Updated Sep-2021 Test Engine to Practice Test for CGEIT Exam Questions and Answers!
Certified in the Governance of Enterprise IT Exam Certification Sample Questions and Practice Exam
NEW QUESTION 144
You are the project manager of a newly formed project to create a new manufacturing facility. You are working with a business analyst to identify, document, and prioritize stakeholders' needs for the facility. You'll also need to quantify any subjective terms and needs to define the project scope. What is this process called?
- A. Project scope statement creation
- B. Requirements gathering
- C. Requirements analysis
- D. Stakeholder analysis
Answer: D
NEW QUESTION 145
Which of the following should IT governance mandate before any transition of data from a legacy system to a new technology platform?
- A. Data conversion has documented approvals from business process data owners.
- B. A crisis management plan has been approved by the IT steering committee
- C. Data conversion is performed in a test environment to confirm correctness
- D. Control totals of key transaction values are matched with data converted for migration.
Answer: D
NEW QUESTION 146
The water sanitation project manager has determined that risks associated with handling certain chemicals are too high. He has therefore decided to allow someone else to complete this portion of the project by outsourcing the handling and installation of the chemicals and filter equipment to an experienced contractor. This is an example of which of the following?
- A. Mitigation
- B. Avoidance
- C. Transference
- D. Acceptance
Answer: C
NEW QUESTION 147
Which of the following concepts is a semi-standard structured report supported by proven design methods and automation tools that can be used by managers to keep track of the execution of activities by staff within their control and monitor the consequences arising from these actions?
- A. Total Quality Management
- B. Total Security Management
- C. Six Sigma
- D. Balanced Scorecard (BSC)
Answer: D
Explanation:
Section: Volume A
NEW QUESTION 148
When developing an IT strategic plan that supports an enterprise's business goals which of the following should be done FIRST?
- A. Understand the current vision
- B. Perform a business impact analysis (BIA)
- C. Analyze benchmarking data
- D. Ensure that IT drives business goals
Answer: A
NEW QUESTION 149
Ned is the project manager of the HNN project for your company. Ned has asked you to help him complete some probability distributions for his project. What portion of the project will you most likely use for probability distributions?
- A. Bias towards risk in new resources
- B. Risk probability and impact matrixes
- C. Risk identification
- D. Uncertainty in values such as duration of schedule activities
Answer: D
NEW QUESTION 150
In which of the following components of the COSO ERM are the policies and procedures established and implemented to help ensure that the risk responses are effectively carried out?
- A. Risk response
- B. Event identification
- C. Control activity
- D. Risk assessment
Answer: C
NEW QUESTION 151
When determining the optimal IT service levels to support business, which of the following is MOST important?
- A. Available IT budget.
- B. Cost/benefit to the business.
- C. Business user requests
- D. IT capacity utilization and availability.
Answer: B
NEW QUESTION 152
The MAIN responsibility of the board of directors regarding the management of enterprise risk is to:
- A. sustain investment in staff training regarding IT risk.
- B. ensure a risk process exists which addresses the risk appetite.
- C. maintain awareness of IT risk to the business.
- D. promote a benefits-driven culture throughout the enterprise.
Answer: B
NEW QUESTION 153
A large financial institution is considering outsourcing customer call center operations which will allow the chosen vendor to access systems from offshore locations. Which of the following represents the GREATEST risk?
- A. Inadequate business continuity planning
- B. Loss of data confidentiality
- C. Lack of network availability
- D. Inconsistent customer service and reporting
Answer: B
NEW QUESTION 154
Your project is an agricultural-based project that deals with plant irrigation systems.
You have discovered a byproduct in your project that your organization could use to make a profit you're your organization seizes this opportunity it would be an example of what risk response?
- A. Exploiting
- B. Positive
- C. Opportunistic
- D. Enhancing
Answer: A
Explanation:
Section: Volume A
NEW QUESTION 155
A CEO of a large enterprise is concerned that risk events are not regularly addressed at the C-suite level unless related to emergency incidents. Which of the following is the BEST way for the CEO to ensure risk events are given sufficient time and attention?
- A. Issue performance objectives that target the elimination of enterprise risks.
- B. Instruct managers to take ownership for their department's identified risks.
- C. Require the development of a risk procedure on how to capture risks.
- D. Include the discussion of key enterprise risk as an agenda item at board meetings.
Answer: D
NEW QUESTION 156
A business has outsourced IT operations to several third-party providers, but service level agreements (SLAs) are not clearly defined in all cases. Which of the following is the GREATEST risk to the business?
- A. Costs are not measurable.
- B. The scope of work is not clearly defined.
- C. Third parties could provide overlapping services.
- D. Quality of services is not enforceable.
Answer: D
NEW QUESTION 157
An IT audit reveals inconsistent maintenance of data privacy in enterprise systems primarily due to a lack of data sensitivity categorizations. Once the categorizations are defined, what is the BEST long-term strategic response by IT governance to address this problem?
- A. Require business impact analyses (BIAs) for enterprise systems.
- B. Reassess the data governance policy.
- C. Incorporate enterprise privacy categorizations into contracts.
- D. Standardize data classification processes throughout the enterprise.
Answer: D
NEW QUESTION 158
Jane is the project manager of the GBB project for her company. In the current project a vendor has offered the project a ten percent discount based if they will order 100 units for the project. It is possible that the GBB Project may need the 100 units, but the cost of the units is not a top priority for the project. Jane documents the offer and tells the vendor that they will keep the offer in mind and continue with the project as planned.
What risk response has been given in this project?
- A. Sharing
- B. Enhance
- C. Exploiting
- D. Acceptance
Answer: D
NEW QUESTION 159
Which of the following is the MOST effective way to manage risks within the enterprise?
- A. Provide financial resources for risk management systems.
- B. Assign individuals responsibilities and accountabilities for management of risks.
- C. Document procedures and reporting processes.
- D. Make staff aware of the risks in their area and risk management techniques.
Answer: D
NEW QUESTION 160
Which of the following is NOT a valid maturity level of the Software Capability Maturity Model (CMM)?
- A. Defined level
- B. Fundamental level
- C. Managed level
- D. Repeatable level
Answer: B
NEW QUESTION 161
Which of the following would be MOST helpful to an enterprise that wants to standardize how sensitive corporate data is handled?
- A. Information classification framework
- B. Enterprise risk policy
- C. Enterprise risk management (ERM) framework
- D. Information security policy
Answer: C
NEW QUESTION 162
An airline wants to launch a new program involving the use of artificial intelligence (Al) and machine learning The mam objective of the program is to use customer behavior to determine new routes and markets Which of the following should be done NEXT?
- A. Consult with the enterprise privacy function
- B. Perform a business impact analysis (BIA)
- C. Present the proposal to the IT strategy committee
- D. Define the critical success factors (CSFs)
Answer: A
NEW QUESTION 163
Gary is the project manager of the MMQ project for his company. He is working with his project team to plan the risk responses for his project. Sarah, a project team member, does not understand the process that Gary is using to plan the risk responses. Which approach is the preferred method to address project risks and the risk responses?
- A. Risks in the project should be addressed by their impact for creating risk responses.
- B. Risks in the project should be addressed by their probability for creating risk responses.
- C. Risks in the project should be addressed by the organization's risk tolerance for creating risk responses.
- D. Risks in the project should be addressed by their priority for creating risk responses.
Answer: D
NEW QUESTION 164
Which of the following activity loops describes improvement of the existing processes?
- A. Loop 1
- B. Loop 3
- C. Loop 4
- D. Loop 2
Answer: D
NEW QUESTION 165
Which of the following types of IT organizational structures states that all IT decision making and the IT budget are in one place, much easier to manage, and require much less effort to organize?
- A. Project-based
- B. Centralized
- C. Federated
- D. Decentralized
Answer: B
Explanation:
Section: Volume A
NEW QUESTION 166
Which of the following areas concentrates on optimizing expenses, and providing the value of IT?
- A. Risk management
- B. Value delivery
- C. Strategic alignment
- D. Resource management
Answer: B
Explanation:
Section: Volume C
NEW QUESTION 167
An enterprise has finalized a major acquisition and a new business strategy in line with stakeholder needs has been introduced To help ensure continuous alignment of IT with the new business strategy the CiO should FIRST
- A. review the existing IT strategy against the new business strategy
- B. establish a new IT strategy committee for the new enterprise
- C. revise the existing IT strategy to align with the new business strategy
- D. assess the IT cultural aspects of the acquired entity
Answer: A
NEW QUESTION 168
......
Certification dumps Isaca Certificaton CGEIT guides - 100% valid: https://www.exam4labs.com/CGEIT-practice-torrent.html
100% Pass Your CGEIT Certified in the Governance of Enterprise IT Exam at First Attempt with Exam4Labs: https://drive.google.com/open?id=1U3EHIrU2E9LHHAh6eFloUNZVkFabGN-5