Free ISACA CGEIT Practice Questions & Answers 2026 Part2 | Certified in the Governance of Enterprise IT

Portfolio management in a large enterprise BEST enables which of the following?

Which of the following should be the PRIMARY consideration when implementing IT governance in a small, newly established organization?

Which of the following roles has PRIMARY accountability for the security related to data assets?

Which of the following should be considered FIRST when migrating data to a cloud environment?

An internal auditor conducts an assessment of a two-year-old IT risk management program. Which of the following findings should be of MOST concern to theCIO?

Which of the following should be the PRIMARY consideration when implementing IT governance in a small, newly established organization?

Which of the following is a process that occurs due to mergers, outsourcing or changing business needs?

Senior management is concerned about the unauthorized use of third-party data that is stored within the enterprise's data repositories. Which of the following is the BEST way to address this concern?

Which of the following is the BEST way for a CIO to assess the consistency of IT processes against industry benchmarks to determine where to focus improvement initiatives?

Which of the following is MOST important to ensure when aligning IT and enterprise resource management processes?

Which of the following groups should approve the implementation of new technology?

A global financial enterprise has been experiencing a substantial number of information security incidents that have directly affected its business reputation. Which of the following should be the IT governance board's FIRST course of action?

The board of directors of an enterprise has approved a three-year IT strategic program to centralizethe core business processes of its global entities into one core system. Which of the following shouldbe the ClO's NEXT step?

An enterprise has a centralized IT function but also allows business units to have their own technology operations, resulting in duplicate technologies and conflicting priorities. Which of the following should be done FIRST to reduce the complexity of the IT landscape? Promote automation tools used by the business units. The first thing that should be done to reduce the complexity of the IT landscape is to conduct strategic planning with business units. Strategic planning is the process of defining the vision, mission, goals, and objectives of the enterprise and how they will be achieved. It also involves aligning the IT strategy with the business strategy and ensuring that they support each other. By conducting strategic planning with business units, the enterprise can identify and prioritize the IT needs and expectations of each business unit, as well as the commonalities and synergies among them. This can help to reduce the complexity of the IT landscape by eliminating duplicate technologies, resolving conflicting priorities, and creating a coherent and consistent IT architecture that meets the business requirements and delivers value. The other options are not as effective as conducting strategic planning with business units for reducing the complexity of the IT landscape. Promoting automation tools used by the business units may improve efficiency and productivity, but it does not address the underlying issues of duplication and conflict. Migrating all in-house systems to an external cloud environment may reduce costs and increase scalability, but it does not ensure alignment and integration of IT systems across business units. Standardizing technology architecture on common products may simplify IT operations and maintenance, but it does not consider the specific needs and preferences of each business unit.

An enterprise considers implementing a system that uses a technology that is not in line with its ITstrategy. The business case indicates significant benefit to the enterprise. Which of the following isthe BEST way to manage this situation within an IT governance framework?

The PRIMARY reason for an enterprise to adopt an IT governance framework is to:

Which of the following resource categories includes skill sets, certifications, productivity, and morale?

Paul has been asked to complete SWOT analysis for his solution scope. What does SWOT analysis mean?

The CEO of a large enterprise has announced the commencement of a major business expansion that will double the size of the organization. IT will need to support the expected demand expansion. The CIO should FIRST:

Which of the following is the BEST method for making a strategic decision to invest in cloud services?

The BEST way to ensure an IT steering committee meets enterprise objectives is to:

An enterprise is planning to upgrade its current enterprise resource planning (ERP) system to remain competitive within the industry. Which of the following would be MOST helpful to facilitate a successful implementation? Comprehensive and Detailed The CGEIT Review Manual 8th Edition, in its Strategic Management domain, emphasizes aligning IT initiatives like ERP upgrades with business objectives through thorough planning and requirements analysis. A successful ERP implementation requires understanding business needs to ensure the system supports competitive goals. Option D: Conducting a comprehensive requirements review is the most helpful. This involves gathering and analyzing business and functional requirements to ensure the new ERP system meets current and future needs (e.g., scalability, integration). For example, a requirements review identifies critical processes (e.g., supply chain management) and ensures the ERP aligns with industry demands. The manual likely references COBIT 2019's BAI02-Managed Requirements Definition, which prioritizes requirements analysis for successful IT projects. Option A: Documenting the current ERP processes and procedures is useful for baseline understanding but doesn't ensure the new system meets future needs. Option B: Reviewing the ERP post-implementation report is irrelevant, as it applies to past implementations, not the current upgrade. Option C: Establishing a change and transition planning process is important but secondary to defining requirements, as change management follows requirements. Double Verification: The answer aligns with COBIT's BAI02 and the CGEIT domain's focus on strategic project planning. Requirements review is a foundational step in ISACA's project management guidance. : ISACA CGEIT Review Manual 8th Edition, Domain 1: Governance of Enterprise IT (focus on strategic IT project planning). COBIT 2019, BAI02-Managed Requirements Definition. ISACA Glossary (for definitions of ERP and requirements review), available at https://www.isaca.org/resources/glossary.

An IT steering committee is presented with an audit finding that new software applications aredelivered on time but consistently have unacceptable levels of defects. Which of the following wouldbe the BEST direction from the committee?

In which of the following editions of COBIT was "Management Guidelines" added?

An enterprise has discovered that there is significant duplication of IT investments. Which of the following would be MOST helpful in addressing this issue?

Which of the following is the BEST way to ensure all enterprise employees understand the corporate code of business conduct?

Portfolio management in a large enterprise BEST enables which of the following?

Which of the following is the BEST method to monitor IT governance effectiveness?

Which of the following should be the PRIMARY consideration for an enterprise when prioritizing IT projects?

Which of the following attributes are the COBIT's generic maturity model attributes? Each correct answer represents a complete solution. Choose all that apply.

Which of the following examples are included in the general controls embedded in IT processes and services? Each correct answer represents a complete solution. Choose all that apply.

Senior management finds that too many projects are currently in-progress and all are experiencing expensive project overruns due to lack of resources. Many ofthe projects also appear to overlap in their objectives and expected outcomes.Which of the following would BEST streamline the process of evaluating and selecting funding priorities?