DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

2024 Updated CGEIT Exam Questions & Practice Tests, Certified in the Governance of Enterprise IT | SPOTO

Welcome to SPOTO's updated CGEIT exam preparation resources! The Certified in the Governance of Enterprise IT (CGEIT) certification validates your expertise in managing and governing enterprise IT, making you a sought-after professional in today's tech-driven business world. Our high-quality practice tests are meticulously crafted by experts to ensure your success, guaranteeing a 100% pass rate.Prepare effectively with our exam questions, sample questions, and comprehensive exam materials. Our exam answers are accurate and reflect the latest exam trends. Utilize our practice tests and exam simulator to simulate real exam conditions and boost your confidence. With SPOTO's focus on exam practice, exam preparation, and online exam questions, you'll be well-prepared to ace the CGEIT exam.Trust SPOTO for top-notch CGEIT exam preparation!
Take other online exams
Question #1
During qualitative risk analysis you want to define the risk urgency assessment. All of the following are indicators of risk priority except for which one?
A. Risk rating
B. Warning signs
C. Cost of the project
D. Symptoms
View answer
Correct Answer: A

View The Updated CGEIT Exam Questions

SPOTO Provides 100% Real CGEIT Exam Questions for You to Pass Your CGEIT Exam!

Get CGEIT Practice Test
Question #2
You are the project manager of a computer upgrade project. You and the vendor are in dispute over the deliverables the vendor was to provide and configure. What document can best describe how you and the vendor are to proceed if there is a claim against the vendor?
A. Procurement management plan
B. Project cost management plan
C. Enterprise environmental factors
D. Contract
View answer
Correct Answer: D
Question #3
Which of the following categories describes the value added by the process divided by the value of the labor and capital consumed?
A. Quality
B. Timeliness
C. Quantity
D. Productivity
View answer
Correct Answer: D
Question #4
Management wants you to create a visual diagram of what resources will be utilized in the project deliverables. What type of a chart is management asking you to create?
A. RACI chart
B. Roles and responsibility matrix
C. Work breakdown structure
D. Resource breakdown structure
View answer
Correct Answer: D
Question #5
What project management plan is most likely to direct the quantitative risk analysis process for a project in a matrix environment?
A. Risk management plan
B. Staffing management plan
C. Risk analysis plan
D. Human resource management plan
View answer
Correct Answer: ACD
Question #6
You work as a project manager for BlueWell Inc. Your project is using a new material to construct a large warehouse in your city. This new material is cheaper than traditional building materials, but it takes some time to learn how to use the material properly. You have communicated to the project stakeholders that you will be able to save costs by using the new material, but you will need a few extra weeks to complete training to use the materials. This risk response of learning how to use the new material
A. Cost-benefits analysis
B. Benchmarking
C. Cost of conformance to quality
D. Team development
View answer
Correct Answer: B
Question #7
Which of the following types of risks includes liability torts, property damage, natural catastrophe and financial risk?
A. Asset risk
B. Hazard risk
C. Operational risk
D. Strategic risk
View answer
Correct Answer: C
Question #8
Which of the following stages of the Forrester's IT Governance Maturity Model states that there are no proper IT governance processes, and it is not documented by management as a requirement?
A. Stage 3-Consistent
B. Stage 2-Fragmented
C. Stage 1-Ad hoc
D. Stage 4-Best practices
View answer
Correct Answer: C
Question #9
Which positive risk response best describes a teaming agreement?
A. Enhance
B. Exploit
C. Share
D. Venture
View answer
Correct Answer: C
Question #10
Which of the following risk functions ensures the product/service alignment with the customer requirements?
A. Accounting
B. Marketing
C. Strategic planning
D. Credit
View answer
Correct Answer: AD
Question #11
Which of the following areas focuses on aligning with the business and collaborative solutions?
A. Risk management
B. Strategic alignment
C. Resource management
D. Value delivery
View answer
Correct Answer: B
Question #12
Which of the following external factors complicate the notion of business-IT for achieving strategic alignment? Each correct answer represents a complete solution. Choose all that apply.
A. Resource limitations
B. Economic and regulatory changes
C. World region changes and events
D. Market changes
View answer
Correct Answer: B
Question #13
Which of the following individuals supports and contributes to customer's governance approach?
A. User representatives
B. Supplier/Business partners
C. Compliance officers
D. Project sponsors
View answer
Correct Answer: D
Question #14
Which of the following is a way of delivering value to customers by facilitating outcome that customers wish to get without the control of specific costs and risks?
A. Processes
B. Service Desk
C. Functions
D. Service
View answer
Correct Answer: D
Question #15
Fill in the blank with an appropriate phrase. ____ is the study of how the variation (uncertainty) in the output of a mathematical model can be apportioned, qualitatively or quantitatively, to different sources of variation in the input of a model.
A. Sensitivity analysis
View answer
Correct Answer: A
Question #16
Della works as a project manager for SoftTech Inc. She is working with the project stakeholders to begin the quantitative risk analysis process. Which of the following inputs will be needed for the quantitative risk analysis process in her project? Each correct answer represents a complete solution. Choose all that apply.
A. Project scope statement
B. Risk management plan
C. Cost management plan
D. Risk register
View answer
Correct Answer: BCD
Question #17
Which of the following are the main objectives of the Performance measurement domain? Each correct answer represents a complete solution. Choose all that apply.
A. It satisfies the customer's need
B. It defines value creation roles within IT
C. It meets out the goals
D. It statistically controls the process sequences
View answer
Correct Answer: ACD
Question #18
Stephen is the project manager of the GBB project. He has worked with two subject matter experts and his project team to complete the risk assessment technique. There are approximately 47 risks that have a low probability and a low impact on the project. Which of the following answers best describes what Stephen should do with these risk events?
A. The low probability and low impact risks should be added to the risk register
B. Because they are low probability and low impact, the risks can be dismissed
C. Because they are low probability and low impact, Stephen should accept the risks
D. The low probability and low impact risks should be added to a watch list for future monitoring
View answer
Correct Answer: D
Question #19
TOGAF is based on four pillars, called architecture domains. Which of the following architecture domains provides a blueprint for the individual application systems to be deployed, the interactions between the application systems, and their relationships to the core business processes of the organization with the frameworks for services to be exposed as business functions for integration?
A. Business architecture
B. Applications architecture
C. Technical architecture
D. Data architecture
View answer
Correct Answer: B
Question #20
Which of the following individuals/team allocates business resources for effective IT governance?
A. Business Executive
B. CEO
C. CIO
D. IT Strategy Committee
View answer
Correct Answer: B
Question #21
The water sanitation project manager has determined that risks associated with handling certain chemicals are too high. He has therefore decided to allow someone else to complete this portion of the project by outsourcing the handling and installation of the chemicals and filter equipment to an experienced contractor. This is an example of which of the following?
A. Transference
B. Acceptance
C. Mitigation
D. Avoidance
View answer
Correct Answer: A
Question #22
You are the business analyst for the YGT Organization. You have just completed a capabilities gap assessment and have determined that your organization does not have the necessary resources and technology to seize a business opportunity. What is the most likely course of action for the organization?
A. Hire contractors to complete the project work
B. Move onto the next opportunity
C. Launch a new project
D. Hire additional resources
View answer
Correct Answer: C
Question #23
You work as the project manager for Bluewell Inc. You are working on NGQQ Project for your company. You have completed the risk analysis processes for the risk events. You and the project team have created risk responses for most of the identified project risks. Which of the following risk response planning techniques will you use to shift the impact of a threat to a third party, together with the responses?
A. Risk transference
B. Risk avoidance
C. Risk acceptance
D. Risk mitigation
View answer
Correct Answer: B
Question #24
You are the project manager for the ABC organization. Your current project has 75 internal stakeholders and 245 external stakeholders. Many of the risks within your project will only affect the internal stakeholders, but several of the identified risk events will affect the external stakeholders. Management would like to know the total number of communication channels in the project. How many communication channels exist in this project?
A. 245
B. 102,080
C. 51,040
D. 320
View answer
Correct Answer: C
Question #25
You are the project manager of the GHG project for your company. You have identified the project risks, completed qualitative and quantitative analysis, and created risk responses. You also need to document how and when risk audits will be performed in the project. Where will you define the frequency of risk audits?
A. Schedule management plan
B. Risk management plan
C. Quality management plan
D. Risk response plan
View answer
Correct Answer: B
Question #26
John is the project manager of the NHQ Project for his company. His project has 75 stakeholders, some of which are external to the organization. John needs to make certain that he communicates about risk in the most appropriate method for the external stakeholders. Which project management plan will be the best guide for John to communicate to the external stakeholders?
A. Communications Management Plan
B. Risk Response Plan
C. Project Management Plan
D. Risk Management Plan
View answer
Correct Answer: B
Question #27
Harold is the project manager of a large project in his organization. He has been actively communicating and working with the project stakeholders. One of the outputs of the manage stakeholder expectations process can actually create new risk events for Harold's project. Which output of the manage stakeholder expectations process can create risks?
A. Project management plan updates
B. Project document updates
C. Change requests
D. Organizational process assets updates
View answer
Correct Answer: C
Question #28
Which of the following process groups is the most efficient at providing resources to the development of the procurement process?
A. Acquisition process
B. Contract management
C. Process management
D. Resource management
View answer
Correct Answer: A
Question #29
Which of the following frameworks is for enterprise architecture, and provides a comprehensive approach to the design, planning, implementation, and governance of an enterprise information architecture?
A. TOGAF
B. Val IT
C. BISL
D. COBIT
View answer
Correct Answer: C
Question #30
Which of the following frameworks describes an enterprise view of all project management activities and how these activities contribute to the success of the organization?
A. Casualty Actuarial Society framework
B. COSO ERM
C. Enterprise project management (EPM)
D. COBIT
View answer
Correct Answer: ABCE
Question #31
Which of the following objectives can be the best coordinated with the Human resource management?
A. Increasing the automation of the business processes
B. Satisfying the business needs
C. Rewarding employee fairly
D. Focusing on the business improvements
View answer
Correct Answer: B
Question #32
Val IT is a suite of documents that provide a framework for the governance of IT investments, produced by the IT Governance Institute (ITGI). It is a formal statement of principles and processes for IT portfolio management. Drag and drop the correct domain ('Portfolio management') next to the IT processes defined by Val IT.
A. Mastered
B. Not Mastered
View answer
Correct Answer: D
Question #33
You are hosting a collection of stakeholders from across the organization to identify the ideas and attitudes about your company's help desk. You want the stakeholders to honestly share their opinions about the help desk service so you can identify problems, solutions, and take actions to improve the service. What type of requirements elicitation activity is this?
A. Root cause analysis
B. Stakeholder analysis
C. Focus groups
D. Workshop
View answer
Correct Answer: C
Question #34
Lisa is the project manager of the FKN project for her organization. She is working with Sam, the CIO, to discuss a discount the vendor has offered the project based on the amount of materials that is ordered. Lisa and Sam review the offer and agree that while their project may qualify for the discounted materials the savings is nominal and they would not necessarily pursue the savings. Lisa documents this positive risk response in the risk register. What risk response is this?
A. Share
B. Acceptance
C. Enhance
D. Transference
View answer
Correct Answer: B
Question #35
Which of the following essential elements of IT Portfolio Investment Management describes the ability to model the IT Portfolio with metrics most appropriate to the business such as ROI, Break- Even, Cost Avoidance, and Revenue Return?
A. Integrated Capability
B. Portfolio What-If Planning
C. Integrated Dashboards and Scorecards
D. Highly Configurable
View answer
Correct Answer: D
Question #36
You are the HR Professional for your organization and you're working with the management to define the role of contractors versus employees in your organization. According to the Internal Revenue Service, there are three categories of control that help determine whether a person is a contractor or an employee. Which one of the following is not one of the three levels of control as defined by the IRS for employee versus contractor?
A. Type of relationship
B. Locale of work performed
C. Behavioral control
D. Financial control
View answer
Correct Answer: B
Question #37
Which of the following domains of CGEIT aims to guarantee that the IT enables and supports the achievement of business objectives through the integration of IT strategic plans with business strategic plans and the alignment of IT services with enterprise operations?
A. Risk Management
B. IT Governance Framework
C. Strategic Alignment
D. Value Delivery
View answer
Correct Answer: C
Question #38
Availability Management allows organizations to sustain the IT service availability to support the business at a justifiable cost. Which of the following elements of Availability Management is used to perform at an agreed level over a period of time? Each correct answer represents a part of the solution. Choose all that apply.
A. Reliability
B. Security
C. Recoverability
D. Serviceability
E. Resilience
F. Maintainability
G. Error control
View answer
Correct Answer: ABCD
Question #39
Which of the following levels of Gartner's cost optimization framework describes the right kind of partnership with IT vendors, which can benefit each party in times of economic upturns?
A. Cost Savings within IT
B. Joint Business and IT Cost Savings
C. IT Procurement
D. Enabling Innovation and Business Restructuring
View answer
Correct Answer: C
Question #40
You are the project manager of the NGQQ Project for your company. To help you communicate project status to your stakeholders, you are going to create a stakeholder register. All of the following information should be included in the stakeholder register except for which one?
A. Stakeholder management strategy
B. Assessment information of the stakeholders' major requirements, expectations, and potential influence
C. Stakeholder classification of their role in the project
D. Identification information for each stakeholder
View answer
Correct Answer: A
Question #41
Which types of project tends to have more well-understood risks?
A. First-of-its kind technology projects
B. State-of-art technology projects
C. Recurrent projects
D. Operational work projects
View answer
Correct Answer: C
Question #42
Service Level Management provides for continual identification, monitoring and review of the levels of IT services specified in the service level agreements (SLAs). What are the responsibilities of Service Level Management? Each correct answer represents a part of the solution. Choose all that apply.
A. Producing and maintaining a Service Catalog
B. Liaising with Availability Management
C. Ensuring that the agreed IT services are delivered
D. Ensuring the primary functions of the Service Desk
E. Ensuring that appropriate IT Service Continuity plans have been made
View answer
Correct Answer: ABCE
Question #43
Which of the following processes are covered by Service Strategy? Each correct answer represents a complete solution. Choose all that apply.
A. Service Portfolio Management
B. IT Financial Management
C. Demand Management
D. IT Architecture Management
E. Supplier Management
View answer
Correct Answer: D
Question #44
You are working with your project stakeholders to identify risks within the JKP Project. You want to use an approach to engage the stakeholders to increase the breadth of the identified risks by including internally generated risk. Which risk identification approach is most suited for this goal?
A. Brainstorming
B. Assumptions analysis
C. SWOT analysis
D. Delphi Technique
View answer
Correct Answer: C
Question #45
Which of the following concepts is the business practice of developing and implementing comprehensive risk management and security practices for a firm's entire value chain?
A. TOGAF
B. TQM
C. BSC
D. TSM
View answer
Correct Answer: D
Question #46
In which of the following methods of risk mitigation does the senior management approve the implementation of the controls that are recommended by the risk management team, and that will lower the risk to an acceptable level?
A. Risk Avoidance
B. Risk Alleviation
C. Risk Limitation
D. Risk Transference
View answer
Correct Answer: B
Question #47
Which of the following steps of development of business case describes the financial benefits analysis?
A. Step 1
B. Step 3
C. Step 2
D. Step 4
View answer
Correct Answer: B
Question #48
Which of the following stages of the Forrester's IT Governance Maturity Model describes that the IT governance processes is fully developed and optimized across the enterprise, and a well-built IT portfolio management process is put to ensure that all IT investment decisions are themselves optimized?
A. Stage 2-Fragmented
B. Stage 4-Best practices
C. Stage 3-Consistent
D. Stage 1-Ad hoc
View answer
Correct Answer: B
Question #49
Which of the following roles in Service Design is responsible for delivering a particular service within the agreed service levels and also acts as the counterpart of the Service Level Manager when negotiating OLAs?
A. The Service Design Manager
B. The Service Level Manager
C. The Service Owner
D. The Service Catalogue Manager
View answer
Correct Answer: C
Question #50
Which of the following is a process improvement approach that provides organizations with the essential elements for effective process improvement and guides process improvement across a project, a division, or an entire organization?
A. Capability Maturity Model Integration
B. Service Portfolio
C. COBIT
D. Six Sigma
View answer
Correct Answer: A
Question #51
Beth is an HR Professional for her organization and she's been alerted by management that the company will be outsourcing a large portion of operations. This outsourcing will likely cause several employees to lose employment with the organization. Which of the following is the best course of action that Beth can take in regard to communicating with the employees about the outsourcing change?
A. Be honest and truthful and do not hide the facts
B. Refer all
C. Document all
D. Don't share the details of the outsourcing decision
View answer
Correct Answer: A
Question #52
Which of the following processes contained in the Portfolio Management domain of Val IT establishes an investment threshold?
A. PM4
B. PM7
C. PM6
D. PM5
View answer
Correct Answer: ABD
Question #53
Which of the following concepts is used to reduce the errors produced during the manufacturing or service process, increase customer satisfaction, streamline supply chain management, aims for modernization of equipment and ensures workers have the highest level of training?
A. Balanced Scorecard (BSC)
B. Six Sigma
C. Total Quality Management
D. Total Security Management
View answer
Correct Answer: C
Question #54
Which of the following types of IT organizational structures states that all IT resources are centralized under a single reporting structure with centralized resource allocation (staffing), and the organizational structure is built around the resource pools?
A. Federated
B. Centralized
C. Project-based
D. Decentralized
View answer
Correct Answer: C
Question #55
You are the project manager of the NKJ Project for your company. The project's success or failure will have a significant impact on your organization's profitability for the coming year. Management has asked you to identify the risk events and communicate the event's probability and impact as early as possible in the project. Management wants to avoid risk events and needs to analyze the cost-benefits of each risk event in this project. What term is assigned to the low-level of stakeholder tolerance in this
A. Risk utility function
B. Mitigation-ready project management
C. Risk-reward mentality
D. Risk avoidance
View answer
Correct Answer: A
Question #56
What is information system governance all about?
A. Mastered
B. Not Mastered
View answer
Correct Answer: C
Question #57
Which of the following processes are involved under the COBIT framework? Each correct answer represents a complete solution. Choose all that apply.
A. Managing the IT workforce
B. Correcting all risk issues
C. Conducting IT risk assessments
D. Developing a strategic plan
View answer
Correct Answer: ACD
Question #58
You are the project manager of the NNN project for your company. You and the project team are working together to plan the risk responses for the project. You feel that the team has successfully completed the risk response planning and now you must initiate what risk process it is. Which of the following risk processes is repeated after the plan risk responses to determine if the overall project risk has been satisfactorily decreased?
A. Risk response implementation
B. Quantitative risk analysis
C. Risk identification
D. Qualitative risk analysis
View answer
Correct Answer: B
Question #59
Which of the following processes is responsible for controlling, recording and reporting on versions, attributes, and relationships relating to components of the Information Technology (IT) infrastructure?
A. Service Catalogue Management
B. Service Level Management
C. ICT Operations Management
D. Service Asset and Configuration Management
View answer
Correct Answer: D
Question #60
Lisa is the project manager of the SQL project for her company. She has completed the risk response planning with her project team and is now ready to update the risk register to reflect the risk response. Which of the following statements best describes the level of detail Lisa should include with the risk responses she has created?
A. The level of detail is set by historical information
B. The level of detail should correspond with the priority ranking
C. The level of detail is set of project risk governance
D. The level of detail must define exactly the risk response for each identified risk
View answer
Correct Answer: B
Question #61
Which of the following roles is used to ensure that the confidentiality, integrity, and availability of the services are maintained to the levels approved on the Service Level Agreement (SLA)?
A. The Service Level Manager
B. The Configuration Manager
C. The IT Security Manager
D. The Change Manager
View answer
Correct Answer: C
Question #62
Which of the following frameworks defines ERM as the discipline by which an organization in any industry assesses, controls, exploits, finances, and monitors risks from all sources for the purpose of increasing the organization's short- and long-term value to its stakeholders?
A. COSO ERM framework
B. COBIT
C. Val IT
D. Casualty Actuarial Society framework
View answer
Correct Answer: D
Question #63
Which of the following steps are performed in the Scoping phase of IT Assurance methodology? Each correct answer represents a complete solution. Choose all that apply.
A. Customize control objectives
B. Scope and plan assurance initiatives
C. Select the control objectives for critical processes
D. Assess process maturity
View answer
Correct Answer: ABC
Question #64
What does the T in SWOT analysis mean?
A. Time
B. Trial
C. Threats
D. Test
View answer
Correct Answer: A
Question #65
As seen from the perspective of how the enterprise defines and executes business strategies to achieve its goals and objectives, which of the following elements does the ERM comprise of? Each correct answer represents a complete solution. Choose all that apply.
A. Enhancing risk response decisions
B. Providing integrated responses to few risks
C. Reducing operational surprises and losses
D. Aligning risk appetite and strategy
View answer
Correct Answer: ACD
Question #66
Which of the following domains of COBIT addresses the development of a maintenance plan that a company should adopt in order to prolong the life of an IT system and its components?
A. Plan and Organize
B. Acquire and Implement
C. Deliver and Support
D. Monitor and Evaluate
View answer
Correct Answer: B
Question #67
You are the project manager of the NHQ Project for your company. You have completed qualitative and quantitative analysis of your identified project risks and you would now like to find an approach to increase project opportunities and to reduce threats within the project. What project management process would best help you?
A. Plan risk responses
B. Create a risk governance approach
C. Create the project risk register
D. Monitor and control project risks
View answer
Correct Answer: A

View The Updated ISACA Exam Questions

SPOTO Provides 100% Real ISACA Exam Questions for You to Pass Your ISACA Exam!

Get ISACA Practice Test

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.