CGEIT Exam Questions

Which of the following should be the MOST important consideration for a hospital planning to use cloud services and mobile applications?

An enterprise is developing an ethics program, and the ethical standards have been defined. Which of the following should the enterprise do NEXT?

Reviewing which of the following should be the FIRST step when evaluating the possibility of outsourcing an IT system?

To enable the development of required IT skill sets for the enterprise, it is MOST important to define skill requirements based on:

An enterprise is conducting a SWOT analysis as part of IT strategy development. Which of the following would be MOST helpful to identify opportunities and threats?

The CIO of a global technology company is considering introducing a bring your own device (BYOD) program. What should the CIO do FIRST?

What is the BEST way for an IT governance board to establish standards of behavior for the adoption of artificial intelligence (Al)?

An IT steering committee is preparing to review proposals for projects that implement emerging technologies. In anticipation of the review, the committee should FIRST:

Which of the following provides the MOST comprehensive insight into the effectiveness of IT?

Establishing a uniform definition for likelihood and impact BEST enables an enterprise to:

An enterprise-wide strategic plan has been approved by the board of directors. Which of the following would BEST support the planning of IT investments required for the enterprise?

An enterprise is concerned with the potential for data leakage as a result of increased use of social media in the workplace, and wishes to establish a social media strategy. Which...

The CIO of an international enterprise is considering the use of an offshore cloud service provider to store customer data. Which of the following should be he MOST important consi...

Which of the following BEST indicates the success of an enterprise's IT governance framework after implementation?

Which of the following aspects of IT governance BEST addresses the potential intellectual property implications of a cloud service provider having a database in another country?

After shifting from lease to purchase of IT infrastructure and software licenses, an enterprise has to pay for unexpected lease extensions causing significant cost overruns. The BE...

Which of the following is MOST important to the successful implementation of enterprise architecture (EA)?

The BEST time to identity metrics to measure the performance of an IT-enabled investment is during:

To meet the growing demands of a newly established business unit, IT senior management has been tasked with changing the current IT organization model to service-oriented. With sig...

When preparing a new IT strategic plan for board approval, he MOST important consideration is to ensure the plan identifies:

Which of the following should be done FIRST when defining responsibilities for ownership of information and systems?

An enterprise is about to complete a major acquisition, and a decision has been made that both companies will be using the parent company's IT infrastructure. Which of the followin...

Following a strategic planning session, new IT objectives were announced. Which of the following is the MOST effective way for the CIO to ensure these objectives are cascaded to IT...

When deciding to develop a system with sensitive data, which of the following is MOST important to include in a business case?

Which of the following provides the BEST evidence of an IT risk-aware culture across an enterprise?

An IT strategy committee wants to evaluate how well the IT department supports the business strategy. Which of the following is the BEST method for making this determination?

The MOST effective way to ensure that IT supports the agile needs of an enterprise is to:

Which of the following provides the BEST evidence of effective IT governance?

A business is considering a policy to anonymize personal data in enterprise systems. Before making a decision, which of the following is MOST important for the IT steering committe...

An enterprise is contracting with an outsourcing partner for a long-term engagement. The BEST time for the enterprise to plan for the event of contract termination is when:

The BEST way to decide how to prioritize issues identified in an IT risk and control self- assessment (CSA) is to understand the risk and:

Which of the following is MOST critical to support IT governance cultural changes within an organization?

Which of the following is the PRIMARY purpose of information governance?

Communicating which of the following to staff BEST demonstrates senior management's commitment to IT governance?

Which of the following is the PRIMARY purpose of an effective set of key risk indicators (KRIs)?

A multinational enterprise is planning to migrate to cloud-based systems. Which of the following should be of MOST concern to the risk management committee?

An enterprise is planning to outsource data processing for personally identifiable information (Pll). When is the MOST appropriate time to define the requirements for security and...

Which of the following is the MOST important aspect of business ethics?

Which of the following is the BEST way to ensure all enterprise employees understand the corporate code of business conduct?

A major data leakage incident at an enterprise has resulted in a mandate to strengthen and enforce current data governance practices. Which of the following should be done FIRST to...

A newly hired CIO has been told the enterprise has an established IT governance process, but finds it is not being followed. To address this problem, the CIO should FIRST

Which of the following should be the FIRST step in updating an IT strategic plan?

Which of the following would be MOST useful for prioritizing IT improvement initiatives to achieve desired business outcomes?

Which of the following is the BEST method to confirm whether a pilot project was successful?

An IT manager is trying to determine optimal IT service levels. Which of the following should be the PRIMARY consideration?

The board of directors of a large organization has directed IT senior management to improve IT governance within the organization. IT senior management's MOST important course of a...

When assessing the impact of a new regulatory requirement, which of the following should be the FIRST course of action?

An IT strategy committee has reviewed an audit report indicating sales employees are using personal smartphones to conduct corporate business. Although the committee appreciates th...

Which of the following is the PRIMARY role of the governance function in enabling an enterprise to achieve its business objectives?

Which of the following should be the PRIMARY goal of implementing an IT strategic planning process?