ISACA Certified in the Governance of Enterprise IT CGEIT Dumps in PDF

Free ISACA CGEIT Real Questions (page: 5)

An IT investment review board wants to ensure that IT will be able to support business initiatives. Each initiative is comprised of several interrelated IT projects.
Which of the following would help ensure that the initiatives meet their goals?

  1. Review of project management methodology
  2. Review of the business case for each initiative
  3. Establishment of portfolio management
  4. Verification of initiatives against the architecture

Answer(s): C

Explanation:

 Portfolio management is the process of selecting, prioritizing, and managing a collection of projects, programs, and initiatives that align with the strategic goals and objectives of an organization. Portfolio management can help to ensure that the IT initiatives meet their goals, by providing a holistic and integrated view of the IT investments, resources, and outcomes. Portfolio management can also help to optimize the value and benefits of the IT initiatives, by balancing the risks, costs, and dependencies among them. Portfolio management can also help to monitor and control the performance and progress of the IT initiatives, by using metrics, indicators, and reports123. Reference: What is Portfolio Management? Definition & Examples. A Guide to IT Portfolio Management | Adobe Workfront. IT Portfolio Management: Importance, How-To Steps and Tips.



It has been discovered that multiple business units across an enterprise are using duplicate IT applications and services to fulfill their individual needs.
Which of the following would be MOST helpful to address this concern?

  1. Enterprise architecture (EA)
  2. Enterprise risk framework
  3. IT service management
  4. IT project roadmap

Answer(s): A

Explanation:

Enterprise architecture (EA) is a discipline that defines and organizes the components, relationships, principles, and standards of an organization’s IT environment. EA can help to align IT with business strategy and objectives, optimize IT performance and value, and manage IT complexity and change12.
One of the benefits of EA is that it can help to address the concern of duplicate IT applications and services across an enterprise. EA can help to identify and eliminate the redundancies, inconsistencies, and inefficiencies in the IT landscape, by providing a holistic and integrated view of the current and future state of IT. EA can also help to rationalize and consolidate the IT applications and services, by establishing a common framework, taxonomy, and governance for IT decision making. EA can also help to improve the integration and interoperability of IT applications and services, by defining the interfaces, protocols, and standards for data exchange123.
Some examples of how EA can help to address the concern of duplicate IT applications and services are:
EA can help to conduct an inventory and assessment of the existing IT applications and services, to determine their purpose, scope, functionality, quality, cost, and value. EA can also help to compare and contrast the IT applications and services across different business units, to identify the overlaps, gaps, or conflicts among them4.
EA can help to define and prioritize the business needs and requirements for IT applications and services, to ensure that they support the business goals and processes. EA can also help to evaluate and select the best IT solutions for each business need, based on criteria such as feasibility, suitability, scalability, security, compliance, etc5.
EA can help to design and implement a target IT architecture that eliminates or minimizes the duplicate IT applications and services, by using approaches such as application portfolio management (APM), service-oriented architecture (SOA), or cloud computing. EA can also help to plan and execute a migration strategy that ensures a smooth transition from the current to the target state .
EA can help to monitor and control the IT applications and services, by using metrics, indicators, and reports to measure their performance, availability, reliability, quality, and value. EA can also help to review and update the IT applications and services regularly, by using feedback mechanisms and continuous improvement practices .


Reference:

What is Enterprise Architecture? Definition & Frameworks. Enterprise Architecture: Definition & Best Practices. How Enterprise Architecture Can Help You Eliminate Technical Debt. Application Inventory: Definition & Best Practices. Business Requirements: Definition & Best Practices. [Application Portfolio Management: Definition & Best Practices]. [Service-Oriented Architecture: Definition & Benefits]. [IT Performance Management: Definition & Best Practices]. [Continuous Improvement: Definition & Best Practices].



Results of an enterprise's customer survey indicate customers prefer using mobile applications. However, this same survey shows the enterprise's mobile applications are considered inferior compared to legacy browser-based applications.
Which of the following should be the FIRST step in creating an effective long-term mobile application strategy?

  1. Establish service level agreements (SLAs) with the development team.
  2. Identify key risks and mitigation strategies for mobile applications.
  3. Implement key performance indicators (KPIs) that include application quality.
  4. Identify business requirements concerning mobile applications.

Answer(s): D

Explanation:

The first step in creating an effective long-term mobile application strategy is to identify the business requirements concerning mobile applications. Business requirements are the needs, expectations, and objectives of the business stakeholders and customers for a product or service. Business requirements can help to define the scope, purpose, value, and quality of the mobile applications, as well as to align them with the business strategy and goals12.
By identifying the business requirements concerning mobile applications, the enterprise can understand what the customers want and need from the mobile applications, what problems or pain points they are facing with the current applications, what features or functions they are looking for or missing, what benefits or outcomes they are expecting or measuring, and what preferences or feedback they have for improving the mobile applications12.
Identifying the business requirements concerning mobile applications can also help the enterprise to prioritize and plan the development, testing, and deployment of the mobile applications, by using criteria such as feasibility, suitability, scalability, security, compliance, etc. Identifying the business requirements concerning mobile applications can also help the enterprise to monitor and evaluate the performance and satisfaction of the mobile applications, by using metrics, indicators, and reports12.
Therefore, identifying the business requirements concerning mobile applications is the first step in creating an effective long-term mobile application strategy. This can help the enterprise to deliver mobile applications that meet or exceed the customer expectations and requirements, and that are superior to the legacy browser-based applications. Reference: Business Requirements: Definition & Best Practices. How to Write a Business Requirements Document: A Comprehensive Guide.



Which of the following is the GREATEST impact to an enterprise that has ineffective information architecture?

  1. Poor desktop service delivery
  2. Data retention
  3. Redundant systems
  4. Poor business decisions

Answer(s): D

Explanation:

 Information architecture (IA) is the practice of structuring and presenting the parts of something — whether that’s a website, mobile app, blog post, book, or brick-and-mortar store — to users so that it’s easy to understand. IA can help users find information and complete tasks1.
An enterprise that has ineffective information architecture may suffer from poor business decisions, because it may not be able to access, analyze, or use the data and information that are relevant, accurate, consistent, and timely for decision making. Poor business decisions can lead to negative consequences, such as losing customers, market share, revenue, or competitive advantage, or facing legal, financial, reputational, or operational risks23.
Some examples of how ineffective information architecture can impact business decisions are:
If the enterprise’s website has a confusing or inconsistent navigation system, users may not be able to find the information they need or want, such as product details, prices, reviews, or contactinformation. This can result in lower customer satisfaction, engagement, conversion, and retention14.
If the enterprise’s data is stored in multiple systems or platforms that are not integrated or interoperable, users may not be able to access or share the data across different departments or functions. This can result in data silos, duplication, inconsistency, or incompleteness25.
If the enterprise’s data is not labeled or categorized properly, users may not be able to search or filter the data effectively. This can result in data overload, irrelevance, or obscurity25.
If the enterprise’s data is not governed or managed properly, users may not be able to trust or verify the data quality or integrity. This can result in data errors, inaccuracies, or biases25.
Therefore, an enterprise that has ineffective information architecture may have poor business decisions as its greatest impact. Reference: Information Architecture Basics | Usability.gov. The Importance of Information Architecture to UX Design. How Enterprise Architecture Can Help You Eliminate Technical Debt.
What Is Information Architecture & Why Does It Matter? -HubSpot Blog.
Why Do We Need Information Architecture - Architecture.



Of the following, who should be responsible for ensuring the regular review of quality management performance against defined quality metrics?

  1. Process owners
  2. Risk management team
  3. Internal auditors
  4. Executive management

Answer(s): A

Explanation:

 Process owners are responsible for ensuring the regular review of quality management performance against defined quality metrics, as they are accountable for the design, implementation and improvement of the processes they own. Risk management team, internal auditors and executive management have other roles and responsibilities in relation to quality management, such as providing assurance, oversight and direction. Reference: : CGEIT Review Manual (Digital Version), Chapter 3: Benefits Realization, Section 3.2: IT Investment Management, Subsection 3.2.4: IT Investment Management Process, Page 104 : CGEIT Review Manual (Digital Version), Chapter 3: Benefits Realization, Section 3.4: Quality Management, Subsection 3.4.1: Quality Management Overview, Page 120



An enterprise experiencing issues with data protection and least privilege is implementing enterprise-wide data encryption in response.
Which of the following is the BEST approach to ensure all business units work toward remediating these issues?

  1. Develop key performance indicators (KPIs) to measure enterprise adoption.
  2. Integrate data encryption requirements into existing and planned projects.
  3. Assign owners for data governance initiatives.
  4. Mandate the creation of a data governance framework.

Answer(s): D

Explanation:

A data governance framework is a set of policies, standards, roles, and processes that define how data is collected, stored, accessed, and used within an enterprise. A data governance framework can help address data protection and least privilege issues by establishing clear rules and responsibilities for data owners, custodians, and users. A data governance framework can also enable data encryption as a key control to protect sensitive data from unauthorized access or disclosure. Therefore, mandating the creation of a data governance framework is the best approach to ensure all business units work toward remediating these issues. Reference: : CGEIT Review Manual (Digital Version), Chapter 4: Risk Optimization, Section 4.3: IT Risk Management, Subsection 4.3.2: IT Risk Management Process, Page 156 : CGEIT Review Manual (Digital Version), Chapter 5: Resource Optimization, Section 5.2: Information Resource Management, Subsection 5.2.1: Information Resource Management Overview, Page 183 : A Guide to Selecting and Adopting a Privacy Framework1



Senior management wants to promote investment in IT, but is uncertain that associated risks are being properly identified. The BEST way to address this concern is to:

  1. engage an external consultant to develop risk scenarios.
  2. appoint an IT representative to the business risk committee.
  3. assign an IT cost controller to the finance department.
  4. ensure business cases are developed by IT.

Answer(s): B

Explanation:

 Appointing an IT representative to the business risk committee is the best way to address senior management’s concern about IT investment risks, as it would ensure that IT risks are properly identified, assessed, and communicated to the business stakeholders. The IT representative would also be able to align IT risk management with the enterprise’s risk appetite and strategy, and provide input and feedback on the IT investment decisions. The other options are not as effective, as they do not involve direct collaboration and communication between IT and business on risk matters. Reference: : CGEIT Review Manual (Digital Version), Chapter 4: Risk Optimization, Section 4.3: IT Risk Management, Subsection 4.3.1: IT Risk Management Overview, Page 153 : CGEIT Review Manual (Digital Version), Chapter 4: Risk Optimization, Section 4.3: IT Risk Management, Subsection 4.3.2: IT Risk Management Process, Page 156 :CGEIT Review Manual (Digital Version), Chapter 4: Risk Optimization, Section 4.3: IT Risk Management, Subsection 4.3.5: Roles and Responsibilities for IT Risk Management, Page 161



Which of the following represents the GREATEST challenge to implementing IT governance?

  1. Determining the best practice to follow
  2. Planning the project itself
  3. Developing a business case
  4. Applying behavioral change management

Answer(s): D

Explanation:

Applying behavioral change management is the greatest challenge to implementing IT governance, as it involves changing the culture, mindset, and behavior of the people who are affected by or involved in IT governance. IT governance is not just a technical or procedural issue, but also a human and organizational one. Therefore, it requires effective communication, education, motivation, and leadership to ensure that the stakeholders understand, accept, and support the IT governance objectives, principles, and practices. The other options are not as challenging, as they can be addressed by following established methods, frameworks, and standards for IT governance. Reference: : CGEIT Review Manual (Digital Version), Chapter 1: Governance of Enterprise IT, Section 1.2: IT Governance Frameworks and Standards, Subsection 1.2.1: IT Governance Frameworks and Standards Overview, Page 17 : CGEIT Review Manual (Digital Version), Chapter 1: Governance of Enterprise IT, Section 1.4: Implementing and Maintaining an IT Governance Framework, Subsection 1.4.2: Implementing an IT Governance Framework, Page 29 : CGEIT Preparation Tips and the Timelessness of Good Governance1



Share your comments for ISACA CGEIT exam with other users:

N
Neha
9/28/2023 1:58:00 PM

its helpful

D
Desmond
1/5/2023 9:11:00 PM

i just took my oracle exam and let me tell you, this exam dumps was a lifesaver! without them, iam not sure i would have passed. the questions were tricky and the answers were obscure, but the exam dumps had everything i needed. i would recommend to anyone looking to pass their oracle exams with flying colors (and a little bit of cheating) lol.

D
Davidson OZ
9/9/2023 6:37:00 PM

22. if you need to make sure that one computer in your hot-spot network can access the internet without hot-spot authentication, which menu allows you to do this? answer is ip binding and not wall garden. wall garden allows specified websites to be accessed with users authentication to the hotspot

3
381
9/2/2023 4:31:00 PM

is question 1 correct?

L
Laurent
10/6/2023 5:09:00 PM

good content

S
Sniper69
5/9/2022 11:04:00 PM

manged to pass the exam with this exam dumps.

D
Deepak
12/27/2023 2:37:00 AM

good questions

D
dba
9/23/2023 3:10:00 AM

can we please have the latest exam questions?

P
Prasad
9/29/2023 7:27:00 AM

please help with jn0-649 latest dumps

G
GTI9982
7/31/2023 10:15:00 PM

please i need this dump. thanks

E
Elton Riva
12/12/2023 8:20:00 PM

i have to take the aws certified developer - associate dva-c02 in the next few weeks and i wanted to know if the questions on your website are the same as the official exam.

B
Berihun Desalegn Wonde
7/13/2023 11:00:00 AM

all questions are more important

G
gr
7/2/2023 7:03:00 AM

ques 4 answer should be c ie automatically recover from failure

R
RS
7/27/2023 7:17:00 AM

very very useful page

B
Blessious Phiri
8/12/2023 11:47:00 AM

the exams are giving me an eye opener

A
AD
10/22/2023 9:08:00 AM

3rd so far, need to cover more

M
Matt
11/18/2023 2:32:00 AM

aligns with the pecd notes

S
Sri
10/15/2023 4:38:00 PM

question 4: b securityadmin is the correct answer. https://docs.snowflake.com/en/user-guide/security-access-control-overview#access-control-framework

H
H.T.M. D
6/25/2023 2:55:00 PM

kindly please share dumps

S
Satish
11/6/2023 4:27:00 AM

it is very useful, thank you

C
Chinna
7/30/2023 8:37:00 AM

need safe rte dumps

1
1234
6/30/2023 3:40:00 AM

can you upload the cis - cpg dumps

D
Did
1/12/2024 3:01:00 AM

q6 = 1. download odt application 2. create a configuration file (xml) 3. setup.exe /download to download the installation files 4. setup.exe /configure to deploy the application

J
John
10/12/2023 12:30:00 PM

great material

D
Dinesh
8/1/2023 2:26:00 PM

could you please upload sap c_arsor_2302 questions? it will be very much helpful.

L
LBert
6/19/2023 10:23:00 AM

vraag 20c: rsa veilig voor symmtrische cryptografie? antwoord c is toch fout. rsa is voor asymmetrische cryptogafie??

G
g
12/22/2023 1:51:00 PM

so far good

M
Milos
8/4/2023 9:33:00 AM

question 31 has obviously wrong answers. tls and ssl are used to encrypt data at transit, not at rest.

D
Diksha
9/25/2023 2:32:00 AM

pls provide dump for 1z0-1080-23 planning exams

H
H
7/17/2023 4:28:00 AM

could you please upload the exam?

A
Anonymous
9/14/2023 4:47:00 AM

please upload this

N
Naveena
1/13/2024 9:55:00 AM

good material

W
WildWilly
1/19/2024 10:43:00 AM

lets see if this is good stuff...

L
Lavanya
11/2/2023 1:53:00 AM

useful information

AI Tutor 👋 I’m here to help!