IT 320 Information Technology Systems Planning
Comprehensive Final Exam Practice Questions and Detailed
Solutions Latest Update 2026/2027 | IT Strategy, Systems
Planning, Verified Answers - 180 Questions
This comprehensive final exam assesses advanced knowledge of IT systems planning, including strategic
alignment, enterprise architecture, risk management, emerging technologies, and governance. It requires
synthesis of concepts, application to complex scenarios, and critical evaluation of planning frameworks. It
contains 180 multiple-choice questions, each with four distractors and a fully worked rationale that explains why
the keyed answer is correct. Questions are organized into clearly labelled sections that mirror the major content
areas of the course. Targeted learning outcomes include: Analyze and design IT strategies aligned with
organizational goals.; Evaluate and select appropriate enterprise architecture frameworks.; Assess and mitigate
risks in IT systems planning.; Integrate emerging technologies into long-term IT roadmaps.. Every item has been
reviewed for clinical accuracy, current guidelines, and clarity so that students can study with confidence and
self-correct as they work through the bank. Use it as a high-yield review immediately before the exam, or as a
structured practice tool during the unit - the rationales double as concise teaching notes. The recommended
writing time is 3 hours, with a passing score of 75%. Aligned with This exam adheres to the rigorous academic
standards of leading US research universities, ensuring depth, critical thinking, and practical applicability.
standards and reflects the question style commonly seen on accredited program examinations. Students
consistently achieving above the cut score on this bank have historically gone on to earn A+ on the corresponding
Section 1: General (Questions 1-180)
1 A multinational corporation is aligning its IT strategy with business
goals. Which approach best ensures that IT investments directly
contribute to competitive advantage?
A) Adopt a defensive IT strategy focused on cost reduction and
operational efficiency.
B) Use the Balanced Scorecard to translate business objectives into
IT initiatives.
C) Outsource all non-core IT functions to reduce capital
expenditures.
D) Prioritize IT projects based solely on ROI calculations.
Answer: B
Rationale: The Balanced Scorecard maps business goals to IT
initiatives, ensuring alignment and strategic contribution. Defensive
strategies (A) may not drive competitive advantage. Outsourcing (C)
and ROI-only (D) focus on cost, not strategic alignment.
, 2 In the context of enterprise architecture, what is the primary purpose
of the 'Architecture Governance' process within TOGAF?
A) To manage the architecture repository and configuration items.
B) To ensure architecture artifacts are compliant with legal
regulations.
C) To control the process of architecture development and ensure
conformance to standards.
D) To evaluate the financial viability of architecture projects.
Answer: C
Rationale: TOGAF's Architecture Governance ensures that the
architecture development process is controlled, and that outputs
conform to standards and best practices. It is not primarily about
repository management (A), legal compliance (B), or financial
evaluation (D).
3 A healthcare organization is planning to implement a new electronic
health record (EHR) system. Which risk management approach is
most appropriate to address potential workflow disruptions?
A) Perform a quantitative risk analysis to calculate expected
monetary loss.
B) Develop a comprehensive change management plan including
training and communication.
C) Defer the project to avoid the risk of disruption.
D) Purchase cyber liability insurance to transfer the risk.
Answer: B
Rationale: Workflow disruptions are operational risks best mitigated
through change management, training, and communication.
Quantitative analysis (A) may not address root causes. Deferring (C)
is not proactive. Insurance (D) transfers financial risk but not
operational disruption.
4 An organization is adopting a multi-cloud strategy. Which
architectural principle is essential to avoid vendor lock-in?
,A) Use proprietary APIs of each cloud provider for maximum
performance.
B) Standardize on a single cloud provider for all workloads.
C) Implement a containerization platform like Kubernetes with
cloud-agnostic configurations.
D) Negotiate long-term contracts with each cloud provider for
discounts.
Answer: C
Rationale: Containerization with cloud-agnostic configurations allows
portability across providers, reducing lock-in. Proprietary APIs (A)
increase lock-in. Single provider (B) is the opposite. Long-term
contracts (D) may reduce flexibility.
5 When evaluating the feasibility of an IT project, which technique is
best suited to assess the project's alignment with strategic business
objectives?
A) Net Present Value (NPV) analysis
B) SWOT analysis
C) Business Process Modeling (BPM)
D) Balanced Scorecard
Answer: B
Rationale: SWOT analysis helps evaluate strengths, weaknesses,
opportunities, and threats in the context of strategic objectives. NPV
(A) is financial. BPM (C) models processes. Balanced Scorecard (D)
is a performance measurement framework, not feasibility.
6 In IT portfolio management, what does the 'risk-return profile' of a
project primarily help an organization to determine?
A) The project's compliance with regulatory standards.
B) The optimal mix of projects to balance innovation and stability.
C) The technical feasibility of the project.
D) The project's impact on the organization's culture.
, Answer: B
Rationale: Risk-return profiles help balance high-risk/high-reward
projects with low-risk/maintenance projects, optimizing the portfolio.
Compliance (A), feasibility (C), and culture (D) are not the primary
focus.
7 A company is planning to implement a data lake for advanced
analytics. Which of the following is a critical success factor?
A) Ensuring all data is cleansed and transformed before loading.
B) Applying a schema-on-write approach to enforce data quality.
C) Establishing robust data governance to manage metadata and
access controls.
D) Using a single vendor solution to minimize integration
complexity.
Answer: C
Rationale: Data lakes store raw data, so governance is critical to
manage metadata, quality, and access. Schema-on-write (B) is not
typical; schema-on-read is used. Pre-cleaning (A) defeats the purpose.
Single vendor (D) may not be optimal.
8 Which of the following is a key challenge when integrating AI into
IT systems planning?
A) Lack of sufficient training data for machine learning models.
B) Ensuring explainability and transparency of AI decisions.
C) High cost of cloud computing resources.
D) Incompatibility with legacy systems.
Answer: B
Rationale: Explainability and transparency are critical for trust and
compliance, especially in regulated industries. Data (A) is a common
issue but not the key challenge in planning. Cost (C) and legacy (D)
are operational, not strategic.
Comprehensive Final Exam Practice Questions and Detailed
Solutions Latest Update 2026/2027 | IT Strategy, Systems
Planning, Verified Answers - 180 Questions
This comprehensive final exam assesses advanced knowledge of IT systems planning, including strategic
alignment, enterprise architecture, risk management, emerging technologies, and governance. It requires
synthesis of concepts, application to complex scenarios, and critical evaluation of planning frameworks. It
contains 180 multiple-choice questions, each with four distractors and a fully worked rationale that explains why
the keyed answer is correct. Questions are organized into clearly labelled sections that mirror the major content
areas of the course. Targeted learning outcomes include: Analyze and design IT strategies aligned with
organizational goals.; Evaluate and select appropriate enterprise architecture frameworks.; Assess and mitigate
risks in IT systems planning.; Integrate emerging technologies into long-term IT roadmaps.. Every item has been
reviewed for clinical accuracy, current guidelines, and clarity so that students can study with confidence and
self-correct as they work through the bank. Use it as a high-yield review immediately before the exam, or as a
structured practice tool during the unit - the rationales double as concise teaching notes. The recommended
writing time is 3 hours, with a passing score of 75%. Aligned with This exam adheres to the rigorous academic
standards of leading US research universities, ensuring depth, critical thinking, and practical applicability.
standards and reflects the question style commonly seen on accredited program examinations. Students
consistently achieving above the cut score on this bank have historically gone on to earn A+ on the corresponding
Section 1: General (Questions 1-180)
1 A multinational corporation is aligning its IT strategy with business
goals. Which approach best ensures that IT investments directly
contribute to competitive advantage?
A) Adopt a defensive IT strategy focused on cost reduction and
operational efficiency.
B) Use the Balanced Scorecard to translate business objectives into
IT initiatives.
C) Outsource all non-core IT functions to reduce capital
expenditures.
D) Prioritize IT projects based solely on ROI calculations.
Answer: B
Rationale: The Balanced Scorecard maps business goals to IT
initiatives, ensuring alignment and strategic contribution. Defensive
strategies (A) may not drive competitive advantage. Outsourcing (C)
and ROI-only (D) focus on cost, not strategic alignment.
, 2 In the context of enterprise architecture, what is the primary purpose
of the 'Architecture Governance' process within TOGAF?
A) To manage the architecture repository and configuration items.
B) To ensure architecture artifacts are compliant with legal
regulations.
C) To control the process of architecture development and ensure
conformance to standards.
D) To evaluate the financial viability of architecture projects.
Answer: C
Rationale: TOGAF's Architecture Governance ensures that the
architecture development process is controlled, and that outputs
conform to standards and best practices. It is not primarily about
repository management (A), legal compliance (B), or financial
evaluation (D).
3 A healthcare organization is planning to implement a new electronic
health record (EHR) system. Which risk management approach is
most appropriate to address potential workflow disruptions?
A) Perform a quantitative risk analysis to calculate expected
monetary loss.
B) Develop a comprehensive change management plan including
training and communication.
C) Defer the project to avoid the risk of disruption.
D) Purchase cyber liability insurance to transfer the risk.
Answer: B
Rationale: Workflow disruptions are operational risks best mitigated
through change management, training, and communication.
Quantitative analysis (A) may not address root causes. Deferring (C)
is not proactive. Insurance (D) transfers financial risk but not
operational disruption.
4 An organization is adopting a multi-cloud strategy. Which
architectural principle is essential to avoid vendor lock-in?
,A) Use proprietary APIs of each cloud provider for maximum
performance.
B) Standardize on a single cloud provider for all workloads.
C) Implement a containerization platform like Kubernetes with
cloud-agnostic configurations.
D) Negotiate long-term contracts with each cloud provider for
discounts.
Answer: C
Rationale: Containerization with cloud-agnostic configurations allows
portability across providers, reducing lock-in. Proprietary APIs (A)
increase lock-in. Single provider (B) is the opposite. Long-term
contracts (D) may reduce flexibility.
5 When evaluating the feasibility of an IT project, which technique is
best suited to assess the project's alignment with strategic business
objectives?
A) Net Present Value (NPV) analysis
B) SWOT analysis
C) Business Process Modeling (BPM)
D) Balanced Scorecard
Answer: B
Rationale: SWOT analysis helps evaluate strengths, weaknesses,
opportunities, and threats in the context of strategic objectives. NPV
(A) is financial. BPM (C) models processes. Balanced Scorecard (D)
is a performance measurement framework, not feasibility.
6 In IT portfolio management, what does the 'risk-return profile' of a
project primarily help an organization to determine?
A) The project's compliance with regulatory standards.
B) The optimal mix of projects to balance innovation and stability.
C) The technical feasibility of the project.
D) The project's impact on the organization's culture.
, Answer: B
Rationale: Risk-return profiles help balance high-risk/high-reward
projects with low-risk/maintenance projects, optimizing the portfolio.
Compliance (A), feasibility (C), and culture (D) are not the primary
focus.
7 A company is planning to implement a data lake for advanced
analytics. Which of the following is a critical success factor?
A) Ensuring all data is cleansed and transformed before loading.
B) Applying a schema-on-write approach to enforce data quality.
C) Establishing robust data governance to manage metadata and
access controls.
D) Using a single vendor solution to minimize integration
complexity.
Answer: C
Rationale: Data lakes store raw data, so governance is critical to
manage metadata, quality, and access. Schema-on-write (B) is not
typical; schema-on-read is used. Pre-cleaning (A) defeats the purpose.
Single vendor (D) may not be optimal.
8 Which of the following is a key challenge when integrating AI into
IT systems planning?
A) Lack of sufficient training data for machine learning models.
B) Ensuring explainability and transparency of AI decisions.
C) High cost of cloud computing resources.
D) Incompatibility with legacy systems.
Answer: B
Rationale: Explainability and transparency are critical for trust and
compliance, especially in regulated industries. Data (A) is a common
issue but not the key challenge in planning. Cost (C) and legacy (D)
are operational, not strategic.
