Free CGEIT Risk and Resource Optimization Questions and Answers

Question 1

An enterprise's board of directors can BEST manage enterprise risk by:

Accepted Answer

requiring the establishment of an enterprise risk management (ERM) framework.

Answer

Explanation:
Establishing an enterprise risk management (ERM) framework enables the board of directors to systematically identify, assess, manage, and monitor risks across the organization. This approach helps in aligning risk management practices with strategic objectives and ensures comprehensive oversight of risks affecting the enterprise.

Question 2

Which of the following is the BEST outcome measure to determine the effectiveness of IT risk management processes?

Accepted Answer

Time lag between when IT risk is identified and the enterprise's response

Answer

Explanation:
This measure is crucial because it assesses the efficiency and effectiveness of the IT risk management process in addressing identified risks promptly. A shorter time lag indicates that risks are being promptly identified, assessed, and responded to, minimizing potential negative impacts on the organization. It reflects how well the organization can detect and react to risks before they escalate into issues that could affect business operations.

Question 3

Which of the following resource categories includes skill sets, certifications, productivity, and morale?

Accepted Answer

People

Answer

Explanation:
The resource category that includes skill sets, certifications, productivity, and morale is "People." This category refers to the human resources within an organization, including their skills, qualifications, certifications, productivity levels, and morale. Effective management and development of people are crucial for achieving organizational objectives and maintaining competitive advantage.

Question 4

In which of the following editions of COBIT was "Management Guidelines" added?

Accepted Answer

The second edition

Answer

Explanation:
Management Guidelines were added in the second edition of COBIT (Control Objectives for Information and Related Technologies). This addition enhanced the framework by providing detailed guidance and management practices for implementing the control objectives outlined in COBIT.

Question 5

Which of the following examples are included in the general controls embedded in IT processes and services? Each correct answer represents a complete solution.

Accepted Answer

Change management

Answer

Explanation:
General controls embedded in IT processes and services typically include:
- Change management: This involves processes and procedures for managing changes to IT systems, applications, and infrastructure. Change management ensures that changes are documented, assessed for impact, tested, and implemented in a controlled manner to maintain the integrity and reliability of IT services.
- Systems development: This encompasses the processes and methodologies used for developing, maintaining, and enhancing IT systems and applications. It includes activities such as requirements gathering, design, coding, testing, deployment, and maintenance of software systems.

CGEIT - Certified in the Governance of Enterprise IT Practice Test

CGEIT - Certified in the Governance of Enterprise IT Practice Test

Free CGEIT Risk and Resource Optimization Questions and Answers