CGEIT Certified in the Governance of Enterprise IT Free Practice Questions and Answers

A strategic initiative is approved, but the required architecture and security specialists are already committed to other work. What should governance do?

• A. Reassess capacity and sequence or resource the initiative before committing delivery dates
• B. Ignore the constraints and keep the original timeline
• C. Remove all quality reviews
• D. Ask the vendor to approve the business case

Two proposals have similar expected value, but one has materially higher risk and depends on scarce skills. What should the investment committee consider?

• A. Compare risk-adjusted value, strategic fit, dependencies, and capacity
• B. Choose the proposal with the larger slide deck
• C. Approve both without capacity review
• D. Select only by project duration

Management needs early warning that a third-party service risk is increasing. Which measure is most useful?

• A. A key risk indicator with a defined threshold and escalation path
• B. A benefits target measured only at project close
• C. A count of completed training sessions
• D. A list of all vendors without status

Which practice best supports effective board oversight of IT governance?

• A. Receive concise reporting on strategy alignment, value, risk, performance, and significant issues
• B. Review every technical change request
• C. Delegate all accountability to the CIO
• D. Avoid escalation of material risks

An assurance review finds that a critical IT control is not operating consistently. What should management do next?

• A. Assign an accountable owner, assess exposure, and track corrective action to closure
• B. Close the finding because a policy exists
• C. Remove the control from the inventory
• D. Wait for the next annual review without interim action