ISACA Certified in the Governance of Enterprise IT CGEIT Dumps in PDF

Free ISACA CGEIT Real Questions (page: 2)

Enterprise IT has overseen the implementation of an array of data services with overlapping functionality leading to business inefficiencies.
Which of the following is the MOST likely cause of this situation?

  1. insufficient information architecture
  2. Ineffective project management
  3. An outdated service level agreement (SLA)
  4. An incomplete cost-benefit analysis

Answer(s): A

Explanation:

Information architecture (IA) is the process of guiding users through the site by organising and arranging all the relevant content in a clear, intuitive way. It also ensures consistency throughout a product’s design by standardising labelling conventions such as menu names, link titles, and button labels across all pages1. If enterprise IT has overseen the implementation of an array of data services with overlapping functionality, it may indicate that they have not followed a coherent and effective IA strategy. This can lead to business inefficiencies, such as duplication of efforts, confusion among users, and difficulty in finding and accessing information. According to one of the web search results2, “Application rationalization is a simple first step to analyze the current architecture to determine redundant applications, overlapping functionality, and software that is not exactly current. As more companies move into a service-oriented architecture implementation, this analysis is a cost-effective way to ensure that the IT resources are utilized in the most efficient manner.” Ineffective project management, an outdated service level agreement (SLA), and an incomplete cost-benefit analysis are not the most likely causes of this situation. They are more related to the planning, execution, and evaluation of individual projects, rather than the overall design and organisation of information systems. Reference := What is information architecture? -UX Design Institute, Staying Current And Supporting Systems With Overlapping Functionality



Which of the following would be the BEST way to facilitate the adoption of strong IT governance practices throughout a multi-divisional enterprise?

  1. Ensuring each divisional policy is consistent with corporate policy
  2. Ensuring divisional governance fosters continuous improvement processes
  3. Mandating data standardization across the distributed enterprise
  4. Documenting and communicating key management practices across divisions

Answer(s): D

Explanation:

 Documenting and communicating key management practices across divisions is the best way to facilitate the adoption of strong IT governance practices throughout a multi-divisional enterprise. This can help to ensure that all divisions are aware of and aligned with the corporate IT governance framework, policies, and standards. It can also promote collaboration, coordination, and consistency among the divisions, as well as transparency, accountability, and trust. According to one of the web search results1, “communication is a critical success factor for IT governance implementation” and “effective communication can help to create a shared understanding of IT governance objectives, roles, responsibilities, and benefits among stakeholders.” Ensuring each divisional policy is consistent with corporate policy, ensuring divisional governance fosters continuous improvement processes, and mandating data standardization across the distributed enterprise are not the best ways to facilitate the adoption of strong IT governance practices throughout a multi-divisional enterprise. They are more likely to be part of the implementation or improvement of IT governance practices, rather than the facilitation of them. They may also encounter resistance or challenges from the divisions due to different business needs, cultures, or preferences. Reference := IT Governance Practices For Improving Strategic And Operational …



An enterprise considers implementing a system that uses a technology that is not in line with its IT strategy. The business case indicates significant benefit to the enterprise.
Which of the following is the BEST way to manage this situation within an IT governance framework?

  1. Update the IT strategy to align with the new technology.
  2. Initiate an operational change request.
  3. Reject based on non-alignment.
  4. Address as part of an architecture exception process.

Answer(s): D

Explanation:

 An architecture exception process is a mechanism to handle requests for deviations from the established IT architecture policies or standards. It allows the enterprise to evaluate the business case, risks, benefits, and alternatives of implementing a system that uses a technology that is not in line with its IT strategy. It also enables the enterprise to define the conditions, limitations, and timelines for granting or denying the exception. According to one of the web search results1, “requests for exceptions to any architectural policy or standard use this process” and “the decision may include a deadline for removing the need for the exception, constraints on future projects, or similar terms.” Addressing the situation as part of an architecture exception process is the best way to manage it within an IT governance framework, as it provides a structured andtransparent way to balance the business needs and the IT alignment. Updating the IT strategy to align with the new technology, initiating an operational change request, or rejecting based on non-alignment are not the best ways to manage the situation within an IT governance framework. They are more likely to be either too rigid or too reactive, and may not consider the trade-offs or implications of the decision..
 Reference:
CGEIT Review Manual 2021, Chapter 1: Governance of Enterprise IT, Section 1.4: Value Delivery, page 231
CGEIT Review Questions, Answers & Explanations Manual 2021, Question 9, page 82
A Matrixed Approach to Designing IT Governance - MIT Sloan Management Review3
Enterprise Architecture Governance | The Definitive Guide - LeanIX4
Architecture Review Board Exception Process - Minnesota’s State Portal5



Which of the following groups should approve the implementation of new technology?

  1. IT steering committee
  2. IT audit department
  3. Portfolio management office
  4. Program management office

Answer(s): A

Explanation:

 An IT steering committee is a group of senior executives who are responsible for directing, reviewing, and approving IT strategic plans, overseeing major initiatives, and allocating resources. They are the most appropriate group to approve the implementation of new technology, as they can ensure that it aligns with the organization’s vision, mission, goals, and objectives. They can also evaluate the business case, risks, benefits, and alternatives of the new technology and provide guidance and support to the IT team. According to one of the web search results1, “the steering committee establishes IT priorities for the business as a whole.” Reference := What is an IT Steering Committee? – BMC Software | Blogs



A regulatory audit assessed an enterprise's main transactional application as noncompliant. In addition to fines and required corrections, an agreement was reached to implement a set of governance controls over IT. Accountability for these controls is BEST assigned to which of the following?

  1. CIO
  2. Internal audit director
  3. Application users
  4. The board of directors

Answer(s): D

Explanation:

The board of directors is ultimately responsible for the governance of IT and ensuring that IT supports the enterprise’s objectives and strategy. The board of directors should also oversee the implementation and monitoring of IT governance controls to ensure compliance with laws and regulations. Reference: ISACA, CGEIT Review Manual, 7th Edition, 2019, page 17.



An enterprise can BEST assess the benefits of a new IT project through its life cycle by:

  1. calculation of the total cost of ownership.
  2. periodic review of the business case.
  3. periodic measurement of the project slip rate.
  4. calculation of the net present value (NPV).

Answer(s): B

Explanation:

A business case is a document that outlines the rationale, objectives, benefits, costs, risks and alternatives of a proposed IT project. A business case should be reviewed periodically throughout the project life cycle to ensure that the project is still aligned with the enterprise’s strategy and goals, and that the expected benefits are still achievable and realistic. A periodic review of the business case can also help to identify any changes or issues that may affect the project’s scope, schedule, budget or quality, and to take corrective actions accordingly. Reference: ISACA, CGEIT Review Manual, 7th Edition, 2019, page 77. A guide to measuring benefits effectively. Cost-Benefit Analysis: A Quick Guide with Examples and Templates.



The PRIMARY reason for an enterprise to adopt an IT governance framework is to:

  1. assure IT sustains and extends the enterprise strategies and objectives.
  2. expedite IT investments among other competing business investments.
  3. establish IT initiatives focused on the business strategy.
  4. allow IT to optimize confidentiality, integrity, and availability of information assets.

Answer(s): A

Explanation:

 IT governance is a framework that provides a formal structure for organizations to ensure that IT investments support business objectives. The primary reason for an enterprise to adopt an
ITgovernance framework is to assure that IT sustains and extends the enterprise strategies and objectives, by aligning IT with business needs, optimizing IT performance and value, managing IT risks and resources, and measuring IT outcomes and benefits12. Reference: ISACA, CGEIT Review Manual, 7th Edition, 2019, page 15.
What Is IT Governance? Definition, Practices and Frameworks. IT Governance: Definition, Frameworks, and Best Practices.



Which of the following is the BEST approach when reviewing The security status of a new business acquisition?

  1. Embed IT risk management strategies in service level agreements (SLAs).
  2. Establish a committee to oversee the alignment of IT security in new businesses.
  3. Incorporate IT security objectives to cover additional risks associated with new businesses.
  4. Integrate IT risk assessment into the overall due diligence process.

Answer(s): D

Explanation:

The security status of a new business acquisition is a critical factor that can affect the value, performance, and reputation of the acquiring company. Therefore, it is essential to conduct a thorough IT risk assessment of the target company as part of the overall due diligence process. An IT risk assessment can help to identify and evaluate the current and potential cybersecurity threats, vulnerabilities, and controls in the target company’s IT environment, as well as the compliance with relevant laws and regulations. An IT risk assessment can also help to estimate the costs and efforts required to remediate any security gaps or issues, and to align the security policies and standards of both parties. By integrating IT risk assessment into the due diligence process, the acquiring company can make informed decisions about the feasibility, valuation, and integration of the new business acquisition12. Reference: Due diligence for Mergers and Acquisitions through a cybersecurity lens. Microsoft Security tips for mitigating risk in mergers and acquisitions.



Share your comments for ISACA CGEIT exam with other users:

D
deedee
12/23/2023 5:51:00 PM

great great

A
Asad Khan
11/1/2023 3:10:00 AM

answer 16 should be b your organizational policies require you to use virtual machines directly

S
Sale Danasabe
10/24/2023 5:21:00 PM

the question are kind of tricky of you didnt get the hnag on it.

L
Luis
11/16/2023 1:39:00 PM

can anyone tell me if this is for rhel8 or rhel9?

H
hik
1/19/2024 1:47:00 PM

good content

B
Blessious Phiri
8/15/2023 2:18:00 PM

pdb and cdb are critical to the database

Z
Zuned
10/22/2023 4:39:00 AM

till 104 questions are free, lets see how it helps me in my exam today.

M
Muhammad Rawish Siddiqui
12/3/2023 12:11:00 PM

question # 56, answer is true not false.

A
Amaresh Vashishtha
8/27/2023 1:33:00 AM

i would be requiring dumps to prepare for certification exam

A
Asad
9/8/2023 1:01:00 AM

very helpful

B
Blessious Phiri
8/13/2023 3:10:00 PM

control file is the heart of rman backup

S
Senthil
9/19/2023 5:47:00 AM

hi could you please upload the ibm c2090-543 dumps

H
Harry
6/27/2023 7:20:00 AM

appriciate if you could upload this again

A
Anonymous
7/10/2023 4:10:00 AM

please upload the dump

R
Raja
6/20/2023 5:30:00 AM

i found some questions answers mismatch with explanation answers. please properly update

D
Doora
11/30/2023 4:20:00 AM

nothing to mention

D
deally
1/19/2024 3:41:00 PM

knowable questions

S
Sonia
7/23/2023 4:03:00 PM

very helpfull

B
binEY
10/6/2023 5:15:00 AM

good questions

N
Neha
9/28/2023 1:58:00 PM

its helpful

D
Desmond
1/5/2023 9:11:00 PM

i just took my oracle exam and let me tell you, this exam dumps was a lifesaver! without them, iam not sure i would have passed. the questions were tricky and the answers were obscure, but the exam dumps had everything i needed. i would recommend to anyone looking to pass their oracle exams with flying colors (and a little bit of cheating) lol.

D
Davidson OZ
9/9/2023 6:37:00 PM

22. if you need to make sure that one computer in your hot-spot network can access the internet without hot-spot authentication, which menu allows you to do this? answer is ip binding and not wall garden. wall garden allows specified websites to be accessed with users authentication to the hotspot

3
381
9/2/2023 4:31:00 PM

is question 1 correct?

L
Laurent
10/6/2023 5:09:00 PM

good content

S
Sniper69
5/9/2022 11:04:00 PM

manged to pass the exam with this exam dumps.

D
Deepak
12/27/2023 2:37:00 AM

good questions

D
dba
9/23/2023 3:10:00 AM

can we please have the latest exam questions?

P
Prasad
9/29/2023 7:27:00 AM

please help with jn0-649 latest dumps

G
GTI9982
7/31/2023 10:15:00 PM

please i need this dump. thanks

E
Elton Riva
12/12/2023 8:20:00 PM

i have to take the aws certified developer - associate dva-c02 in the next few weeks and i wanted to know if the questions on your website are the same as the official exam.

B
Berihun Desalegn Wonde
7/13/2023 11:00:00 AM

all questions are more important

G
gr
7/2/2023 7:03:00 AM

ques 4 answer should be c ie automatically recover from failure

R
RS
7/27/2023 7:17:00 AM

very very useful page

B
Blessious Phiri
8/12/2023 11:47:00 AM

the exams are giving me an eye opener

AI Tutor 👋 I’m here to help!