Real CGEIT Exam PDF Test Engine Practice Test Questions [Q303-Q320]

5/5 - (2 votes)

Real CGEIT Exam PDF Test Engine Practice Test Questions

ISACA CGEIT Real 2024 Braindumps Mock Exam Dumps

Q303. An assessment reveals that enterprise risk management (ERM) practices are being applied inconsistently by IT staff. Which of the following would be the MOST effective corrective action?

Require ERM orientation sessions

Request the development of an IT risk register template.

Request a complete skills reassessment for all IT staff.

Update the ERM framework.

Q304. A strategic IT-enabled investment is failing due to unforeseen technology problems. What should be the board of directors’ FIRST course of action?

Terminate the investment.

Assess the business risk and options.

Approve an investment budget increase.

Revise the investment selection process.

Q305. IT has launched new portfolio management policies and processes to improve the alignment of IT projects with enterprise goals. The latest audit report indicates that no improvement has been made due to confusion in the decision-making process. Which of the following is the BEST course of action for the CIO?

Deliver prioritization and facilitation training.

Implement a performance management framework.

Create an IT portfolio management risk framework.

Develop and communicate an accountability matrix.

Q306. Which of the following should be the MOST important consideration for a hospital planning to use cloud services and mobile applications?

Privacy requirements

Data classification

Acceptable use policy

Internet connectivity

Q307. All projects that are presented in your organization must go through a board to review the return on investment, risk, and worthiness of a project. All projects are considered but not all projects are initiated. What is the name of the process that this board is completing in your organization?

Project selection committee

Change governance

Project portfolio management

Project portfolio management board

Q308. Which of the following roles is used to ensure that the confidentiality, integrity, and availability of the services are maintained to the levels approved on the Service Level Agreement (SLA)?

The Service Level Manager

The Configuration Manager

The IT Security Manager

The Change Manager

Q309. Which of the following processes contained in the Portfolio Management domain of Val IT identifies resource requirements?

PM5

PM3

PM2

PM4

Q310. An internal audit of a large financial institution found that financial data is being managed in a way that will negatively impact the enterprise’s ability to support regulatory reporting.
Which of the following should be the FIRST strategic action in addressing this situation?

Establish a data governance framework.

Assign data responsibilities through a RACI chart.

Review key risk indicators (KRIS) related to data management.

Update data management policies.

Q311. Which of the following IT processes contained in the Deliver and Support domain of COBIT manages the operations?

DS10

DS13

DS9

DS8

Q312. The CIO of a large enterprise has taken the necessary steps to align IT objectives with business objectives.
What is the BEST way for the CIO to ensure these objectives are delivered effectively by IT staff?

Map the IT objectives to an industry-accepted framework.

Enhance Ihe budget for training based on the IT objectives.

Include the IT objectives in staff performance plans.

Include CIO sign-off of the objectives as part of the IT strategic plan.

Q313. Which of the following is MOST important to document for a business ethics program?

Guiding principles and best practices

Violation response matrix

Whistle-blower protection protocols.

Employee awareness and training content

Q314. When conducting a risk assessment in support of a new regulatory
requirement, the IT risk committee should FIRST consider the:

cost burden to achieve compliance.

readiness of IT systems to address the risk.

risk profile of the enterprise.

disruption to normal business operations.

Q315. Which of the following is the BEST indication that an implementation plan for a new governance initiative will be successful?

Staff have been trained on the new initiative.

External consultants created the plan.

The plan assigns responsibility for completing milestones.

The plan is designed to engage employees across the enterprise.

Q316. The responsibility for the development of a business continuity plan (BCP) is BEST assigned to the:

business risk manager.

business owner.

chief executive officer (CEO).

IT systems owner.

Q317. Which of the following is a non repetitive set of tasks that lead to the achievement of a new objective?

Plan

Strategy

Techniques

Tactics

Q318. Which of the following is the BEST justification for a procurement manager to agree to purchase IT equipment from a specific vendor during a sales promotion?

The IT benefit surpasses the business benefit from the purchase.

The equipment adds value to the enterprise.

The business profit surpasses the IT cost for the equipment.

The product is offered at the lowest price.

A procurement manager should agree to purchase IT equipment from a specific vendor during a sales promotion only if the equipment adds value to the enterprise. This means that the equipment supports the business goals and objectives, meets the current and future needs of the stakeholders, and delivers benefits that outweigh the costs and risks. The procurement manager should also consider the quality, reliability, compatibility, and security of the equipment, as well as the vendor’s reputation, service level, and warranty.
The other options are not the best justification for a procurement manager to agree to purchase IT equipment from a specific vendor during a sales promotion. The IT benefit surpasses the business benefit from the purchase is not a valid justification, as it implies that the IT department’s interests are more important than the enterprise’s interests. The procurement manager should align the IT strategy with the business strategy and ensure that the IT equipment supports the enterprise value creation. The business profit surpasses the IT cost for the equipment is not a sufficient justification, as it does not account for other factors such as quality, performance, functionality, and risk of the equipment. The procurement manager should evaluate the total cost of ownership (TCO) and return on investment (ROI) of the IT equipment, not just the initial purchase price.
The product is offered at the lowest price is not a convincing justification, as it does not guarantee that the equipment is suitable for the enterprise’s needs and expectations. The procurement manager should not compromise on quality, functionality, or security for a lower price.
For more information on IT procurement and value creation, you can refer to these web sources:
IT Procurement Manager Job Description w/ Role & Responsibilities
IT Governance: Definitions, Frameworks and Planning
What is Governance in Procurement? Its Model
What is IT governance? A formal way to align IT & business strategy

Q319. The CIO of a financial services company is tasked with ensuring IT processes are in compliance with recently instituted regulatory changes. The FIRST course of action should be to:

align IT project portfolio with regulatory requirements.

create an IT balanced scorecard.

identify the penalties for noncompliance.

perform a current state assessment.

Q320. Which of the following should be the PRIMARY input when developing IT strategy?

Vision statement

Process and capability maturity

Governance objectives

Balanced scorecard