[Full-Version] 2024 New Preparation Guide of ISACA CGEIT Exam [Q228-Q247]

NO.228 Which of the following phases in SDLC transforms the detailed requirements into complete, detailed system design document?

Planning

Design

Development

Initiation

NO.229 Which of the following should be the FIRST step in planning an IT governance implementation?

Obtain necessary business funding.

Define key business performance indicators.

Assign decision-making responsibilities.

Identify business drivers.

NO.230 Risk management strategies are PRIMARILY adopted to:

avoid risks for business and IT assets.

take necessary precautions for claims and losses.

achieve acceptable residual risk levels.

achieve compliance with legal requirements.

NO.231 A regulatory audit of an IT department has identified discrepancies between processes described in the procedures and what is actually done by system administrators.
The discrepancies were caused by recent IT application changes. Which of the following would be the BEST way to prevent the recurrence of similar findings in the future?

Assign the responsibility for periodic revisions and changes to process owners.

Require each IT employee to confirm compliance with IT procedures on an annual basis.

Include the update of documentation within the change management framework.

Establish high-level procedures to minimize process changes.

NO.232 You are the project manager of the NHQ Project for your company. You have completed qualitative and quantitative analysis of your identified project risks and you would now like to find an approach to increase project opportunities and to reduce threats within the project. What project management process would best help you?

Plan risk responses

Create a risk governance approach

Create the project risk register

Monitor and control project risks

NO.233 An IT manager is trying to determine optimal IT service levels. Which of the following should be the PRIMARY consideration?

Internal rate of return

Recovery time objective (RTO)

Cost-benefit analysis

Resource utilization analysis

NO.234 Which of the following is MOST critical for the successful implementation of an IT process?

Process framework

Service delivery process model

Objectives and metrics

IT process assessment

NO.235 An enterprise has made the strategic decision to reduce operating costs for the next year and is taking advantage of cost reductions offered by an external cloud service provider. Which of the following should be the IT steering committee’s PRIMARY concern?

Calculating the cost of the current solution

Changing the IT steering committee charter

Revising the business’s balanced scorecard

Updating the business risk profile

NO.236 Which of the following BEST enables an enterprise to determine how business expectations should be addressed in a governance program?

Business impact analysis (BIA)

Cost-benefit analysis

Enterprise risk analysis

Stakeholder analysis

NO.237 Which of the following quadrant analysis identifies the key issues of working well with other functions, IT value realization over time rather than-just cost, and being business process-focused but solution driven?

Low level role (tactical/utility) and business market leader (risk-taker/high growth)

High level role (strategic/transformational) and business market leader (risktaker/high growth)

High level role (strategic/transformational) and business market followers (riskaverse/mature)

Low level role (tactical/utility) and business market followers (risk-averse/mature)

NO.238 Which of the following will BEST enable an enterprise to convey IT governance direction and objectives?

Skills and competencies

Principles and policies

Corporate culture

Business processes

NO.239 Which of the following categories describes the value added by the process divided by the value of the labor and capital consumed?

Quality

Timeliness

Quantity

Productivity

NO.240 Which of the following outsourcing defines the performance objectives reached by negotiation between the user and the provider of a service, or between an outsourcer and an organization?

Service level Agreement (SLA)

Proposal

Contract

Outsource

NO.241 Which of the following are PRIMARY factors in ensuring the success of an enterprise quality assurance program?

Enterprise risk appetite and tolerance

Risk management and control frameworks

Continuous improvement plans

A process maturity framework and documented procedures

NO.242 Which of the following frameworks describes an enterprise view of all project management activities and how these activities contribute to the success of the organization?

Casualty Actuarial Society framework

COSO ERM

Enterprise project management (EPM)

COBIT

NO.243 Which of the following is the MOST effective way for a CIO to govern business unit deployment of shadow IT applications in a cloud environment?

Implement controls to block the installation of unapproved applications.

Educate the executive team about the risk associated with shadow IT applications.

Provide training to the help desk to identify shadow IT applications.

Review and update the application implementation process.

NO.244 A marketing enterprise is considering procuring customer information to more accurately target customer communications and increase sales. The data has a very high cost to the enterprise. Which of the following would provide the MOST comprehensive view into the potential value to the organization?

Investment services board review

Net present value {NPV) calculation

Risk assessment results

Cost-benefit analysis results

NO.245 An internal audit revealed a widespread perception that the enterprise’s IT governance reporting lacks transparency Which of the following should the CIO do FIRST?

Add stakeholder transparency metrics to the balanced scorecard

Develop a communication and awareness strategy

Meet with key stakeholders to understand their concerns

Adopt an industry-recognized template to standardize reports.

NO.246 The use of new technology in an enterprise will require specific expertise and updated system development processes. There is concern that IT is not properly sourced. Which of the following should be the FIRST course of action?

Perform a risk assessment on potential outsourcing.

Update the enterprise architecture (EA) with the new technology.

Review the IT balanced scorecard for sourcing opportunities.

Assess the gap between current and required staff competencies.

The first course of action when the use of new technology in an enterprise will require specific expertise and updated system development processes is to assess the gap between current and required staff competencies.
This course of action involves identifying the skills, knowledge, and abilities that are needed to implement and manage the new technology, and comparing them with the existing capabilities of the IT staff. By assessing the gap between current and required staff competencies, the enterprise can determine the extent and nature of the sourcing challenge, and plan for appropriate solutions, such as training, hiring, or outsourcing. According to one source1, “A competency gap analysis is a process of identifying the difference between what is required for a person to perform their role effectively and what they actually possess.” The other options are not the first course of action when the use of new technology in an enterprise will require specific expertise and updated system development processes, but rather some of the steps or outcomes that can follow or result from the gap assessment. Performing a risk assessment on potential outsourcing is a step that involves evaluating the benefits and drawbacks of delegating some or all of the IT functions related to the new technology to an external service provider. This step can be done after assessing the gap between current and required staff competencies, and identifying outsourcing as a viable option. Updating the enterprise architecture (EA) with the new technology is a step that involves incorporating the new technology into the holistic view of the enterprise’s IT environment, including its goals, principles, standards, policies, processes, technologies, and systems. This step can be done after assessing the gap between current and required staff competencies, and ensuring that the new technology aligns with the enterprise’s strategic objectives and business requirements.
Reviewing the IT balanced scorecard for sourcing opportunities is an outcome that involves measuring and reporting on the performance and value of IT sourcing activities and outcomes. This outcome can be done after assessing the gap between current and required staff competencies, and implementing the chosen sourcing solution. References := What is Competency Gap Analysis? Definition & Examples

NO.247 An enterprise recently implemented a significant change in its business strategy by moving to a technologically advanced product with considerable impact on the business. What should be the FINAL step in completing the changes to IT processes?

Updating the configuration management database (CMDB)

Empowering the business to embrace the changes

Ensuring a return to stabilized business operations

Updating the enterprise architecture (EA)

[Full-Version] 2024 New Preparation Guide of ISACA CGEIT Exam [Q228-Q247]

Leave a Reply Cancel reply