CPA Isc Quiz: Align It Strategy With Business Objectives

What this quiz covers

This quiz focuses on Align It Strategy With Business Objectives, giving you a quick way to practice the rules, question types, and explanations that matter most for CPA Isc.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

Question 1

1. Design database schemas for enterprise applications.
2. Develop encryption standards for data transmission.
3. Manage software development projects using agile methodology.
4. Govern and manage enterprise IT to support business objectives. (correct answer)

Explanation: COBIT (Control Objectives for Information Technology) is an IT governance framework that provides principles, practices, and tools to help organizations govern and manage their information and technology. Answer D is correct. COBIT addresses governance alignment with business goals, not database design (A), encryption (B), or agile project management (C).

Question 2

1. The framework of policies, processes, and structures that ensures IT supports and enables the achievement of business objectives. (correct answer)
2. The day-to-day administration of IT infrastructure by the IT operations team.
3. The selection of hardware and software vendors for enterprise systems.
4. The process of auditing IT security configurations annually.

Explanation: IT governance encompasses the leadership, organizational structures, and processes that ensure IT sustains and extends the organization's strategy and objectives. Answer A is correct. Day-to-day IT operations (B), vendor selection (C), and security auditing (D) are operational activities that fall within the broader governance framework but do not define governance itself.

Question 3

1. A cross-functional body of senior business and IT leaders that provides oversight and strategic direction for IT investments and priorities. (correct answer)
2. A group of IT technicians responsible for resolving system outages.
3. An external auditing committee that reviews IT security annually.
4. A project team that manages the implementation of specific IT systems.

Explanation: An IT steering committee brings together business and IT leadership to align IT investments with strategic priorities, approve major projects, and oversee IT governance. Answer A is correct. IT steering committees are strategic, not operational (B), internal rather than external (C), and not focused on single implementations (D).

Question 4

1. IT risk is entirely separate from business risk and is managed independently.
2. Business risk is a subset of IT risk in most modern organizations.
3. IT risks can directly threaten the achievement of business objectives and must be managed as part of enterprise risk management. (correct answer)
4. IT risk is relevant only to companies in technology-intensive industries.

Explanation: In most organizations, IT is deeply embedded in business operations, meaning IT risks (system failures, cyber incidents, data breaches) can directly affect the achievement of business objectives. Answer C is correct. Managing IT risk in isolation (A) or treating business risk as a subset of IT risk (B) misrepresents the relationship. IT risk is relevant across all industries (D).

Question 5

1. Replacing the CIO with a more technically skilled executive.
2. Requiring IT to submit proposals in a standard technical format.
3. Increasing the IT department's budget for proposal development.
4. Establishing a business case framework that translates IT proposals into business value terms. (correct answer)

Explanation: When IT struggles to communicate value to business leaders, the solution is a structured business case process that frames IT investments in terms of business outcomes, ROI, and strategic fit. Answer D is correct. Replacing leadership (A), changing proposal formats (B), or increasing budget (C) do not address the fundamental communication gap.

Question 6

1. Delivering IT projects on schedule and within budget.
2. Managing IT incidents and service requests efficiently.
3. Implementing security patches across all systems promptly.
4. Evaluating stakeholder needs and setting the direction for IT to achieve enterprise objectives. (correct answer)

Explanation: COBIT distinguishes governance (Evaluate, Direct, Monitor) from management (Plan, Build, Run, Monitor). Evaluating stakeholder needs and setting direction is a governance activity. Answer D is correct. Delivering projects (A), managing incidents (B), and patching systems (C) are management and operational activities.

Question 7

1. Ensuring that IT investments produce measurable business benefits that justify their costs. (correct answer)
2. Delivering IT infrastructure upgrades within the approved IT capital budget.
3. Completing IT development projects without defects.
4. Maximizing the number of IT services available to end users.

Explanation: IT value delivery means IT investments translate into tangible business benefits - revenue growth, cost savings, risk reduction, or competitive advantage - that justify the costs. Answer A is correct. Budget adherence (B), defect-free delivery (C), and maximizing service availability (D) are operational metrics, not measures of value delivery.

Question 8

1. Faster resolution of IT security incidents.
2. Strong IT-business alignment by ensuring IT strategy receives executive and board-level oversight. (correct answer)
3. More efficient IT procurement processes.
4. Greater IT department autonomy from business unit demands.

Explanation: CIO reporting to the CEO and board engagement with IT strategy are hallmarks of mature IT governance, ensuring IT priorities are understood and endorsed at the highest levels of the organization. Answer B is correct. Incident resolution speed (A), procurement efficiency (C), and IT autonomy (D) are not the primary outcomes of this governance structure.

Question 9

1. IT investments may fail to deliver business value, wasting resources and creating competitive disadvantage. (correct answer)
2. IT staff may not receive adequate technical training.
3. The organization may face higher software licensing costs.
4. IT projects may experience minor schedule delays.

Explanation: Misalignment's most significant risk is strategic: IT spending produces little or no business value, wasting capital and potentially leaving the organization behind competitors. Answer A is correct. Training gaps (B), licensing costs (C), and schedule delays (D) are operational issues that, while important, are not the primary strategic risk of IT-business misalignment.

Question 10

1. The IT department maintains a large inventory of spare hardware components.
2. IT systems are hosted exclusively on-premises to maintain control.
3. The IT organization can rapidly adapt systems and capabilities to support new business opportunities or respond to market changes. (correct answer)
4. IT staff members are cross-trained to perform any technical function.

Explanation: IT agility is the capacity to quickly reconfigure IT capabilities in response to business needs or market dynamics, enabling competitive responsiveness. Answer C is correct. Spare hardware inventories (A), on-premises control (B), and cross-trained staff (D) may support operations but do not define IT agility in the strategic sense.

Question 11

1. Approving the annual IT budget.
2. Reviewing KPIs and performance metrics to assess whether IT is achieving its objectives. (correct answer)
3. Implementing new security controls after a breach.
4. Selecting the technology platform for a new ERP system.

Explanation: The Monitor governance objective in COBIT involves assessing IT performance against defined goals and objectives through KPIs, audits, and benchmarking. Answer B is correct. Budget approval (A) is a direction activity. Post-breach control implementation (C) is a management response. Technology platform selection (D) is a management planning activity.

Question 12

1. The budget allocated to the IT department.
2. The IT department's preferred technology platforms.
3. The organization's overall business strategy and objectives. (correct answer)
4. Industry benchmarks for technology spending.

Explanation: IT strategy must be aligned with and derived from the organization's overall business strategy. Technology investments and priorities should enable and support business objectives. Answer C is correct. Budget allocation (A), IT department technology preferences (B), and industry benchmarks (D) are inputs or constraints but do not drive IT strategy - business objectives do.

Question 13

1. All IT decisions must be made exclusively by the IT department.
2. Technology governance is separate from business governance.
3. A governance system for enterprise IT should meet stakeholder needs. (correct answer)
4. IT controls must be implemented only in high-risk environments.

Explanation: COBIT 2019's first principle states that a governance system should meet stakeholder needs and produce value from IT investments. Answer C is correct. COBIT explicitly rejects separating IT governance from enterprise governance (B) and does not restrict IT decision-making to IT staff (A) or controls to high-risk environments (D).

Question 14

1. Evaluating, prioritizing, and managing a collection of IT projects and investments as a whole to maximize value and strategic alignment. (correct answer)
2. Managing the organization's investment portfolio of stocks and bonds.
3. Tracking software licenses across the organization.
4. Reviewing vendor contracts for IT services on an annual basis.

Explanation: IT portfolio management treats the collection of IT initiatives as a portfolio, balancing risk and return across projects and ensuring collective alignment with business strategy. Answer A is correct. Financial investment portfolios (B), software asset management (C), and vendor contract review (D) are distinct activities.

Question 15

1. Number of servers replaced during the year.
2. Total IT headcount.
3. Percentage of the IT budget spent on infrastructure.
4. Business value delivered by IT initiatives relative to their cost. (correct answer)

Explanation: Alignment is best measured by the value IT creates for the business relative to its cost - a metric that directly ties IT activity to business outcomes. Answer D is correct. Server counts (A), headcount (B), and budget allocation percentages (C) are operational metrics that do not measure strategic alignment.

Question 16

1. Assessing current and future business objectives, regulatory requirements, and the existing IT landscape to identify gaps and opportunities. (correct answer)
2. Selecting the technology vendors and platforms to be used in the transformation.
3. Calculating the total cost of ownership for the proposed IT systems.
4. Recruiting IT staff with expertise in the new technology platforms.

Explanation: Effective IT strategy begins with a thorough understanding of business needs, regulatory obligations, and the current state of IT - identifying the gap between where the organization is and where it needs to be. Answer A is correct. Vendor selection (B), cost calculation (C), and staffing (D) are subsequent steps that follow strategic assessment.

Question 17

1. Migrating all email systems to a cloud provider.
2. Implementing a new help desk ticketing system.
3. Investing in data warehousing, analytics platforms, and data governance capabilities. (correct answer)
4. Upgrading network bandwidth across all office locations.

Explanation: Becoming data-driven requires foundational investments in data storage, analytics tools, and governance structures that enable data-informed decision-making. Answer C is correct. Email migration (A), help desk systems (B), and network upgrades (D) are infrastructure activities not specifically linked to the data-driven objective.

Question 18

1. The IT department independently selects and implements enterprise software without consulting business units.
2. Business unit leaders are actively involved in IT project prioritization, and IT metrics are tied to business outcomes. (correct answer)
3. The IT budget is allocated based on prior-year spending with no reference to current business priorities.
4. IT projects are evaluated solely on technical merit by the IT department.

Explanation: Strong alignment exists when business leaders participate in IT governance and IT performance is measured by its contribution to business outcomes. Answer B is correct. Independent IT decision-making (A), backward-looking budgeting (C), and purely technical evaluation (D) are indicators of misalignment.

Question 19

1. Continuously improve IT processes and controls by iteratively planning, executing, measuring, and adjusting. (correct answer)
2. Develop software applications using an agile sprint methodology.
3. Manage IT vendor contracts through four sequential phases.
4. Audit financial systems on a quarterly basis.

Explanation: The PDCA cycle is a continuous improvement model used in IT governance (and frameworks like ISO 27001) to systematically manage and improve processes. Answer A is correct. It is not an agile development methodology (B), a vendor contract framework (C), or an auditing schedule (D).

Question 20

1. Ensure that IT infrastructure is replaced on a predetermined schedule.
2. Track the number of IT support tickets submitted by employees.
3. Monitor IT vendor performance against contractual service levels.
4. Capture, evaluate, and prioritize IT service and project requests from business units to ensure alignment with strategic priorities. (correct answer)

Explanation: IT demand management is the process by which requests for IT services and projects are collected, assessed, and prioritized based on strategic value and available capacity. Answer D is correct. Hardware refresh schedules (A), ticket tracking (B), and vendor SLA monitoring (C) are operational processes unrelated to demand management.