CGEIT Exam Questions

An enterprise has established a new department to oversee the life cycle of activities that support data management objectives. Which of the following should be done NEXT?

Which of the following is the MOST important attribute of an information steward?

From a governance perspective, which of the following roles is MOST important for an enterprise to keep in-house?

An enterprise learns that a new privacy regulation was recently published to protect customers in the event of a breach involving personally identifiable information (Pll). The IT...

An enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating in-house email capabilities. Which of the following IT strategic a...

Which of the following components of a policy BEST enables the governance of enterprise IT?

Which of the following is PRIMARILY achieved through performance measurement?

A large retail chain realizes that while there has not been any loss of da a, IT security has not been a priority and should become a key goal for the enterprise. What should be th...

Risk management strategies are PRIMARILY adopted to:

An enterprise made a significant change to its business operating model that resulted in a new strategic direction. Which of the following should be reviewed FIRST to ensure IT con...

A chief technology officer (CTO) wants to ensure IT governance practices adequately address risk management specific to mobile applications. To create the appropriate risk policies...

A large financial institution is considering outsourcing customer call center operations which will allow the chosen vendor to access systems from offshore locations. Which of the...

An IT director is negotiating a contract with a vendor for application management services. There is concern by other departments that the outsourced services may not be delivered...

Which of the following is the BEST IT architecture concept to ensure consistency, interoperability, and agility for infrastructure capabilities?

A company is considering selling products online, and the CIO has been asked to advise the board of directors of potential problems with this strategy. Which of the following is th...

In a large enterprise, which of The following is the MOST effective way to understand the business activities associated with the enterprise s information architecture?

A board of directors is concerned that a major IT implementation has the potential to significantly disrupt enterprise operations. Which of the following would be MOST helpful in i...

Which of the following is the MOST comprehensive method to report on overall IT performance to the board of directors?

A CIO has been asked to modify an organization's IT performance measurement system to reflect recent changes in technology, including the movement of some data processing to a clou...

Which of the following MOST effectively demonstrates operational readiness to address information security risk issues?

An enterprise's CIO requires all IT processes within the enterprise to be clearly defined. Which of the following would be the MOST immediate outcome?

Best practice states that IT governance MUST:

The MOST important aspect of an IT governance framework to ensure that IT supports repeatable business processes is:

A new CIO has been charged with updating the IT governance structure. Which of the following is the MOST important consideration to effectively influence organizational and process...

Which of the following is the PRIMARY ongoing responsibility of the IT governance function related to risk?

An enterprise considering implementing IT governance should FIRST develop the scope of the IT governance program and:

Which of the following should be the MAIN reason for an enterprise to implement an IT risk management framework?

An enterprise's information security function is making changes to its data retention and backup policies. Which of the following presents the GREATEST risk?

Which of the following would be MOST important to update if a decision is made to ban end user- owned devices in the workplace?

Which of the following is the MOST effective way to manage risks within the enterprise?

Which of the following is an ADVANTAGE of using strategy mapping?

Due to continually missed service level agreements (SLAs), an enterprise plans to terminate its contract with a vendor providing IT help desk services. The enterprise s IT departme...

A manufacturing company has recently decided to outsource portions of its IT operations. Which of the following would BEST justify this decision?

A CIO believes that a recent mission-critical IT decision by the board of directors is not in the best financial interest of all stakeholders. Which of the following is the MOST et...

A retail enterprise has cost reduction as its top priority. From a governance perspective, which of the following should be the MOST important consideration when evaluating differe...

Which of the following is the MOST important consideration for data classification to be successfully implemented?

Which of the following BEST reflects the ethical values adopted by an IT organization?

Which of the following would provide the BEST input for prioritizing strategic IT improvement initiatives?

What is the PRIMARY objective for performing an IT due diligence review prior to the acquisition of a competitor?

The IT program manager does not see the value of conducting risk assessments for a new major IT project. The manager is reluctant to cooperate with internal auditors and the newly...

An enterprise is planning a change in business direction. As a result, IT risk will significantly increase. Which of the following should be the GO'S FIRST course of action?

Which of the following is MOST important to effectively initiate IT-enabled change?

Which of the following would BEST help to improve an enterprise's ability to manage large IT investment projects?

A business case indicates an enterprise would reduce costs by implementing a bring your own device (BYOD) program allowing employees to use personal devices for email. Which of the...

The CIO of a financial services company is tasked with ensuring IT processes are in compliance with recently instituted regulatory changes. The FIRST course of action should be to:

The CIO of an enterprise learns the payroll server of a competitor has been the victim of ransomware. To help plan for the possibility of ransomed corporate data, what should be th...

Which of the following aspects of the transition from X-rays to digital images would be BEST addressed by implementing information security policy and procedures?

Prior to decommissioning an IT system, it is MOST important to:

A CEO determines the enterprise is lagging behind its competitors in consumer mobile offerings, and mandates an aggressive rollout of several new mobile services within the next 12...

Which of the following is the MOST effective way for a CIO to govern business unit deployment of shadow IT applications in a cloud environment?