Wgu C954 Pre-Assessment: Information
Technology Management (Pas7) |
Questions And Answers | 2026/27 Updated
1. Which IT governance framework is specifically designed to align IT strategy with
business goals and is widely used for enterprise governance of information and
technology?
A. COBIT
B. ITIL
C. ISO 27001
D. TOGAF
Answer: A. COBIT
Rationale: COBIT (Control Objectives for Information and Related Technologies) is a
comprehensive framework for IT governance and management, focusing on aligning IT
with business objectives. ITIL is primarily for IT service management, ISO 27001 for
information security, and TOGAF for enterprise architecture.
2. In project management, which document formally authorizes a project and provides
the project manager with authority to apply organizational resources?
A. Project charter
B. Business case
C. Work breakdown structure
D. Project management plan
Answer: A. Project charter
Rationale: The project charter is the document that formally authorizes the existence of a
project and gives the project manager authority. A business case justifies the project, the
WBS breaks down work, and the project management plan describes how the project will
be executed.
Page 1 of 75
,3. Which cloud service model provides the highest level of control over the computing
environment, including operating systems and applications?
A. Infrastructure as a Service (IaaS)
B. Platform as a Service (PaaS)
C. Software as a Service (SaaS)
D. Function as a Service (FaaS)
Answer: A. Infrastructure as a Service (IaaS)
Rationale: IaaS offers virtualized computing resources over the internet, giving users
control over operating systems, storage, and deployed applications. PaaS provides a
platform for development, SaaS delivers software applications, and FaaS provides
serverless compute.
4. Which type of data analytics focuses on predicting future outcomes using statistical
models and machine learning?
A. Descriptive analytics
B. Diagnostic analytics
C. Predictive analytics
D. Prescriptive analytics
Answer: C. Predictive analytics
Rationale: Predictive analytics uses historical data and statistical modeling to forecast
future events. Descriptive analytics summarizes past data, diagnostic analytics explains
why something happened, and prescriptive analytics recommends actions.
Page 2 of 75
,5. In the context of IT security, what does the principle of least privilege entail?
A. Granting users only the minimum access necessary to perform their job functions
B. Ensuring all users have equal access to all systems
C. Rotating user passwords every 30 days
D. Implementing multi-factor authentication for all users
Answer: A. Granting users only the minimum access necessary to perform their job
functions
Rationale: The principle of least privilege restricts user access rights to only what is
necessary for their role, reducing risk. Other options describe different security practices
but not the least privilege principle.
6. Which IT management practice involves systematically identifying, assessing, and
mitigating risks that could impact IT assets and operations?
A. IT risk management
B. IT service management
C. IT asset management
D. IT change management
Answer: A. IT risk management
Rationale: IT risk management is the process of identifying, evaluating, and addressing
risks to IT infrastructure and data. IT service management focuses on delivering IT
services, asset management tracks hardware/software, and change management controls
changes.
Page 3 of 75
, 7. What is the primary purpose of a disaster recovery plan (DRP) in IT management?
A. To restore critical IT systems and data after a disruptive event
B. To prevent all possible disasters from occurring
C. To document employee roles during normal operations
D. To provide daily backups of all data
Answer: A. To restore critical IT systems and data after a disruptive event
Rationale: A DRP outlines procedures to recover and restore critical IT infrastructure and
data following a disaster. It does not prevent disasters, document normal roles, or solely
handle backups.
8. In IT service management (ITSM), which ITIL practice focuses on managing the
lifecycle of incidents to restore normal service operation as quickly as possible?
A. Incident management
B. Problem management
C. Change enablement
D. Service request management
Answer: A. Incident management
Rationale: Incident management aims to restore normal service operation quickly and
minimize adverse impact. Problem management addresses root causes, change enablement
manages changes, and service request management handles user requests.
Page 4 of 75
Technology Management (Pas7) |
Questions And Answers | 2026/27 Updated
1. Which IT governance framework is specifically designed to align IT strategy with
business goals and is widely used for enterprise governance of information and
technology?
A. COBIT
B. ITIL
C. ISO 27001
D. TOGAF
Answer: A. COBIT
Rationale: COBIT (Control Objectives for Information and Related Technologies) is a
comprehensive framework for IT governance and management, focusing on aligning IT
with business objectives. ITIL is primarily for IT service management, ISO 27001 for
information security, and TOGAF for enterprise architecture.
2. In project management, which document formally authorizes a project and provides
the project manager with authority to apply organizational resources?
A. Project charter
B. Business case
C. Work breakdown structure
D. Project management plan
Answer: A. Project charter
Rationale: The project charter is the document that formally authorizes the existence of a
project and gives the project manager authority. A business case justifies the project, the
WBS breaks down work, and the project management plan describes how the project will
be executed.
Page 1 of 75
,3. Which cloud service model provides the highest level of control over the computing
environment, including operating systems and applications?
A. Infrastructure as a Service (IaaS)
B. Platform as a Service (PaaS)
C. Software as a Service (SaaS)
D. Function as a Service (FaaS)
Answer: A. Infrastructure as a Service (IaaS)
Rationale: IaaS offers virtualized computing resources over the internet, giving users
control over operating systems, storage, and deployed applications. PaaS provides a
platform for development, SaaS delivers software applications, and FaaS provides
serverless compute.
4. Which type of data analytics focuses on predicting future outcomes using statistical
models and machine learning?
A. Descriptive analytics
B. Diagnostic analytics
C. Predictive analytics
D. Prescriptive analytics
Answer: C. Predictive analytics
Rationale: Predictive analytics uses historical data and statistical modeling to forecast
future events. Descriptive analytics summarizes past data, diagnostic analytics explains
why something happened, and prescriptive analytics recommends actions.
Page 2 of 75
,5. In the context of IT security, what does the principle of least privilege entail?
A. Granting users only the minimum access necessary to perform their job functions
B. Ensuring all users have equal access to all systems
C. Rotating user passwords every 30 days
D. Implementing multi-factor authentication for all users
Answer: A. Granting users only the minimum access necessary to perform their job
functions
Rationale: The principle of least privilege restricts user access rights to only what is
necessary for their role, reducing risk. Other options describe different security practices
but not the least privilege principle.
6. Which IT management practice involves systematically identifying, assessing, and
mitigating risks that could impact IT assets and operations?
A. IT risk management
B. IT service management
C. IT asset management
D. IT change management
Answer: A. IT risk management
Rationale: IT risk management is the process of identifying, evaluating, and addressing
risks to IT infrastructure and data. IT service management focuses on delivering IT
services, asset management tracks hardware/software, and change management controls
changes.
Page 3 of 75
, 7. What is the primary purpose of a disaster recovery plan (DRP) in IT management?
A. To restore critical IT systems and data after a disruptive event
B. To prevent all possible disasters from occurring
C. To document employee roles during normal operations
D. To provide daily backups of all data
Answer: A. To restore critical IT systems and data after a disruptive event
Rationale: A DRP outlines procedures to recover and restore critical IT infrastructure and
data following a disaster. It does not prevent disasters, document normal roles, or solely
handle backups.
8. In IT service management (ITSM), which ITIL practice focuses on managing the
lifecycle of incidents to restore normal service operation as quickly as possible?
A. Incident management
B. Problem management
C. Change enablement
D. Service request management
Answer: A. Incident management
Rationale: Incident management aims to restore normal service operation quickly and
minimize adverse impact. Problem management addresses root causes, change enablement
manages changes, and service request management handles user requests.
Page 4 of 75
