
Verified CGEIT dumps Q&As 100% Pass in First Attempt Guaranteed Updated Dump from ValidTorrent
Pass Isaca Certificaton CGEIT Exam With 409 Questions
What is the duration of the CGEIT Exam
- Format: Multiple choices, multiple answers
- Length of Examination: 4 hours
ISACA CGEIT Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 11 |
|
| Topic 12 |
|
NEW QUESTION 112
Which of the following is a family of ISO standards for Total Quality Management (TQM)?
- A. ISO 20000
- B. ISO 9000
- C. ISO 27001
- D. ISO 38500
Answer: B
NEW QUESTION 113
Which of the following MOST effectively prevents an IT system from becoming technologically obsolete before its planned return on investment (ROi)?
- A. Requesting periodic third-party assessments of the system throughout its life
- B. Ensuring that the system is maintained in compliance with enterprise architecture (EA) standards
- C. Obtaining long-term support commitments from the system platform vendors)
- D. Obtaining independent assurance that the system will conform to future business requirements
Answer: B
NEW QUESTION 114
An executive sponsor of a partially completed IT project has learned that the financial assumptions supporting the project have changed. Which of the following governance actions should be taken FIRST?
- A. Request a risk assessment.
- B. Schedule an interim project review.
- C. Re-evaluate the project in the portfolio.
- D. Request an update to the business case.
Answer: C
NEW QUESTION 115
Which of the following concepts is the business practice of developing and implementing comprehensive risk management and security practices for a firm's entire value chain?
- A. TOGAF
- B. TQM
- C. BSC
- D. TSM
Answer: D
Explanation:
Section: Volume A
NEW QUESTION 116
Which of the following areas addresses the safeguarding of IT assets, disaster recovery and continuity of operations?
- A. Value delivery
- B. Performance measurement
- C. Strategic alignment
- D. Risk management
Answer: D
Explanation:
Section: Volume C
NEW QUESTION 117
Software Development Life Cycle (SDLC) is a logical process used by programmers to develop software.
Which of the following SDLC phases meets the audit objectives defined below?
* System and data are validated.
* System meets all user requirements.
* System meets all control requirements.
- A. Initiation
- B. Evaluation and acceptance
- C. Definition
- D. Programming and training
Answer: B
Explanation:
Section: Volume B
NEW QUESTION 118
Which of the following guides provides risk and value statements to help identify and validate the need to execute each control objective?
- A. IT control objectives for Basel II guide
- B. IT assurance guide
- C. COBIT control practices guide
- D. IT control for Sarbanes Oxley guide
Answer: C
Explanation:
Section: Volume C
NEW QUESTION 119
You are the project manager of the GHG project for your company. You have identified the project risks, completed qualitative and quantitative analysis, and created risk responses. You also need to document how and when risk audits will be performed in the project. Where will you define the frequency of risk audits?
- A. Risk management plan
- B. Schedule management plan
- C. Quality management plan
- D. Risk response plan
Answer: A
Explanation:
Section: Volume B
NEW QUESTION 120
Which of the following represents the GREATEST challenge to implementing IT governance?
- A. Applying behavioral change management
- B. Determining the best practice to follow
- C. Planning the project itself
- D. Developing a business case
Answer: A
NEW QUESTION 121
Which of the following functions of HR department is liable for policy creation, policy communication, record creation, and HR information systems?
- A. Support for strategy
- B. Personnel policy
- C. Compensation and benefit
- D. Analysis and design for work
Answer: B
NEW QUESTION 122
Which of the following has the GREATEST influence on data quality assurance?
- A. Data stewardship
- B. Data encryption
- C. Data classification
- D. Data modeling
Answer: A
NEW QUESTION 123
Which of the following is NOT a sub-process of Service Portfolio Management?
- A. Business Planning Data
- B. Strategic Planning
- C. Strategic Service Assessment
- D. Service Portfolio Update
- E. Service Strategy Definition
Answer: A
NEW QUESTION 124
Which of the following is a process improvement approach that provides organizations with the essential elements for effective process improvement and guides process improvement across a project, a division, or an entire organization?
- A. Capability Maturity Model Integration
- B. Service Portfolio
- C. Six Sigma
- D. COBIT
Answer: A
Explanation:
Section: Volume A
NEW QUESTION 125
An enterprise's board of directors has determined that IT is not sufficiently supporting its corporate objectives, and has established a committee to address this problem. Which of the following should be the committees FIRST action?
- A. Develop a service level management plan.
- B. Implement a continuous improvement plan.
- C. Specify IT human resource performance measures.
- D. Create an IT strategic plan.
Answer: D
NEW QUESTION 126
Which of the following should be the MAIN reason for an enterprise to implement an IT risk management framework?
- A. The ability to benchmark IT risk policies against major competitors
- B. The need to enable IT risk-aware decisions by executives
- C. The results of an external audit report concerning IT risk management processes.
- D. The need to address market regulations and internal compliance in IT risk
Answer: B
NEW QUESTION 127
Which of the following functions of HR department is liable for attitude surveys, labor relation, employee handbook, and labor law compliance?
- A. Personnel policy
- B. Compensation and benefit
- C. Employee relation
- D. Analysis and design for work
Answer: C
Explanation:
Section: Volume C
NEW QUESTION 128
Which of the following is MOST important to effectively initiate IT-enabled change?
- A. Ensure compliance with corporate policy.
- B. Establish a change management process.
- C. Obtain top management support and ownership.
- D. Benchmark against best practices.
Answer: B
NEW QUESTION 129
What is the BEST way for an IT governance board to establish standards of behavior for the adoption of artificial intelligence (AI)?
- A. Review and update the data privacy policy to align with industry standards.
- B. Include ethics topics within onboarding and awareness training.
- C. Direct the creation and approval of an ethical use policy.
- D. Include specific ethics clauses in vendor agreements and contracts.
Answer: C
NEW QUESTION 130
Melody is the project manager for her organization. She has created a risk response to conduct more tests on the software her project is creating. The identified risk that prompted this response was that the software is mission-critical and must be flawless before it can be put into product. What type of a risk response has Melody used in this scenario?
- A. Transference
- B. Avoidance
- C. Enhance
- D. Mitigation
Answer: D
NEW QUESTION 131
......
Ultimate Guide to Prepare Free CGEIT Exam Questions & Answer: https://drive.google.com/open?id=1rCDXVjK5nOtuQXImAOufaCHUuttl2Dxt
Pass CGEIT Tests Engine pdf - All Free Dumps: https://www.validtorrent.com/CGEIT-valid-exam-torrent.html