ISACA CGEIT Real Exam Questions and Answers FREE
Exam Dumps CGEIT Practice Free Latest ISACA Practice Tests
NEW QUESTION 82
Which of the following areas tracks the project delivery, and monitors the IT services?
- A. Value delivery
- B. Risk management
- C. Strategic alignment
- D. Performance measurement
Answer: D
NEW QUESTION 83
Which of the following is the MOST important aspect of business ethics?
- A. Protecting stakeholders' interests
- B. Providing equal opportunities to employees
- C. Complying with legal and regulatory requirements
- D. Ensuring fair and consistent vendor management practices
Answer: C
NEW QUESTION 84
An analysis of an organization s security breach is complete. The results indicate that the quality of the code used for updates to its primary customer-facing software has been declining and security flaws were introduced. The FIRST IT governance action to correct this problem should be to review:
- A. compliance with the user testing process.
- B. the incident response plan.
- C. the qualifications of developers to write secure code.
- D. the change management control framework.
Answer: D
NEW QUESTION 85
Which of the following is the MOST important reason for selecting IT key risk indicators (KRIs)?
- A. Demonstrating the effectiveness of IT risk policies
- B. Assessing the current IT controls model
- C. Increasing the probability of achieving IT goals
- D. Enabling comparison against similar IT KRIs
Answer: A
NEW QUESTION 86
Which of the following is the process of comparing the business processes and performance metrics including cost, cycle time, productivity, or quality?
- A. COBIT
- B. Service Improvement Plan
- C. Agreement
- D. Benchmarking
Answer: D
NEW QUESTION 87
Which of the following is a way of delivering value to customers by facilitating outcome that customers wish to get without the control of specific costs and risks?
- A. Service Desk
- B. Service
- C. Processes
- D. Functions
Answer: B
Explanation:
Section: Volume B
NEW QUESTION 88
You are the project manager for your organization. You are preparing for the quantitative risk analysis. Mark, a project team member, wants to know why you need to do quantitative risk analysis when you just completed qualitative risk analysis. Which one of the following statements best defines what quantitative risk analysis is?
- A. Quantitative risk analysis is the planning and quantification of risk responses based on probability and impact of each risk event.
- B. Quantitative risk analysis is the review of the risk events with the high probability and the highest impact on the project objectives.
- C. Quantitative risk analysis is the process of numerically analyzing the effect of identified risks on overall project objectives.
- D. Quantitative risk analysis is the process of prioritizing risks for further analysis or action by assessing and combining their probability of occurrence and impact.
Answer: C
Explanation:
Section: Volume A
NEW QUESTION 89
Which of the following is MOST important to consider when planning to implement a cloud-based application for sharing documents with internal and external parties?
- A. User experience
- B. Third-party access rights
- C. Information ownership
- D. Cloud implementation model
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 90
Which of the following would be the BEST way to facilitate the adoption of strong IT governance practices throughout a multi-divisional enterprise?
- A. Documenting and communicating key management practices across divisions
- B. Mandating data standardization across the distributed enterprise
- C. Ensuring each divisional policy is consistent with corporate policy
- D. Ensuring divisional governance fosters continuous improvement processes
Answer: A
NEW QUESTION 91
Once the strategic vision has been established, which of the following would be the BEST activity for supporting the implementation of performance measures?
- A. Identify key performance indicators (KPIs).
- B. Document policy requirements
- C. Document strengths, weaknesses, opportunities, and threats.
- D. Monitor service level performance.
Answer: B
NEW QUESTION 92
You are the project manager of the GHG project for your company. You have identified the project risks, completed qualitative and quantitative analysis, and created risk responses. You also need to document how and when risk audits will be performed in the project. Where will you define the frequency of risk audits?
- A. Risk response plan
- B. Schedule management plan
- C. Risk management plan
- D. Quality management plan
Answer: C
NEW QUESTION 93
Which of the following components of the COSO ERM identifies the required information, captures it, and communicates it in a form and time frame that enable people to carry out their responsibilities?
- A. Information and communication
- B. Objectives setting
- C. Internal environment
- D. Monitoring
Answer: A
NEW QUESTION 94
Business management is seeking assurance from the CIO that controls are in place to help minimize the risk of critical IT systems being unavailable during month-end financial processing. What is the BEST way to address this concern?
- A. Create a communication plan with risk owners.
- B. Restrict and monitor user access.
- C. Develop key risk indicators (KRIs) and action plans.
- D. Outsource infrastructure hosting.
Answer: C
NEW QUESTION 95
Which of the following individuals/team advises on infrastructure needs and architectural design?
- A. Management committee
- B. CEO
- C. CIO
- D. IT Strategy Committee
Answer: A
NEW QUESTION 96
An enterprise will be adopting wearable technology to improve business performance Whtch of the following would be the BEST way for the CIO to validate IPs preparedness for this initiative?
- A. Identify the penalties for noncompliance.
- B. Request reprioritization of the IT portfolio.
- C. Perform a baseline business value assessment
- D. Request an enterprise architecture (EA) review.
Answer: C
NEW QUESTION 97
An enterprise is concerned with the potential for data leakage as a result of increased use of social media in the workplace, and wishes to establish a social media strategy. Which of the following should be the MOST important consideration in developing this strategy?
- A. Data ownership
- B. Criticality of the information
- C. Ensuring that the enterprise architecture (EA) is updated
- D. The balance between business benefits and risk
Answer: B
NEW QUESTION 98
An IT steering committee is evaluating whether a third-party supplier is delivering the correct level of service Reviewing which of the following will provide the BEST information to the committee?
- A. Vendor status reports
- B. Key performance indicators (KPIs)
- C. Operational cost reduction reports
- D. Service portfolio management
Answer: D
NEW QUESTION 99
Which of the following types of IT organizational structures states that all IT resources are centralized under a single reporting structure with centralized resource allocation (staffing), and the organizational structure is built around the resource pools?
- A. Federated
- B. Centralized
- C. Decentralized
- D. Project-based
Answer: D
Explanation:
Section: Volume A
NEW QUESTION 100
Which of the following would be the BEST way for an IT steering committee to monitor the adoption of a new enterprise IT strategy?
- A. Establish key performance indicators (KPIs).
- B. Establish key risk indicators (KRIs).
- C. Schedule ongoing audit reviews.
- D. Implement service level agreements (SLAs)
Answer: A
NEW QUESTION 101
You are the project manager of a newly formed project to create a new manufacturing facility. You are working with a business analyst to identify, document, and prioritize stakeholders' needs for the facility.
You'll also need to quantify any subjective terms and needs to define the project scope. What is this process called?
- A. Stakeholder analysis
- B. Project scope statement creation
- C. Requirements analysis
- D. Requirements gathering
Answer: A
NEW QUESTION 102
In which of the following editions of COBIT was "Management Guidelines" added?
- A. The fourth edition
- B. The first edition
- C. The third edition
- D. The second edition
Answer: D
NEW QUESTION 103
Which of the following systems come under the category of linking systems to connect an enterprise with its customers and supplier? Each correct answer represents a complete solution. Choose all that apply.
- A. Electronic data interchange (EDI)/extensible markup language (XML) data transfer systems
- B. E-mail, smartphone, instant messaging
- C. Office productivity
- D. Website and portal
Answer: A,B,D
Explanation:
Section: Volume C
NEW QUESTION 104
Which of the following areas concentrates on optimizing expenses, and providing the value of IT?
- A. Risk management
- B. Strategic alignment
- C. Value delivery
- D. Resource management
Answer: C
NEW QUESTION 105
Which of the following best describes the identification, analysis, and ranking of risks?
- A. Plan Risk management
- B. Fixed-price contracts
- C. Fast tracking
- D. Design of experiments
Answer: A
NEW QUESTION 106
A CEO is concerned that IT costs have significantly exceeded budget without resulting benefits. The root causes are an overlap of IT projects and a lack of alignment with business demands. Which of the following would BEST enable remediation of this situation?
- A. Assign a set of key risk indicators (KRIs) to each new IT project.
- B. Require IT business cases be approved by the board of directors.
- C. Implement an IT portfolio management policy.
- D. Conduct a performance assessment of IT projects.
Answer: B
NEW QUESTION 107
......
Verified CGEIT Exam Dumps Q&As - Provide CGEIT with Correct Answers: https://actual4test.exam4labs.com/CGEIT-practice-torrent.html