Slide 1: CGEIT
ISACA CGEIT Exam: CGEIT
Demo Edition
CERT MAGIC
1 http://www.certmagic.com
Slide 2: CGEIT
QUESTION: 1 You are the project manager of the NHQ project for your company. You are working with your project team to complete a risk audit. A recent issue that your project team responded to, and management approved, was to increase the project schedule because there was risk surrounding the installation time of a new material. Your logic was that with the expanded schedule there would be time to complete the installation without affecting downstream project activities. What type of risk response is being audited in this scenario?
A. Avoidance B. Mitigation C. Parkinson's Law D. Lag Time
Answer: A
QUESTION: 2 You are the project manager for your organization. You are preparing for the quantitative risk analysis. Mark, a project team member, wants to know why you need to do quantitative risk analysis when you just completed qualitative risk analysis. Which one of the following statements best defines what quantitative risk analysis is?
A. Quantitative risk analysis is the process of prioritizing risks for further analysis or action by assessing and combining their probability of occurrence and impact. B. Quantitative risk analysis is the planning and quantification of risk responses based on probability and impact of each risk event. C. Quantitative risk analysis is the review of the risk events with the high probability and the highes impact on the project objectives. D. Quantitative risk analysis is the process of numerically analyzing the effect of identified risks on overall project objectives.
Answer: D
QUESTION: 3 Your project spans the entire organization. You would like to assess the risk of the project but are worried that some of the managers involved in the project could affect the outcome of any risk identification meeting. Your worry is based on the fact that some employees would not want to publicly identify risk events that could make their supervisors look bad. You would like a method that would allow participants to anonymously identify risk events. What risk identification method could you use?
2
http://www.certmagic.com
Slide 3: CGEIT
A. Delphi technique B. Isolated pilot groups C. SWOT analysis D. Root cause analysis
Answer: A
QUESTION: 4 Fill in the blank with an appropriate phrase. _________models address specifications, requirements, design, verification and validation, and maintenance activities.
Answer: Life cycle
QUESTION: 5 Fill in the blank with an appropriate word. ________is also referred to as corporate governance, and covers issues such as board structures, roles and executive remuneration.
Answer: Conformance
QUESTION: 6 Which of the following is NOT a sub-process of Service Portfolio Management?
A. Service Portfolio Update B. Business Planning Data C. Strategic Planning D. Strategic Service Assessment E. Service Strategy Definition
Answer: B
QUESTION: 7 Mary is the business analyst for your organization. She asks you what the purpose of the assess capability gaps task is. Which of the following is the best response to give Mary?
3
http://www.certmagic.com
Slide 4: CGEIT
A. It identifies the causal factors that are contributing to an effect the solution will solve. B. It identifies new capabilities required by the organization to meet the business need. C. It describes the ends that the organization wants to improve. D. It identifies the skill gaps in the existing resources.
Answer: B
QUESTION: 8 Which of the following are the roles of a CEO in the Resource management framework? Each correct answer represents a complete solution. Choose all that apply.
A. Organizing and facilitating IT strategic implementations B. Establishment of business priorities & allocation of resources for IT performance C. Overseeing the aggregate IT funding D. Capitalization on knowledge & information
Answer: A,B,D
QUESTION: 9 Fill in the blank with an appropriate phrase. _________is the study of how the variation (uncertainty) in the output of a mathematical model can be apportioned, qualitatively or quantitatively, to different sources of variation in the input of a model.
Answer: Sensitivity analysis
QUESTION: 10 Which of the following is a process that occurs due to mergers, outsourcing or changing business needs?
A. Voluntary exit B. Plant closing C. Involuntary exit D. Outplacement
Answer: C
4
http://www.certmagic.com
Slide 5: CGEIT
QUESTION: 11 Fill in the blank with the appropriate word. An ___________ is a resource, process, product, computing infrastructure, and so forth that an organization has determined must be protected.
Answer: asset
QUESTION: 12 You work as a project manager for TYU project. You are planning for risk mitigation. You need to identify the risks that will need a more in-depth analysis. Which of the following activities will help you in this?
A. Estimate activity duration B. Quantitative analysis C. Qualitative analysis D. Risk identification Answer: C
QUESTION: 13 An organization supports both programs and projects for various industries. What is a portfolio?
A. A portfolio describes all of the monies that are invested in the organization. B. A portfolio is the total amount of funds that have been invested in programs, projects, and operations. C. A portfolio describes any project or program within one industry or application area. D. A portfolio describes the organization of related projects, programs, and operations.
Answer: D
QUESTION: 14 Your organization mainly focuses on the production of bicycles for selling it around the world. In addition to this, the organization also produces scooters. Management wants to restrict its line of production to bicycles. Therefore, it decides to sell the scooter production department to another competitor. Which of the following terms best describes the sale of the scooter production department to your competitor?
A. Corporate restructure
5
http://www.certmagic.com
Slide 6: CGEIT
B. Divestiture C. Rightsizing D. Outsourcing
Answer: B
QUESTION: 15 You are the business analyst for your organization and are preparing to conduct stakeholder analysis. As part of this process you realize that you'll need several inputs. Which one of the following is NOT an input you'll use for the conduct stakeholder analysis task?
A. Organizational process assets B. Enterprise architecture C. Business need D. Enterprise environmental factors
Answer: D
QUESTION: 16 Which of the following is the process of comparing the business processes and performance metrics including cost, cycle time, productivity, or quality?
A. Agreement B. COBIT C. Service Improvement Plan D. Benchmarking
Answer: D
QUESTION: 17 You are the project manager of a large project that will last four years. In this project, you would like to model the risk based on its distribution, impact, and other factors. There are three modeling techniques that a project manager can use to include both event-oriented and projectoriented analysis. Which modeling technique does NOT provide event-oriented and projectoriented analysis for identified risks?
A. Modeling and simulation B. Expected monetary value
6
http://www.certmagic.com
Slide 7: CGEIT
C. Sensitivity analysis D. Jo-Hari Window
Answer: D QUESTION: 18 Which of the following processes is described in the statement below? "This is the process of numerically analyzing the effect of identified risks on overall project objectives."
A. Identify Risks B. Perform Qualitative Risk Analysis C. Perform Quantitative Risk Analysis D. Monitor and Control Risks Answer: C
QUESTION: 19 Benchmarking is a continuous process that can be time consuming to docorrectly. Which of the following guidelines for performing benchmarking identifies the critical processes and creates measurement techniques to grade the process? A. Research B. Adapt C. Plan D. Improve
Answer: C
QUESTION: 20 Jenny is the project manager for the NBT projects. She is working with the project team and several subject matter experts to perform the quantitative risk analysis process. During this process she and the project team uncover several risks events that were not previously identified. What should Jenny do with these risk events?
A. The events should be determined if they need to be accepted or responded to. B. The events should be entered into the risk register. C. The events should continue on with quantitative risk analysis. D. The events should be entered into qualitative risk analysis. Answer: B
7 http://www.certmagic.com
