Study Guide
1. IT governance is best defined as:
A. The day-to-day technical operation of IT systems
B. A framework of leadership, structures, and processes that ensures IT sustains and extends an
organization's strategy and objectives
C. A single department's responsibility with no board oversight
D. A one-time project to select software vendors
2. Which of the following is a primary objective of effective IT governance?
A. Maximizing IT spending regardless of business value
B. Ensuring IT investments are aligned with business goals and deliver measurable value
C. Eliminating all business input into IT decisions
D. Centralizing all decisions with the CIO alone, without stakeholder input
3. COBIT is best described as:
A. A programming language for enterprise systems
B. A framework for IT governance and management that helps align IT goals with business objectives
C. A specific database management system
D. A network security protocol
4. Which governance mechanism most directly holds IT accountable to the board of directors?
A. An IT steering committee that reports on strategy, risk, and performance
B. The help desk ticketing system
C. The software development team's daily standup meeting
D. An individual programmer's code review
5. Decision rights in IT governance refer to:
A. Who has the authority to make key IT decisions (e.g., infrastructure investment, architecture
standards) across the organization
B. Only the CIO's personal preferences
C. The order in which support tickets are resolved
D. The physical location of data centers
6. An IT steering committee typically includes:
A. Only IT technical staff
B. Representatives from both business units and IT leadership to guide strategy and prioritize
investments
C. Only external vendors
D. Only entry-level employees
, 7. Which of the following best describes 'IT value delivery' as a governance focus area?
A. Ensuring IT initiatives produce tangible business benefits relative to their cost
B. Maximizing hardware purchases regardless of use
C. Reducing all IT staff to cut costs
D. Ignoring return on investment calculations
8. Risk management, as an IT governance domain, primarily focuses on:
A. Identifying, assessing, and mitigating risks related to IT assets, data, and operations
B. Eliminating all risk entirely, which is achievable in practice
C. Only physical security of buildings
D. Marketing IT services to customers
9. Performance measurement in IT governance is important because it:
A. Has no relationship to strategic goals
B. Provides metrics to track whether IT is meeting agreed objectives and delivering value
C. Is only relevant to financial audits
D. Should be avoided to reduce administrative burden
10. Which statement best reflects the relationship between corporate governance and IT governance?
A. IT governance is a subset of corporate governance, focused specifically on IT-related decisions and
accountability
B. They are entirely unrelated concepts
C. IT governance supersedes corporate governance
D. Corporate governance has no impact on IT decision-making
11. Strategic alignment between IT and business refers to:
A. IT operating completely independently from business strategy
B. Ensuring IT strategy, investments, and capabilities support and enable overall business objectives
C. Business units dictating every technical specification without IT input
D. A one-time planning exercise with no ongoing review
12. Which of the following is a key benefit of aligning IT strategy with business strategy?
A. Reduced business agility
B. Improved ability to leverage technology for competitive advantage and efficient achievement of
business goals
C. Increased redundancy of unrelated systems
D. Elimination of the need for a business case for IT projects
13. A SWOT analysis used in IT strategic planning helps an organization evaluate:
A. Strengths, weaknesses, opportunities, and threats relevant to technology strategy and its business
context
B. Only software licensing costs
C. Employee satisfaction scores exclusively
D. Network bandwidth utilization only