to include a larger budget contingency to absorb overruns.

Answer

Outsource all projects that have waited more than three months for internal staff.

Question 11

A healthcare provider's IT organization relies heavily on a small group of specialists who maintain a legacy clinical records interface. The specialists are approaching retirement, and documentation is sparse. The governance committee is asked to address this human resource risk. Which action BEST aligns with IT resource governance objectives?

Accepted Answer

Commission a knowledge transfer program that documents the interface, cross-trains additional staff, and sets a succession timeline. Human capital is a core IT resource, and concentrated knowledge in a few individuals is a governance risk to service continuity. A knowledge transfer program that documents the interface, cross-trains staff, and establishes a succession timeline reduces that concentration and builds durable capability. Retention bonuses, replacement projects, and contract staffing each leave the fundamental single-point-of-failure exposure in place.

Answer

Engage a staffing agency to provide contract specialists who can step in if any of the current specialists leave

Answer

Approve a retention bonus program to keep the specialists employed for as long as possible

Answer

Initiate a project to replace the legacy interface with a modern platform, eliminating the need for the specialists' skills

Question 12

A global logistics company maintains a critical customs-clearance application built on an unsupported database version. The governance committee must decide how to allocate limited IT budget and skilled staff across the application portfolio. Which action BEST aligns with IT resource governance principles?

Accepted Answer

Prioritize remediation based on the business criticality and risk exposure of each application, then assign budget and staff accordingly.. IT resource governance directs constrained budget and specialist capacity using assessed business criticality and risk. Prioritizing remediation by the exposure each application creates ensures the customs-clearance system receives attention proportional to its importance, while lower-risk items compete fairly for remaining resources. Blanket technical remedies or blanket outsourcing substitute a single decision for the balanced, portfolio-wide allocation that governance requires.

Answer

Fund a full rewrite of the application in the newest technology stack to eliminate all technical debt immediately.

Answer

Outsource the entire application portfolio to a managed service provider and release all internal specialists.

Answer

Defer all action until the next fiscal year when additional budget and headcount may become available.

Question 13

A regional bank's IT department has grown its contractor headcount by 40 percent over two years to support regulatory projects. The board asks the CIO to demonstrate that human IT resources are governed effectively. Which action BEST provides this assurance?

Accepted Answer

Maintain a skills and competency inventory aligned to the project portfolio, with defined sourcing, knowledge-transfer, and retention criteria.. Assurance over human IT resources comes from linking workforce capability to the portfolio of work and defining how external resources are sourced, how their knowledge is retained internally, and how critical skills are sustained. A competency inventory with explicit sourcing and retention criteria gives the board evidence of deliberate governance, whereas headcount totals, contract length, or blanket conversions describe activity or preference rather than alignment with strategic objectives.

Answer

Convert all contractor positions to permanent employees to reduce external dependency.

Answer

Require contractors to sign longer engagement contracts so the resource base remains stable.

Answer

Report the total number of contractors and the aggregate contractor spend to the board each quarter.

Question 14

A manufacturing enterprise is consolidating three data centers into one colocation facility. The IT governance committee must ensure that infrastructure resources remain aligned with business continuity and cost objectives throughout the migration. Which TWO governance actions are MOST appropriate? (Choose two.)

Accepted Answer

Define availability and recovery objectives for each business service and validate that the consolidated infrastructure can meet them.. Consolidation concentrates infrastructure risk while promising cost efficiency, so governance must tie the target environment to per-service availability and recovery objectives and must set capacity and performance thresholds monitored against service levels. These two actions preserve continuity and confirm the efficiency case with evidence. Choosing providers on price alone, dismantling monitoring prematurely, or delegating without oversight each removes a control the committee needs during a high-risk transition.

Answer

Approve the migration budget based solely on the lowest bid from the colocation provider.

Answer

Retire all legacy monitoring tools before the migration begins to reduce tooling costs.

Answer

Delegate all migration decisions to the facilities team and report outcomes only after completion.

Question 15

A multinational bank's IT leadership is concerned that its current IT workforce plan is not aligned with the strategic goal of expanding digital services in emerging markets. The CHRO and CIO jointly decide to implement a strategic workforce planning process. Which of the following is the MOST important initial step in this process?

Accepted Answer

Analyze the business strategy to determine the future demand for IT capabilities and services.. The correct answer is to analyze the business strategy to determine future IT capability demand. Strategic workforce planning is a governance process that ensures IT human resources are aligned with business goals. By starting with strategy, the organization can identify the skills, roles, and competencies needed to support expansion into emerging markets, and then decide whether to build, buy, or borrow those capabilities.

Answer

Conduct a skills inventory of the current IT staff to identify gaps against future needs.

Answer

Benchmark the current IT workforce against industry competitors to identify areas for improvement.

Answer

Develop a recruitment plan to hire IT professionals with digital skills in emerging markets.