CGEIT practice questions 11–20

1. Question 11 · 363 in bank

   The PRIMARY focus of a committee tasked with evaluating an IT project portfolio should be to ensure:

   • Aa consistent estimation methodology is leveraged.
   • Bthe enterprise strategy is updated.
   • Cconsistent selection criteria are applied.
   • Dan industry standard capability maturity model is used.

   Show answer

   Answer: D

   Explanation

   It should be C - The primary focus of a committee tasked with evaluating an IT project portfolio should be to ensure that consistent selection criteria are applied. This includes developing and applying a set of criteria that are aligned with the organization's business objectives and IT strategy to evaluate and prioritize potential IT projects. By doing so, the committee can ensure that the portfolio is balanced, strategically aligned, and supports the organization's overall goals.

   Source: Adapted from community discussion — Frank1480

   Next question

2. Question 12 · 363 in bank

   An enterprise is planning a change in business direction. As a result, IT risk will significantly increase. Which of the following should be the CIO's FIRST course of action?

   • APlan for the corresponding IT reorganization.
   • BRecommend delaying the business change.
   • CReport the risk to executive management.
   • DImplement IT changes to align with the plan.

   Show answer

   Answer: C

   Next question

3. Question 13 · 363 in bank

   Which of the following is the MOST effective means for IT management to report to executive management regarding the value of IT?

   • AIT process maturity level
   • BResource assessment
   • CBalanced scorecard
   • DCost-benefit analysis

   Show answer

   Answer: C

   Explanation

   It should be C - The balanced scorecard is a management tool that provides a comprehensive view of an organization's performance by incorporating both financial and non-financial measures. It helps to align IT activities with the organization's strategic goals and provides a clear picture of the value that IT brings to the business. The balanced scorecard typically includes four perspectives: financial, customer, internal processes, and learning and growth.

   Source: Adapted from community discussion — Frank1480

   Next question

4. Question 14 · 363 in bank

   When determining the desired maturity levels for IT governance processes, it is MOST important to:

   • Aensure that maturity can be achieved at the lowest cost.
   • Bensure target levels are in line with external competitor benchmarks.
   • Cagree on target levels in response to need.
   • Dfocus on existing strengths as key drivers for the target levels.

   Show answer

   Answer: C

   Explanation

   It should be C - The desired maturity levels for IT governance processes should be aligned with the organization's specific needs and objectives. The level of maturity required may vary depending on the size, complexity, and industry of the organization. Therefore, it is essential to identify the organization's needs and agree on the appropriate target maturity levels that can help achieve those objectives.

   Source: Adapted from community discussion — Frank1480

   Next question

5. Question 15 · 363 in bank

   Which of the following is the MOST important reason for selecting IT key risk indicators (KRIs)?

   • AEnabling comparison against similar IT KRIs
   • BIncreasing the probability of achieving IT goals
   • CAssessing the current IT controls model
   • DDemonstrating the effectiveness of IT risk policies

   Show answer

   Answer: B

   Explanation

   Selecting appropriate IT Key Risk Indicators (KRIs) is crucial for increasing the probability of achieving IT goals due to several reasons: Informed Decision-Making: KRIs provide valuable insights into the risk profile related to IT operations and projects. By monitoring these indicators, an organization can make better-informed decisions that align with its IT and overall business goals. Proactive Risk Management: KRIs allow for proactive identification and management of potential risks before they escalate into significant issues. By doing so, they contribute to a higher likelihood of achieving the desired IT objectives. Resource Allocation: By identifying and monitoring key risk areas through KRIs, an organization can better allocate its resources (such as time, money, and personnel) to address those risks and ensure that IT projects stay on track toward achieving their goals.

   Source: Adapted from community discussion — Broesweelies

   Next question

6. Question 16 · 363 in bank

   Which of the following would BEST help a CIO enhance the competencies of an IT business analytics team?

   • AUnderstanding current staff skill sets and identifying gaps
   • BDefining the IT architecture and identifying training areas
   • CCreating operational processes and identifying resources
   • DEstablishing team goals and identifying the proper structure

   Show answer

   Answer: A

   Explanation

   It should be A - To enhance the competencies of an IT business analytics team, it is essential to understand the current skill sets of the team members and identify any gaps that need to be addressed. This can be achieved through assessments, evaluations, and job analyses. By understanding the strengths and weaknesses of the team members, the CIO can then identify appropriate training programs and development opportunities to enhance their competencies.

   Source: Adapted from community discussion — Frank1480

   Next question

7. Question 17 · 363 in bank

   The BEST way to ensure an IT steering committee meets enterprise objectives is to:

   • Ahave key business stakeholders represented on the committee.
   • Bestablish key performance indicators (KPIs).
   • Crequire a member of the committee to have IT governance expertise.
   • Dbenchmark against industry best practices.

   Show answer

   Answer: A

   Next question

8. Question 18 · 363 in bank

   Which of the following is the MOST important input for the development of a human resources strategy to address IT skill gaps?

   • ATechnology direction of the enterprise
   • BTraining budget allocated for IT staff
   • CA recent IT skills matrix
   • DTraining effectiveness reports

   Show answer

   Answer: C

   Explanation

   Page 205 of CGEIT Review Manual 8th Edition. APO07.03 Maintain the Skills and Competencies of Personnel. APO07.03 Maintain the skills and competencies of personnel. Define and manage the skills and competencies required of personnel. Regularly verify that personnel have the competencies to fulfill their roles on the basis of their education, training and/or experience. Verify that these competencies are being maintained, using qualification and certification programs where appropriate. Provide employees with ongoing learning and opportunities to maintain their knowledge, skills and competencies at a level required to achieve enterprise goals. Metrics Example: A. Identified key skills and competencies missing in the resource matrix B. Number of identified gaps between required and available skills C. Number of training programs provided

   Source: Adapted from community discussion — Sathish5

   Next question

9. Question 19 · 363 in bank

   A hospital's executive steering committee is concerned about the increasing number of cyber attacks on patient data systems across the industry. The committee has asked the CIO to provide regular reporting with information that will help provide better oversight of cyber-related risk to the hospital. Including which of the following in the report would be MOST helpful to the committee?

   • AStatus of key risk indicators
   • BCurrent business impact levels
   • CIT operations gap assessment
   • DCybersecurity risk benchmarks

   Show answer

   Answer: A

   Explanation

   It should be D - Including cybersecurity risk benchmarks in the report would be most helpful to the executive steering committee. Cybersecurity risk benchmarks provide a comparison of the hospital's security posture against industry best practices and standards. This information will help the committee understand how their cybersecurity practices compare to other organizations in the industry and identify potential areas of improvement. While status of key risk indicators, current business impact levels, and IT operations gap assessment are all important considerations, they do not provide the same level of insight into the hospital's cybersecurity practices compared to industry best practices. Therefore, including cybersecurity risk benchmarks in the report would be the most helpful to the committee in providing better oversight of cyber-related risks to the hospital.

   Source: Adapted from community discussion — Frank1480

   Next question

10. Question 20 · 363 in bank

    Which of the following is the BEST way to provide effective IT risk management?

    • AImplementing a cost-effective mitigation program
    • BAppointing a chief risk officer
    • CEmbedding risk management in operations
    • DEstablishing an incident management program

    Show answer

    Answer: C

    Explanation

    It should be C - Embedding risk management in operations is the best way to provide effective IT risk management. This involves integrating risk management into the organization's overall processes and procedures, including the IT department's operations. By doing so, risk management becomes a routine part of decision-making and daily activities, ensuring that risks are identified and addressed proactively.

    Source: Adapted from community discussion — Frank1480

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CGEIT practice, question 11. 363 questions available.