ISACA CGEIT Daily Practice Exam New 2022 Updated 409 Questions
Use Valid CGEIT Exam - Actual Exam Question & Answer
Exam Outline
Overall, there are 150 questions in the multiple-choice format in the final CGEIT test, which you will have to finalize in 4 hours. Also, you will need to score 450 points out of 800 to pass the CGEIT exam. You can take this validation in the nearest testing center or online. For you to select the right choice, the ISACA official website provides more information on this issue. In all, the CGEIT exam tests you on 4 domains as follows:
- IT Resources
Such a topic aims to align IT techs with the priorities of an enterprise and develop a business strategy that fits the company to understand how the IT approach can influence improvements to growth strategy. This scope also provides an understanding of various IT roles as well as duties, the methods of reporting and coordination, the processes of prioritization, possible strategic coordination hurdles, and constantly evaluating technologies.
- Risk Optimization
The final objective explains risk management to ensure that IT risk control systems help to define, assess, handle, minimize, track, and interact with business risks related to the IT industry and that those control systems are compatible with the enterprise risk management system.
- Benefits Realization
This part includes tracking, monitoring, and reporting regarding the performance of various IT resources to ensure that they provide enhanced advantages. Such a sector also involves information on KPIs, estimation methods, how to track and calculate production & efficiency, and the understanding of quality improvement theoretical frameworks.
- Enterprise IT Governance
This section involves setting up a system for enterprise IT governance that enables the organization to achieve its priorities and objectives when taking into account risk and efficiency. What’s more, it also details all of the fundamental criteria, values, regulations, procedures, infrastructure, governance culture, and skills required to create, supervise and manage an IT governance structure.
Exam Prerequisites
The prerequisite of the CGEIT is that the candidate has appropriate technical work experience in support of corporate enterprise information technology with a minimum of five years of work experience.
NEW QUESTION 186
An IT governance committee is defining a risk management policy for a portfolio of !T-enabled investments Which of the following should be the PRIMARY consideration when developing the policy?
- A. Value obtained with minimum risk
- B. Risk appetite of the enterprise
- C. Risk management framework
- D. Possible investment failures
Answer: B
NEW QUESTION 187
Which of the following would be MOST important to update if a decision is made to ban end user-owned devices in the workplace?
- A. Orientation training materials
- B. Employee nondisclosure agreement
- C. Enterprise risk appetite statement
- D. Enterprise acceptable use policy
Answer: D
NEW QUESTION 188
Which of the following types of IT organizational structures states that all IT resources are centralized under a single reporting structure with centralized resource allocation (staffing), and the organizational structure is built around the resource pools?
- A. Project-based
- B. Centralized
- C. Decentralized
- D. Federated
Answer: A
NEW QUESTION 189
In a large enterprise, which of the following should be responsible for the implementation of an IT balanced scorecard?
- A. IT steering committee
- B. Chief risk officer
- C. Project management office
- D. Chief information officer
Answer: C
NEW QUESTION 190
You are the project manager for your company and a new change request has been approved for your project.
This change request, however, has introduced several new risks to the project. You have communicated these risk events and the project stakeholders understand the possible effects these risks could have on your project.
You elect to create a mitigation response for the identified risk events. Where will you record the mitigation response?
- A. Project management plan
- B. Risk management plan
- C. Risk log
- D. Risk register
Answer: D
Explanation:
Section: Volume A
NEW QUESTION 191
Which of the following resource categories includes costs, productivity, availability, and change and configuration management?
- A. Partners
- B. Processes
- C. Products
- D. People
Answer: B
NEW QUESTION 192
What project management plan is most likely to direct the quantitative risk analysis process for a project in a matrix environment?
- A. Risk analysis plan
- B. Human resource management plan
- C. Staffing management plan
- D. Risk management plan
Answer: D
Explanation:
Section: Volume B
Explanation/Reference:
NEW QUESTION 193
An independent consultant has been hired to conduct an ad hoc audit of an enterprise's information security office with results reported to the IT governance committee and the board Which of the following is MOST important to provide to the consultant before the audit begins?
- A. The organizational structure of the security office
- B. Acceptance of the audit risks and opportunities
- C. The scope and stakeholders of the audit
- D. The policies and framework used by the security office
Answer: C
NEW QUESTION 194
Establishing a uniform definition for likelihood and impact through risk management standards PRIMARILY addresses which of the following concerns?
- A. Conflicting interpretations of risk levels
- B. Inconsistent categories of vulnerabilities
- C. Inconsistent data classification
- D. Lack of strategic IT alignment
Answer: A
NEW QUESTION 195
An enterprise's board of directors has asked the CIO to implement ways to make the IT function more environmentally responsible. Which of the following should be the CIO's FIRST step to ensure continued alignment of IT needs with the requirements of the board?
- A. Assess potential environmentally responsible IT initiatives.
- B. Create a staff awareness education plan focused on IT environmental responsibility.
- C. Incorporate new environmentally responsible objectives into existing IT goals.
- D. Write a business case for an environmentally responsible initiative for IT.
Answer: B
NEW QUESTION 196
The testing methods help in shaping opinion against assurance objectives by combining one or more of the test types. Which of the following are the test types used in this process? Each correct answer represents a complete solution. Choose all that apply.
- A. Inspect
- B. Plan
- C. Inquire
- D. Observe
Answer: A,C,D
Explanation:
Section: Volume C
NEW QUESTION 197
A large enterprise's IT department has identified a new risk management solution that would significantly enhance IT risk monitoring processes. However, there is a business perception that the new solution would not provide a visible benefit to the enterprise. Which of the following is the BEST way to gain business support?
- A. Promote the IT benefits and the streamlining of processes.
- B. Articulate the business value of the new solution.
- C. Provide real time risk reporting to the business.
- D. Obtain sign-off on a reduced headcount over the next five years.
Answer: A
NEW QUESTION 198
Which of the following individuals/team advises on infrastructure needs and architectural design?
- A. IT Strategy Committee
- B. CEO
- C. Management committee
- D. CIO
Answer: C
NEW QUESTION 199
The CIO in a large enterprise is seeking assurance that significant IT risk is being proactively monitored and does not exceed agreed risk tolerance levels. The BEST way to provide this ongoing assurance is to require the development of:
- A. an IT risk appetite statement.
- B. a risk register.
- C. key risk indicators (KRIs).
- D. a risk management policy.
Answer: C
NEW QUESTION 200
Which of the following sub-processes of Service Portfolio Management is used to define the overall goals that the service provider should follow in its development based on the outcome of Strategic Service Assessment?
- A. Strategic Planning
- B. Service Portfolio Update
- C. Service Strategy Definition
- D. Strategic Service Assessment
Answer: C
NEW QUESTION 201
An enterprise is contracting with an outsourcing partner for a long-term engagement. The BEST time for the enterprise to plan for the event of contract termination:
- A. developing the initial contract.
- B. issues surface in the contractual relationship.
- C. planning for the contract as part of business continuity.
- D. either party decides to terminate the contract.
Answer: B
NEW QUESTION 202
Walter is the project manager of a large construction project. He'll be working with several vendors on the project. Vendors will be providing materials and labor for several parts of the project. Some of the works in the project are very dangerous so Walter has implemented safety requirements for all of the vendors and his own project team.
Stakeholders for the project have added new requirements, which have caused new risks in the project. A vendor has identified a new risk that could affect the project if it comes into fruition. Walter agrees with the vendor and has updated the risk register and created potential risk responses to mitigate the risk. What should Walter also update in this scenario considering the risk event?
- A. Project communications plan
- B. Project management plan
- C. Project scope statement
- D. Project contractual relationship with the vendor
Answer: B
Explanation:
Section: Volume B
NEW QUESTION 203
Which of the following is the MOST effective way for a CIO to govern business unit deployment of shadow IT applications in a cloud environment?
- A. Provide training to the help desk to identify shadow IT applications.
- B. Review and update the application implementation process.
- C. Educate the executive team about the risk associated with shadow IT applications.
- D. Implement controls to block the installation of unapproved applications.
Answer: C
NEW QUESTION 204
Which of the following concepts aims to limit errors to 1 per million units produced?
- A. Six Sigma
- B. BSC
- C. TQM
- D. TSM
Answer: C
Explanation:
Section: Volume C
NEW QUESTION 205
Which of the following activities MUST be completed before developing an IT strategic plan?
- A. Review the enterprise risk tolerance level
- B. Develop an enterprise architecture (EA) framework
- C. Review the enterprise business plan
- D. Align the enterprise vision statement with business processes
Answer: C
NEW QUESTION 206
Which of the following phases in SDLC transforms the detailed requirements into complete, detailed system design document?
- A. Development
- B. Initiation
- C. Planning
- D. Design
Answer: D
Explanation:
Section: Volume C
NEW QUESTION 207
An enterprise has identified a number of plausible risk scenarios that could result in economic loss associated with major IT investments. Which of the following is the BEST method to assess the risk?
- A. Cost-benefit analysis
- B. Qualitative analysis
- C. Business impact analysis (BIA)
- D. Quantitative analysis
Answer: C
NEW QUESTION 208
......
ISACA CGEIT Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 12 |
|
Test Engine to Practice CGEIT Test Questions: https://www.realexamfree.com/CGEIT-real-exam-dumps.html
CGEIT Real Exam Questions Test Engine Dumps Training With 409 Questions: https://drive.google.com/open?id=1GepAJl_jtPUrn5dA1LRHpzX4eQMgL62S
