CPA Isc Quiz: Align It Strategy With Business Objectives

What this quiz covers

This quiz focuses on Align It Strategy With Business Objectives, giving you a quick way to practice the rules, question types, and explanations that matter most for CPA Isc.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

Question 1

1. It is developed exclusively by the CIO and IT leadership without input from business units.
2. It is derived from business strategy, sets measurable IT objectives, and is reviewed and updated regularly. (correct answer)
3. It focuses solely on cost reduction and efficiency improvements.
4. It is a fixed 10-year document that is not revised until the next planning cycle.

Explanation: An effective IT strategic plan is business-driven, contains measurable objectives, and is a living document reviewed regularly to adapt to changes. Answer B is correct. Excluding business unit input (A), focusing only on cost (C), or using a rigid long-term plan that is never revised (D) are characteristics of ineffective IT planning.

Question 2

1. Optimized
2. Managed
3. Defined
4. Initial (correct answer)

Explanation: IT-business alignment maturity models (such as the Luftman model) classify organizations from Level 1 (Initial/Ad Hoc) through Level 5 (Optimized). An organization with no formal planning or alignment mechanisms is at Level 1 - Initial. Answer D is correct. Optimized (A) is the highest level. Managed (B) and Defined (C) are intermediate levels requiring more mature processes.

Question 3

1. Reducing the IT department's operating budget to fund market expansion.
2. Evaluating and implementing systems capable of supporting multi-currency, multilingual, and multi-regulatory requirements. (correct answer)
3. Replacing existing hardware with newer models.
4. Outsourcing all IT functions to reduce costs.

Explanation: International expansion requires IT systems that handle diverse currencies, languages, and regulatory environments. Proactively evaluating and implementing such systems directly aligns IT capabilities with the business objective. Answer B is correct. Budget cuts (A), hardware upgrades (C), and outsourcing (D) do not specifically address the international expansion objective.

Question 4

1. The framework of policies, processes, and structures that ensures IT supports and enables the achievement of business objectives. (correct answer)
2. The day-to-day administration of IT infrastructure by the IT operations team.
3. The selection of hardware and software vendors for enterprise systems.
4. The process of auditing IT security configurations annually.

Explanation: IT governance encompasses the leadership, organizational structures, and processes that ensure IT sustains and extends the organization's strategy and objectives. Answer A is correct. Day-to-day IT operations (B), vendor selection (C), and security auditing (D) are operational activities that fall within the broader governance framework but do not define governance itself.

Question 5

1. A cross-functional body of senior business and IT leaders that provides oversight and strategic direction for IT investments and priorities. (correct answer)
2. A group of IT technicians responsible for resolving system outages.
3. An external auditing committee that reviews IT security annually.
4. A project team that manages the implementation of specific IT systems.

Explanation: An IT steering committee brings together business and IT leadership to align IT investments with strategic priorities, approve major projects, and oversee IT governance. Answer A is correct. IT steering committees are strategic, not operational (B), internal rather than external (C), and not focused on single implementations (D).

Question 6

1. Replacing the CIO with a more technically skilled executive.
2. Requiring IT to submit proposals in a standard technical format.
3. Increasing the IT department's budget for proposal development.
4. Establishing a business case framework that translates IT proposals into business value terms. (correct answer)

Explanation: When IT struggles to communicate value to business leaders, the solution is a structured business case process that frames IT investments in terms of business outcomes, ROI, and strategic fit. Answer D is correct. Replacing leadership (A), changing proposal formats (B), or increasing budget (C) do not address the fundamental communication gap.

Question 7

1. Evaluating, prioritizing, and managing a collection of IT projects and investments as a whole to maximize value and strategic alignment. (correct answer)
2. Managing the organization's investment portfolio of stocks and bonds.
3. Tracking software licenses across the organization.
4. Reviewing vendor contracts for IT services on an annual basis.

Explanation: IT portfolio management treats the collection of IT initiatives as a portfolio, balancing risk and return across projects and ensuring collective alignment with business strategy. Answer A is correct. Financial investment portfolios (B), software asset management (C), and vendor contract review (D) are distinct activities.

Question 8

1. Inadequate project management methodology within IT.
2. A misalignment between IT strategy and business objectives. (correct answer)
3. Insufficient budget allocation to the IT department.
4. Poor communication within the IT department.

Explanation: When IT projects are technically successful but fail to address business needs, the root cause is misalignment between IT priorities and organizational objectives. Answer B is correct. The projects are delivered on time and on budget, ruling out project management (A) or budget issues (C). Internal IT communication (D) is not the issue when the gap is between IT outputs and business needs.

Question 9

1. Delivering IT projects on schedule and within budget.
2. Managing IT incidents and service requests efficiently.
3. Implementing security patches across all systems promptly.
4. Evaluating stakeholder needs and setting the direction for IT to achieve enterprise objectives. (correct answer)

Explanation: COBIT distinguishes governance (Evaluate, Direct, Monitor) from management (Plan, Build, Run, Monitor). Evaluating stakeholder needs and setting direction is a governance activity. Answer D is correct. Delivering projects (A), managing incidents (B), and patching systems (C) are management and operational activities.

Question 10

1. Ensuring that IT investments produce measurable business benefits that justify their costs. (correct answer)
2. Delivering IT infrastructure upgrades within the approved IT capital budget.
3. Completing IT development projects without defects.
4. Maximizing the number of IT services available to end users.

Explanation: IT value delivery means IT investments translate into tangible business benefits - revenue growth, cost savings, risk reduction, or competitive advantage - that justify the costs. Answer A is correct. Budget adherence (B), defect-free delivery (C), and maximizing service availability (D) are operational metrics, not measures of value delivery.

Question 11

1. Faster resolution of IT security incidents.
2. Strong IT-business alignment by ensuring IT strategy receives executive and board-level oversight. (correct answer)
3. More efficient IT procurement processes.
4. Greater IT department autonomy from business unit demands.

Explanation: CIO reporting to the CEO and board engagement with IT strategy are hallmarks of mature IT governance, ensuring IT priorities are understood and endorsed at the highest levels of the organization. Answer B is correct. Incident resolution speed (A), procurement efficiency (C), and IT autonomy (D) are not the primary outcomes of this governance structure.

Question 12

1. IT investments may fail to deliver business value, wasting resources and creating competitive disadvantage. (correct answer)
2. IT staff may not receive adequate technical training.
3. The organization may face higher software licensing costs.
4. IT projects may experience minor schedule delays.

Explanation: Misalignment's most significant risk is strategic: IT spending produces little or no business value, wasting capital and potentially leaving the organization behind competitors. Answer A is correct. Training gaps (B), licensing costs (C), and schedule delays (D) are operational issues that, while important, are not the primary strategic risk of IT-business misalignment.

Question 13

1. Migrating all email systems to a cloud provider.
2. Implementing a new help desk ticketing system.
3. Investing in data warehousing, analytics platforms, and data governance capabilities. (correct answer)
4. Upgrading network bandwidth across all office locations.

Explanation: Becoming data-driven requires foundational investments in data storage, analytics tools, and governance structures that enable data-informed decision-making. Answer C is correct. Email migration (A), help desk systems (B), and network upgrades (D) are infrastructure activities not specifically linked to the data-driven objective.

Question 14

1. The IT department independently selects and implements enterprise software without consulting business units.
2. Business unit leaders are actively involved in IT project prioritization, and IT metrics are tied to business outcomes. (correct answer)
3. The IT budget is allocated based on prior-year spending with no reference to current business priorities.
4. IT projects are evaluated solely on technical merit by the IT department.

Explanation: Strong alignment exists when business leaders participate in IT governance and IT performance is measured by its contribution to business outcomes. Answer B is correct. Independent IT decision-making (A), backward-looking budgeting (C), and purely technical evaluation (D) are indicators of misalignment.

Question 15

1. Continuously improve IT processes and controls by iteratively planning, executing, measuring, and adjusting. (correct answer)
2. Develop software applications using an agile sprint methodology.
3. Manage IT vendor contracts through four sequential phases.
4. Audit financial systems on a quarterly basis.

Explanation: The PDCA cycle is a continuous improvement model used in IT governance (and frameworks like ISO 27001) to systematically manage and improve processes. Answer A is correct. It is not an agile development methodology (B), a vendor contract framework (C), or an auditing schedule (D).

Question 16

1. Assessing current and future business objectives, regulatory requirements, and the existing IT landscape to identify gaps and opportunities. (correct answer)
2. Selecting the technology vendors and platforms to be used in the transformation.
3. Calculating the total cost of ownership for the proposed IT systems.
4. Recruiting IT staff with expertise in the new technology platforms.

Explanation: Effective IT strategy begins with a thorough understanding of business needs, regulatory obligations, and the current state of IT - identifying the gap between where the organization is and where it needs to be. Answer A is correct. Vendor selection (B), cost calculation (C), and staffing (D) are subsequent steps that follow strategic assessment.

Question 17

1. Design database schemas for enterprise applications.
2. Develop encryption standards for data transmission.
3. Manage software development projects using agile methodology.
4. Govern and manage enterprise IT to support business objectives. (correct answer)

Explanation: COBIT (Control Objectives for Information Technology) is an IT governance framework that provides principles, practices, and tools to help organizations govern and manage their information and technology. Answer D is correct. COBIT addresses governance alignment with business goals, not database design (A), encryption (B), or agile project management (C).

Question 18

1. IT risk is entirely separate from business risk and is managed independently.
2. Business risk is a subset of IT risk in most modern organizations.
3. IT risks can directly threaten the achievement of business objectives and must be managed as part of enterprise risk management. (correct answer)
4. IT risk is relevant only to companies in technology-intensive industries.

Explanation: In most organizations, IT is deeply embedded in business operations, meaning IT risks (system failures, cyber incidents, data breaches) can directly affect the achievement of business objectives. Answer C is correct. Managing IT risk in isolation (A) or treating business risk as a subset of IT risk (B) misrepresents the relationship. IT risk is relevant across all industries (D).

Question 19

1. The IT department maintains a large inventory of spare hardware components.
2. IT systems are hosted exclusively on-premises to maintain control.
3. The IT organization can rapidly adapt systems and capabilities to support new business opportunities or respond to market changes. (correct answer)
4. IT staff members are cross-trained to perform any technical function.

Explanation: IT agility is the capacity to quickly reconfigure IT capabilities in response to business needs or market dynamics, enabling competitive responsiveness. Answer C is correct. Spare hardware inventories (A), on-premises control (B), and cross-trained staff (D) may support operations but do not define IT agility in the strategic sense.

Question 20

1. Approving the annual IT budget.
2. Reviewing KPIs and performance metrics to assess whether IT is achieving its objectives. (correct answer)
3. Implementing new security controls after a breach.
4. Selecting the technology platform for a new ERP system.

Explanation: The Monitor governance objective in COBIT involves assessing IT performance against defined goals and objectives through KPIs, audits, and benchmarking. Answer B is correct. Budget approval (A) is a direction activity. Post-breach control implementation (C) is a management response. Technology platform selection (D) is a management planning activity.