Isaca CGEIT Practice Exam Questions

Isaca CGEIT Sample Question Answers

Question # 1

Which of the following should be the PRIMARY governance objective for selecting key riskindicators (KRIs) related to legal and regulatory compliance?

A. Identifying the risk of noncompliance 
B. Demonstrating sound risk management practices 
C. Measuring IT alignment with enterprise risk management (ERM) 
D. Ensuring the effectiveness of IT compliance controls 

Show Answer

Question # 2

The PRIMARY objective of building outcome measures is to: 

A. monitor whether the chosen strategy is successful  
B. visualize how the strategy will be achieved. 
C. demonstrate commitment to IT governance. 
D. clarify the cause-and-effect relationship of the strategy. 

Show Answer

Question # 3

Which of the following are PRIMARY factors in ensuring the success of an enterprisequality assurance program?

A. Enterprise risk appetite and tolerance 
B. Risk management and control frameworks 
C. Continuous improvement plans 
D. A process maturity framework and documented procedures 

Show Answer

Question # 4

An enterprise wishes to establish key risk indicators (KRIs) in an effort to better manage ITrisk. Which of the following should be identified FIRST?

A. Risk mitigation strategies  
B. Enterprise architecture (EA) components  
C. The enterprise risk appetite 
D. Key performance metrics 

Show Answer

Question # 5

Which of the following is the BEST method to monitor IT governance effectiveness? 

A. Service level management 
B. Balanced scorecard 
C. Risk control self-assessment (CSA) 
D. SWOT analysis 

Show Answer

Question # 6

A board of directors has just received a report indicating that only a small number of ITinitiatives have been completed on time and within budget, A third of the projects werecancelled prior to completion, and more than half will cost almost double their originalestimates. An analysis has determined that no one is held responsible for the completion ofinvestment initiatives, and there is no consistency in execution. Which of the followingwould BEST help the enterprise address these problems?

A. Establishing a project governance framework 
B. Assigning business management to an IT investment review board 
C. Establishing an IT risk management plan 
D. Aligning IT investment priorities to the business  

Show Answer

Question # 7

Which of the following provides the BEST assurance on the effectiveness of IT service management processes?

A. Performance of incident response 
B. Continuous monitoring 
C. Key risk indicators (KRIs) 
D. Compliance with internal controls 

Show Answer

Question # 8

In which of the following situations is it MOST appropriate to use a quantitative riskassessment?

A. There is a lack of accurate and reliable past and present risk data.  
B. The risk assessment needs to be completed in a short period of time. 
C. The objectivity of the risk assessment is of primary importance.  
D. The risk assessment is needed for an IT project business case. 

Show Answer

Question # 9

The MOST effective way to ensure that IT supports the agile needs of an enterprise is to: 

A. perform process modeling. 
B. outsource infrastructure management. 
C. develop a robust enterprise architecture (EA). 
D. implement open source systems. 

Show Answer

Question # 10

Which of the following is the PRIMARY purpose of an effective set of key risk indicators (KRIs)? 

A. Identifying possible future adverse impacts on the enterprise 
B. Evaluating existing technology for risk monitoring capabilities 
C. Establishing executive level buy-in of the risk program 
D. Quantifying the productivity of the risk management team 

Show Answer