CGEIT Exam Questions

Which of the following would BEST enable an enterprise to ensure selected cloud vendors meet stringent regulatory requirements?

Which of the following will BEST help to ensure enterprise IT risk is effectively managed?

An enterprise has well-designed procurement and vendor risk management policies that are intended to prevent biased decision-making. However, a pattern of ethical violations indica...

To define the risk management strategy, which of the following MUST be set by the board of directors?

Which of the following is MOST important for the successful establishment of an ethics program?

An enterprise's IT department has failed to deliver required solutions on time due to insufficient resource allocation, resulting in a longer time to market. Which of the following...

A publicly traded enterprise wants to demonstrate that its board of directors is providing adequate strategic oversight of IT. Which of the following BEST supports this objective?

An enterprise has established a goal of leveraging AI as a source of strategic advantage. Which of the following should be done FIRST when developing the related IT strategy?

Which of the following should be the FIRST step to ensure IT resources have the appropriate skills and experience level to support enterprise objectives?

New legislation requires an enterprise to report cybersecurity incidents to a government agency within a defined timeline. Which of the following should be the FIRST course of acti...

Upcoming IT-related regulations carry costly penalties for an enterprise. The issuing regulatory agency has a history of weak enforcement. The IT steering committee should FIRST di...

Which of the following is the MOST important success factor when adopting an enterprise IT governance framework?

An IT governance committee is defining a risk management policy for a portfolio of IT-enabled investments. Which of the following should be the PRIMARY consideration when developin...

Which of the following BEST helps to ensure that IT standards will be consistently applied across the enterprise?

An enterprise has learned of a new regulation that may impact delivery of one of its core technology services. Which of the following should be done FIRST?

Which of the following is the BEST way for an IT steering committee to monitor the adoption of a new enterprise IT strategy?

A regulator has expressed concerns about the timeliness of information reported from an enterprise. Which of the following should be done FIRST to address this issue?

Which of the following is the FIRST consideration for a CISO when implementing Zero Trust architecture?

An enterprise plans to implement a business intelligence tool with data sources from various enterprise applications. Which of the following is the GREATEST challenge to implementa...

Which of the following is the GREATEST advantage of earned value management when used for evaluating benefits from the implementation of blockchain projects for IT contracts manage...

Due to budget cuts, IT has been forced to limit service offerings in the portfolio. There has been significant resistance from business leaders to this decision. Which of the follo...

What should be the FIRST action of a new CIO when considering an IT governance framework for an enterprise?

A board of directors is concerned with the total cost of IT. Which of the following is MOST important for the CIO to include in an explanation to the board?

Which of the following is MOST important to ensure that IT project selections meet the enterprise's business requirements?

Despite an adequate training budget, IT staff are not keeping skills current with emerging technologies critical to the business. Which of the following is the BEST way for the ent...

An enterprise's IT director is concerned that the chair of the IT steering committee is stealing confidential company information. Which of the following is the IT director's BEST...

Which of the following should be the PRIMARY consideration when implementing IT governance in a small, newly established organization?

The board of an enterprise has decided to implement an emerging technology, and employees are extremely concerned about the unknown future of the company. What should be the CIO's...

An enterprise is considering outsourcing non-core IT processes. Which of the following should be the FIRST step?

When establishing a comprehensive approach for analyzing IT risk in an international, multi- division enterprise, it is MOST important to ensure:

Which of the following should be the MOST essential consideration when outsourcing IT services?

A CIO engages a consulting firm to conduct a benchmark analysis of the organization's IT governance framework against industry best practices. Several recommendations to improve th...

Which of the following should be the CIO's GREATEST consideration when making changes to the IT strategy?

Which of the following should be done FIRST when preparing to migrate patient records to a cloud service provider?

Which of the following is MOST important to effectively incorporate innovation and emerging technologies into an enterprise's IT strategy?

An enterprise's IT department has been operating independently without regard to business concerns, leading to misalignment between business and IT. The BEST way to establish align...

Which of the following is the PRIMARY objective of a data protection impact assessment?

An enterprise wants to implement metrics to monitor the performance of its IT portfolio. Whose input is MOST important to consider when establishing these metrics?

Which of the following provides an enterprise with the BEST understanding of the value proposition for employing a new cloud service?

Which of the following is MOST important to have in place to ensure a business continuity plan (BCP) can be executed?

Which of the following should be considered FIRST when migrating data to a cloud environment?

An executive management team has determined the need to implement an IT governance framework, beginning with the maturity assessment process. The PRIMARY purpose for maturity asses...

Which of the following is the BEST indicator of effective IT governance?

An enterprise will be adopting wearable technology to improve business performance. Which of the following is the BEST way for the CIO to validate IT's preparedness for this initia...

Which of the following is MOST helpful in determining whether an enterprise's quality assurance (QA) program is meeting business requirements?