CGEIT Exam Questions

When evaluating the process for acquiring third-party IT resources, management identified several suppliers with repeated downtime issues impacting the enterprise. Which of the fol...

Which of the following should be the PRIMARY input when developing IT strategy?

Due to the recent introduction of personal data protection regulations, an enterprise is required to maintain its employee data in production systems only for a limited time. Which...

A data governance strategy has been defined by the IT strategy committee which includes privacy objectives related to access controls, authorized use. and data collection. Which of...

Which of the following is the MOST appropriate mechanism for measuring overall IT organizational performance?

A large enterprise has decided to use an emerging technology that needs to be integrated with the current IT infrastructure. Which of the following is the BEST way to prevent adver...

Which of the following would be the BEST way for an IT steering committee to monitor the adoption of a new enterprise IT strategy?

Which of the following is the MOST important input for the development of a human resources strategy to address IT skill gaps?

An enterprise wishes to establish key risk indicators (KRIs) in an effort to better manage IT risk. Which of the following should be identified FIRST?

Which of the following would be the BEST way to facilitate the successful adoption of a new technology across the enterprise?

Which of the following should be the FIRST consideration for an enterprise faced with a pandemic situation resulting in a mandatory remote work environment?

The MAIN responsibility of the board of directors regarding the management of enterprise risk is to:

Which of the following BEST supports an enterprise's ability to comply with privacy laws and regulations?

Which of the following methods is MOST likely to be used to assess plausible risk scenarios that could result in reputational risk to the enterprise?

Which of the following would provide the MOST useful information to understand the associated risks when implementing a new digital transformation strategy?

Which of the following roles should approve major IT purchases to help prevent conflicts of interest?

From an IT governance perspective, establishing performance measurements is PRIMARILY the responsibility of:

Business management is seeking assurance from the CIO that controls are in place to help minimize the risk of critical IT systems being unavailable during month-end financial proce...

A root-cause analysis indicates a major service disruption due to a lack of competency of newly hired IT system administrators. Who should be accountable for resolving the situatio...

Which of the following would be the MOST effective way to ensure IT capabilities are appropriately aligned with business requirements for specific business processes?

Which of the following has PRIMARY responsibility to define the requirements for IT service levels for the enterprise?

Which of the following should be management's GREATEST consideration when trying to optimize the use of benefits from IT?

The use of an enterprise architecture (EA) framework BEST supports IT governance by providing:

To ensure IT risk is managed in a consistent manner, it is MOST important for IT governance to establish a:

Individual business units within an enterprise have been designing their own IT solutions without consulting the IT department. From a governance perspective, what is the GREATEST...

The responsibility for the development of a business continuity plan (BCP) is BEST assigned to the:

Which of the following BEST demonstrates the effectiveness of enterprise IT governance?

An IT steering committee is concerned that enterprise technologies have grown stagnant and are outdated. Which of the following is the BEST strategy to invest in modern technology?

The PRIMARY objective of building outcome measures is to:

Once the strategic vision has been established, which of the following would be the BEST activity for supporting the implementation of performance measures?

Which of the following BEST supports the implementation of an effective data classification policy?

An enterprise has lost an unencrypted backup tape of archived customer data. A data breach report is not mandatory in the relevant jurisdiction. From an ethical standpoint, what sh...

When developing an IT training plan, which of the following is the BEST way to ensure that resource skills requirements are identified?

In which of the following situations is it MOST appropriate to use a quantitative risk assessment?

An IT department has forwarded a request to the IT strategy committee for funding of a discretionary Investment. The committee's MOST important consideration should be to evaluate:

Which of the following should be identified FIRST when determining appropriate IT key risk indicators (KRIs)?

An IT risk committee is trying to mitigate the risk associated with a newly implemented bring your own device (BYOD) policy and supporting mobile device management (MDM) tools. Whi...

An enterprise's decision to move to a virtualized architecture will have the GREATEST impact on:

A large bank has completed several acquisitions in the last few years that have resulted in redundant IT applications. To align with the strategic initiative of providing integrate...

What should be done FIRST when feedback indicates recently implemented software products are not meeting business unit expectations?

Of the following, who is PRIMARILY responsible for applying frameworks for the governance of IT to balance the need for security controls with business requirements?

An IT steering committee is evaluating whether a third-party supplier is delivering the correct level of service Reviewing which of the following will provide the BEST information...

Which of the following should be the PRIMARY goal of implementing service level agreements (SLAs) with an outsourcing vendor?

An enterprise's chief information officer (CIO) has been receiving complaints from business executives regarding the amount their units are being charged for IT services. To mainta...

Which of the following should be the FIRST action taken by a newly formed IT governance committee to ensure reports are compliant with regulations and identify key IT risks?

What is the BEST criterion for prioritizing IT risk remediation when resource requirements are equal?

When developing a framework to implement IT governance, which of the following BEST contributes to the successful implementation?

In a successful enterprise that is profitable in its marketplace and consistently growing in size, the non-IT workforce has grown by 50% in the last two years. The demand for IT st...

Which of the following should be done FIRST when concerns have been identified regarding the financial viability of a potential software supplier?

Which of the following is the MOST significant challenge faced by an enterprise when establishing information stewardship?