CGEIT Exam Questions

An enterprise has decided to execute a risk self-assessment to identify improvement opportunities for current IT services. Which of the following is MOST important to address in th...

Which of the following is MOST important for IT governance to have in place to ensure the enterprise can maintain operations during extensive system downtime?

Which of the following is MOST important for an enterprise to review when classifying information assets?

Which of the following is MOST important to document for a business ethics program?

Which of the following is the BEST outcome measure to determine the effectiveness of IT risk management processes?

An IT department outsourced application support and negotiated service level agreements (SLAs) directly with the vendor Although the vendor met the SLAs business owner expectations...

An IT value delivery framework PRIMARILY helps an enterprise

Which of the following IT governance practices would BEST support IT and enterprise strategic alignment?

Which of the following is the BEST way for an organization to minimize the difference between expected and delivered services when acquiring resources?

Which of the following is the GREATEST benefit of using the life cycle approach to govern information assets'?

Which of the following provides the BEST information to assess the effective alignment of IT investments?

An enterprise is planning a transformation initiative by leveraging emerging technology that will have a significant impact on existing products and services Which of the following...

Which of the following would be MOST helpful to an enterprise that wants to standardize how sensitive corporate data is handled?

When selecting a vendor to provide services associated with a critical application which of the following is the MOST important consideration with respect to business continuity pl...

IT management has reported difficulty retaining qualified IT personnel to support the organization's new strategy Given that outsourcing is not a viable approach, which of the foll...

Which of the following is the BEST approach to assist an enterprise in planning for iT-enabled investments?

Which of the following is the BEST approach to assist an enterprise in planning for iT-enabled investments'?

Before establishing IT key risk indicators (KRls) which of the following should be defined FIRST?

Which of the following should be the ClO's GREATEST consideration when making changes to the IT strategy'?

An independent consultant has been hired to conduct an ad hoc audit of an enterprise's information security office with results reported to the IT governance committee and the boar...

Which of the following should be the MOST important consideration when designing an implementation plan for IT governance?

Enterprise leadership is concerned with the potential for discrimination against certain demographic groups resulting from the use of machine learning models. What should be done F...

An enterprise has identified a number of plausible risk scenarios that could result in economic loss associated with major IT investments. Which of the following is the BEST method...

Which of the following roles is accountable for the confidentiality integrity and availability of information within an enterprise?

Which of the following should be the PRIMARY basis for establishing categories within an information classification scheme?

An enterprise will be adopting wearable technology to improve business performance. Which of the following would be the BEST way for the CIO to validate IPs preparedness for this i...

Which of the following is a responsibility of an IT strategy committee?

When establishing a risk management process which of the following should be the FIRST step?

Which of the following would be the BEST long-term solution to address the concern regarding loss of experienced staff?

An enterprise has performed a business impact analysis (BIA) considering a number of risk scenarios. Which of the following should the enterprise do NEXT?

An enterprise has finalized a major acquisition, and a new business strategy in line with stakeholder needs has been introduced. To help ensure continuous alignment of IT with the...

An enterprise has decided to implement an IT risk management program After establishing stakeholder desired outcomes, the MAIN goal of the IT strategy committee should be to:

An enterprise has learned of a new regulation that may impact delivery of one of its core technology services Which of the following should the done FIRST?

The BEST way for a CIO to monitor the alignment between the business and IT strategy is to regularly review

The FIRST step in aligning resource management to the enterprise's IT strategic plan would be to

Which of the following should a new CIO do FIRST to ensure information assets are effectively governed?

An IT steering committee wants to select a disaster recovery site based on available risk data. Which of the following would BEST enable the mapping of cost to risk?

An enterprise incurred penalties for noncompliance with privacy regulations. Which of the following is MOST important to ensure appropriate ownership of access controls to address...

Which of the following would BEST support an enterprise's initiative to incorporate desired organizational behaviors into the IT governance framework?

To develop appropriate measures to improve organizational performance, the measures MUST be:

When considering an IT change that would enable a potential new line of business, the FIRST strategic step for IT governance would be to ensure agreement among the stakeholders reg...

Which of the following should be the PRIMARY consideration for an enterprise when prioritizing IT projects?

An enterprise is planning to migrate its IT infrastructure to a cloud-based solution but does not have experience with this technology. Which of the following should be done FIRST...

Which of the following roles should be responsible for data normalization when it is found that a new system includes duplicates of data items?

As part of the implementation of IT governance, the board of an enterprise should establish an IT strategy committee to:

An enterprise has identified potential environmental disasters that could occur in the area where its data center is located. Which of the following should be done NEXT?

Which of the following should IT governance mandate before any transition of data from a legacy system to a new technology platform?

A CIO of an enterprise is concerned that IT and the business have different priorities. Which of the following would BEST demonstrate the current state of strategic alignment?

Which of the following would a CIO use to present the overall view of IT performance to the board of directors?

Which of the following is the BEST justification for a procurement manager to agree to purchase IT equipment from a specific vendor during a sales promotion?