Free ISACA CGEIT Practice Questions & Answers 2026 Part1 | Certified in the Governance of Enterprise IT

Which of the following MOST effectively demonstrates operational readiness to address information security risk issues?

Which of the following is the BEST approach when reviewing The security status of a new businessacquisition?

An enterprise has discovered that there is significant duplication of IT investments. Which of the following would be MOST helpful in addressing this issue?

Which of the following is the BEST method to monitor IT governance effectiveness?

The IT department has determined that problems with a business report are due to quality issues within a set of data to whom should IT refer the matter for resolution?

The results of an internal audit show that the business and IT acquire resources differently, which causes duplicate purchases. Which of the following is the BEST way to address this issue?

Which of the following BEST defines the IT investment activities an enterprise will undertake when aligning to business goals?

Which of the following should be the PRIMARY consideration for an enterprise when prioritizing IT projects?

The use of an enterprise architecture (EA) framework BEST supports IT governance by providing:

An enterprise-wide strategic plan has been approved by the board of directors. Which of the following would BEST support the planning of IT investments required for the enterprise? Enterprise architecture (EA) is the best option to support the planning of IT investments required for the enterprise, because EA is a practice and a discipline that describes and documents the current and future state of the enterprise's business processes, applications, data, infrastructure, and security, and how they align with the enterprise's vision, mission, goals, and objectives. EA can help the enterprise to plan IT investments by providing a holistic view of the enterprise's IT architecture, identifying the gaps, needs, and opportunities for improvement, innovation, or transformation, and prioritizing and selecting the IT projects, programs, and portfolios that deliver the most value to the stakeholders and customers.According to ISACA's CGEIT Domain 2: IT Resources1, ''EA is a key enabler for IT investment planning and decision making.EA helps to ensure that IT investments are aligned with business strategy and support business outcomes.'' Furthermore, according to ISACA's article on EA2, ''EA can help to optimize IT spending by reducing complexity, duplication, and waste, and by increasing efficiency, agility, and interoperability.'' Therefore, EA is the best way to support the planning of IT investments required for the enterprise.

An internal auditor conducts an assessment of a two-year-old IT risk management program. Which of the following findings should be of MOST concern to theCIO?

A global enterprise is experiencing an economic downturn and is rapidly losing market share. ITsenior management is reassessing the core activities of the business, including IT, and the associatedresource implications. Management has decided to focus on its local market and to closeinternational operations. A critical issue from a resource management perspective is to retain themost capable staff. This is BEST achieved by:

When determining the optimal IT service levels to support business, which of the following is MOST important?

An enterprise can BEST assess the benefits of a new IT project through its life cycle by:

An organization supports both programs and projects for various industries. What is a portfolio?

Of the following, who is PRIMARILY responsible for applying frameworks for the governance of IT to balance the need for security controls with business requirements?

Which of the following BEST enables an enterprise to minimize the risks of intellectual property theft and loss of sensitive information when acquiring Internet of Things (IoT) hardware and software components? The best way to minimize intellectual property theft and sensitive information loss in IoT acquisitions is to integrate supply chain cyber risk management processes. This holistic approachincludes assessing supplier security posture, monitoring for threats, and ensuring cybersecurity is embedded into procurement, delivery, and operations. NDAs, sanctions, and data classification are supportive, but only supply chain risk management addresses the full lifecycle risks and modern threats in globally sourced IoT ecosystems. CGEIT Review Manual: Domain 4 -- Risk Optimization COBIT 2019: DSS05 (Manage Security Services), APO10 (Manage Suppliers).

Forensic analysis revealed an attempted breach of a personnel database containing sensitive data. A subsequent investigation found that no one within the enterprise was aware of the breach attempt, even though logs recorded the unauthorized access actions. To prevent a similar situation in the future, what is MOST important for IT governance to require?

Which of the following is the BEST indicator for measuring performance when implementing DevSecOps in an enterprise? Percentage of automated testsis a key indicator in DevSecOps because it reflects the integration of security and quality into the development lifecycle. Automation is a cornerstone of DevSecOps, enabling continuous integration and deployment with embedded testing and security validation. While mean time to repair and deployment frequency are valuable,automation directly supports the goals of security, speed, and reliability in DevSecOps. CGEIT Review Manual: Domain 3 -- Benefits Realization COBIT 2019: BAI03 (Manage Solutions Identification and Build), DSS05 (Manage Security Services).

Senior management finds that too many projects are currently in-progress and all are experiencing expensive project overruns due to lack of resources. Many of the projects also appear to overlap in their objectives and expected outcomes.Which of the following would BEST streamline the process of evaluating and selecting funding priorities?

Which of the following is the MOST important driver of IT governance?

The CEO of a large enterprise has announced the commencement of a major business expansion that will double the size of the organization. IT will need tosupport the expected demand expansion. The CIO should FIRST:

When developing a business case for an enterprise resource planning (ERP) implementation, which of the following, if overlooked, causes the GREATEST impact to the enterprise?

An interna! health organization has been notified that a data breach has resulted in patient records being published online. Which of the following is MOST important consideration when determining the process for meeting the organization's legal and regulatory obligations?

A regulatory audit assessed an enterprise's main transactional application as noncompliant. In addition to fines and required corrections, an agreement was reached to implement a set of governance controls over IT. Accountability for these controls is BEST assigned to which of the following?

A regulatory audit assessed an enterprise's main transactional application as noncompliant. In addition to fines and required corrections, an agreement wasreached to implement a set of governance controls over IT. Accountability for these controls is BEST assigned to which of the following?

A regulatory audit assessed an enterprise's main transactional application as noncompliant. Inaddition to fines and required corrections, an agreement was reached to implement a set ofgovernance controls over IT. Accountability for these controls is BEST assigned to which of thefollowing?

An enterprise's board of directors has determined that IT is not sufficiently supporting its corporate objectives, and has established a committee to address this problem. Which of the following should be the committees FIRST action?

To ensure IT risk is managed in a consistent manner, it is MOST important for IT governance to establish a:

Which of the following BEST defines the IT investment activities an enterprise will undertake when aligning to business goals?