Free Preparation Discussions
MENU
Isaca CGEIT Exam Questions
- Topic 1: GOVERNANCE FRAMEWORK: This section of the exam measures the skills of IT Governance Officers and covers the foundational structure of building IT governance within an organization. It includes how to set objectives, integrate internal and external requirements, and ensure the framework supports strategic planning and enterprise-wide services. Key elements include developing repeatable processes, assigning clear responsibilities, evaluating performance, and maintaining policies that align IT with business goals.
- Topic 2: IT RESOURCE PLANNING: This section of the exam measures the skills of Enterprise IT Managers and focuses on effectively planning and acquiring the right IT resources. Topics include sourcing strategies, assessing the capacity of resources, and planning for optimal use. The goal is to ensure IT resources are obtained, aligned, and available for maximum efficiency and cost-effectiveness across the organization.
- Topic 3: IT RESOURCE OPTIMIZATION: This section of the exam measures the skills of IT Governance Officers and covers how to make the best use of existing IT resources. The focus is on managing the IT asset lifecycle, developing workforce competencies, and overseeing external vendor relationships. It also emphasizes having clear structures, ensuring legal compliance, maintaining ethical standards, and nurturing an organizational culture that supports governance goals.
- Topic 4: TECHNOLOGY GOVERNANCE: This section of the exam measures the skills of Enterprise IT Managers and includes aligning governance strategy with business objectives. It involves strategic planning, engaging stakeholders, and communicating effectively. The domain also highlights the importance of policies, standards, and the integration of enterprise architecture for ensuring consistent and effective governance practices.
- Topic 5: INFORMATION GOVERNANCE: This section of the exam measures the skills of IT Governance Officers and addresses the structure and control over information assets. It includes organizing the flow of information, managing data throughout its lifecycle, assigning ownership, and enforcing classification and handling standards to maintain data integrity, privacy, and compliance across the enterprise.
- Topic 6: IT PERFORMANCE AND OVERSIGHT: This section of the exam measures the skills of Enterprise IT Managers and evaluates how well IT-enabled investments, processes, and services are performing. It emphasizes change management, reporting mechanisms, process improvement, and ensuring quality assurance in the governance structure. The aim is to monitor outcomes and make informed decisions to improve IT value delivery.
- Topic 7: MANAGEMENT OF IT-ENABLED INVESTMENTS: This section of the exam measures the skills of IT Governance Officers and revolves around managing IT investments and measuring their performance. It includes evaluating business cases, tracking investments, and applying performance metrics. The goal is to ensure that IT initiatives deliver measurable value and align with enterprise priorities.
- Topic 8: RISK STRATEGY: This section of the exam measures the skills of Enterprise IT Managers and addresses building risk strategies using standard frameworks. It includes understanding risk appetite and tolerance, developing enterprise-level risk management, and embedding risk thinking in governance planning to prepare for potential IT disruptions.
- Topic 9: RISK MANAGEMENT: This section of the exam measures the skills of IT Governance Officers and focuses on overseeing risks in IT processes and services. It involves identifying threats, evaluating risk exposure, and using risk assessment methods to manage and mitigate IT-related business risks across the organization.
Free Isaca CGEIT Exam Actual Questions
Note: Premium Questions for CGEIT were last updated On Jun. 13, 2026 (see below)
An enterprise-wide strategic plan has been approved by the board of directors. Which of the following would BEST support the planning of IT investments required for the enterprise?
Enterprise architecture (EA) is the best option to support the planning of IT investments required for the enterprise, because EA is a practice and a discipline that describes and documents the current and future state of the enterprise's business processes, applications, data, infrastructure, and security, and how they align with the enterprise's vision, mission, goals, and objectives. EA can help the enterprise to plan IT investments by providing a holistic view of the enterprise's IT architecture, identifying the gaps, needs, and opportunities for improvement, innovation, or transformation, and prioritizing and selecting the IT projects, programs, and portfolios that deliver the most value to the stakeholders and customers.According to ISACA's CGEIT Domain 2: IT Resources1, ''EA is a key enabler for IT investment planning and decision making.EA helps to ensure that IT investments are aligned with business strategy and support business outcomes.'' Furthermore, according to ISACA's article on EA2, ''EA can help to optimize IT spending by reducing complexity, duplication, and waste, and by increasing efficiency, agility, and interoperability.'' Therefore, EA is the best way to support the planning of IT investments required for the enterprise.
Which of the following is the BEST indicator for measuring performance when implementing DevSecOps in an enterprise?
Percentage of automated testsis a key indicator in DevSecOps because it reflects the integration of security and quality into the development lifecycle. Automation is a cornerstone of DevSecOps, enabling continuous integration and deployment with embedded testing and security validation.
While mean time to repair and deployment frequency are valuable,automation directly supports the goals of security, speed, and reliability in DevSecOps.
CGEIT Review Manual: Domain 3 -- Benefits Realization
COBIT 2019: BAI03 (Manage Solutions Identification and Build), DSS05 (Manage Security Services).
An enterprise is planning to upgrade its current enterprise resource planning (ERP) system to remain competitive within the industry. Which of the following would be MOST helpful to facilitate a successful implementation?
Comprehensive and Detailed
The CGEIT Review Manual 8th Edition, in its Strategic Management domain, emphasizes aligning IT initiatives like ERP upgrades with business objectives through thorough planning and requirements analysis. A successful ERP implementation requires understanding business needs to ensure the system supports competitive goals.
Option D: Conducting a comprehensive requirements review is the most helpful. This involves gathering and analyzing business and functional requirements to ensure the new ERP system meets current and future needs (e.g., scalability, integration). For example, a requirements review identifies critical processes (e.g., supply chain management) and ensures the ERP aligns with industry demands. The manual likely references COBIT 2019's BAI02-Managed Requirements Definition, which prioritizes requirements analysis for successful IT projects.
Option A: Documenting the current ERP processes and procedures is useful for baseline understanding but doesn't ensure the new system meets future needs.
Option B: Reviewing the ERP post-implementation report is irrelevant, as it applies to past implementations, not the current upgrade.
Option C: Establishing a change and transition planning process is important but secondary to defining requirements, as change management follows requirements.
Double Verification: The answer aligns with COBIT's BAI02 and the CGEIT domain's focus on strategic project planning. Requirements review is a foundational step in ISACA's project management guidance.
:
ISACA CGEIT Review Manual 8th Edition, Domain 1: Governance of Enterprise IT (focus on strategic IT project planning).
COBIT 2019, BAI02-Managed Requirements Definition.
ISACA Glossary (for definitions of ERP and requirements review), available at https://www.isaca.org/resources/glossary.
Which of the following should be the MOST important consideration when establishing key performance indicators (KPIs) for IT initiatives?
The quality of KPIs is the most important consideration. KPIs must be relevant, accurate, aligned with objectives, and capable of driving meaningful decision-making. Without quality evaluation, even automated or well-owned KPIs may mislead or fail to reflect performance accurately.
Assignment and automation enhance implementation, but they do not ensure the KPI's value or appropriateness for measuring success.
CGEIT Review Manual: Domain 3 -- Benefits Realization and Performance Monitoring
COBIT 2019: MEA01 (Monitor, Evaluate and Assess Performance and Conformance).
An IT strategy committee wants to evaluate how well the IT department supports the business strategy. Which of the following is the BEST method for making this determination?
The BEST method for the IT strategy committee to evaluate how well the IT department supports the business strategy is to use IT balanced scorecard reporting.An IT balanced scorecard (BSC) is a strategic management tool that translates the IT vision and mission intomeasurable objectives, indicators, targets, and initiatives across four perspectives: financial, customer, internal process, and learning and growth1.An IT balanced scorecard reporting is a process of collecting, analyzing, and communicating the performance data and results of the IT department based on the IT BSC framework2. An IT balanced scorecard reporting can help to:
Align the IT objectives and activities with the business strategy and expectations3
Monitor and evaluate the efficiency, effectiveness, and value of the IT department
Identify the strengths, weaknesses, opportunities, and threats of the IT department
Communicate and demonstrate the contribution and impact of the IT department to the business outcomes
Therefore, an IT balanced scorecard reporting is the most suitable method for the IT strategy committee to assess how well the IT department supports the business strategy.
The other options are not as good as option C. While it is useful to conduct a capability maturity assessment, a customer survey analysis, or an IT controls assurance program, these are not comprehensive enough to evaluate how well the IT department supports the business strategy. They are rather focused on specific aspects of the IT department, such as its processes, services, or controls. They do not necessarily cover all four perspectives of the IT BSC framework, which provide a holistic view of the IT performance and alignment with the business strategy.Reference:=
The IT Balanced Scorecard (BSC) Explained - BMC Software1
What Is a Balanced Scorecard (BSC), How Is it Used in Business?2
How to Align Your Business Strategy with Your Technology Strategy ...3
How to Measure Your Strategic Plan's Success - dummies
SWOT Analysis: What It Is and When to Use It - Business News Daily
How to Communicate Strategy Effectively - ClearPoint Strategy
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Stephanie Lee
16 days agoJessica Thompson
21 days agoDavid Adams
1 month agoDavid Walker
2 months agoEdward Reed
2 months agoLisa Carter
2 months agoKimberly Rodriguez
1 month agoDorothy Flores
1 month agoJoshua Thomas
1 month agoSylvie
2 months agoDevorah
3 months agoMignon
3 months agoTherese
3 months agoMelodie
3 months agoWhitley
4 months agoHollis
4 months agoHildegarde
4 months agoReiko
4 months agoDetra
5 months agoStephaine
5 months agoGary
5 months agoLili
5 months agoEmile
6 months agoRebeca
6 months agoNan
6 months agoNu
6 months agoBen
7 months agoAlisha
7 months agoIlda
7 months agoLavonne
7 months agoMarva
8 months agoJusta
8 months agoSophia
8 months agoHoward
8 months agoTien
9 months agoOmer
9 months agoVesta
9 months agoDeandrea
9 months agoLauran
1 year agoJolene
1 year agoChantell
1 year agoJules
1 year agoRodney
1 year agoAlesia
1 year agoCecil
1 year agoRory
2 years agoMalinda
2 years agoAdelle
2 years agoDalene
2 years agoMarlon
2 years agoChanel
2 years agoBernadine
2 years agoShannan
2 years agoAngella
2 years agoSharee
2 years agoNguyet
2 years agoCortney
2 years agoLonny
2 years agoNatalie
2 years agoJulio
2 years agoIsadora
2 years agoDulce
2 years agoMyra
2 years agoHoward
2 years agoLeanora
2 years agoJettie
2 years agoCatarina
2 years ago