IT 320 Information Technology Systems Planning Midterm
Exam Practice Questions and Detailed Solutions Latest Update
2026/2027 | Project Planning, Technology Management, Verified
Answers - 190 Questions
This midterm exam assesses advanced understanding of IT systems planning, including strategic alignment,
project management methodologies, risk assessment, resource allocation, and technology lifecycle management. It
emphasizes critical thinking, application of frameworks, and decision-making in complex, realistic scenarios. It
contains 190 multiple-choice questions, each with four distractors and a fully worked rationale that explains why
the keyed answer is correct. Questions are organized into clearly labelled sections that mirror the major content
areas of the course. Targeted learning outcomes include: Evaluate and select appropriate IT planning frameworks
for diverse organizational contexts.; Analyze and mitigate risks in IT project portfolios using quantitative and
qualitative methods.; Synthesize business strategy with technology architecture to drive digital transformation.;
Apply project management best practices to optimize scope, schedule, and resources.. Every item has been
reviewed for clinical accuracy, current guidelines, and clarity so that students can study with confidence and
self-correct as they work through the bank. Use it as a high-yield review immediately before the exam, or as a
structured practice tool during the unit - the rationales double as concise teaching notes. The recommended
writing time is 3 hours, with a passing score of 70%. Aligned with Aligns with ABET computing accreditation
standards and AACSB assurance of learning for business-technology programs. standards and reflects the
question style commonly seen on accredited program examinations. Students consistently achieving above the cut
Section 1: General (Questions 1-190)
1 A multinational corporation is developing a 5-year IT strategic plan.
The CIO insists on aligning IT investments with business
capabilities. Which framework is most appropriate to map business
processes to underlying IT infrastructure?
A) TOGAF ADM
B) Balanced Scorecard
C) COBIT 2019
D) ITIL 4
Answer: A
Rationale: TOGAF ADM (Architecture Development Method) is
explicitly designed to create an enterprise architecture that links
business strategy to IT capabilities. The Balanced Scorecard is a
performance measurement tool, COBIT focuses on governance and
control, and ITIL addresses service management, not strategic
architecture mapping.
,2 In a hybrid project environment, the project manager must decide
which activities are best suited for predictive vs. adaptive
approaches. Which criterion most strongly indicates that an adaptive
(Agile) approach should be used for a specific work package?
A) Regulatory requirements mandate detailed documentation and
sequential approval gates.
B) The scope is highly uncertain and expected to evolve based on
user feedback.
C) The project has a fixed budget and timeline with contractual
penalties for changes.
D) The technology is well-understood and the team has delivered
similar packages before.
Answer: B
Rationale: Adaptive methods thrive when requirements are uncertain
and change is expected. Regulatory and fixed-price contexts favor
predictive approaches. Well-understood technology and prior
experience typically suit predictive methods because the path is clear.
3 An IT governance committee is evaluating a portfolio of projects.
They use a scoring model that includes strategic fit, risk, ROI, and
resource availability. Which technique best enables them to select
the optimal mix of projects under resource constraints?
A) Net Present Value (NPV) ranking
B) Earned Value Management (EVM)
C) Multi-objective linear programming
D) Monte Carlo simulation
Answer: C
Rationale: Multi-objective linear programming can optimize project
selection across multiple criteria and resource constraints
simultaneously. NPV ranking only considers financial return, EVM
monitors project performance, and Monte Carlo assesses risk
distribution, not selection optimization.
,4 During a digital transformation, the enterprise architecture team
identifies a critical gap: the current customer relationship
management (CRM) system cannot support real-time analytics
required by the new business model. Which architectural approach
best addresses this gap while minimizing disruption?
A) Big-bang replacement of the CRM with a cloud-native system
B) Implement a data lake to decouple analytics from the operational
CRM
C) Enhance the existing CRM by adding batch reporting capabilities
D) Outsource the analytics function to a third-party provider
Answer: B
Rationale: A data lake decouples analytics from transactional systems,
enabling real-time analytics without replacing the CRM. Big-bang
replacement is risky and disruptive; batch reporting does not meet
real-time needs; outsourcing may not address the architectural gap.
5 A company is adopting DevOps to accelerate delivery. Which
practice is most critical for ensuring security is integrated without
slowing down the pipeline?
A) Performing a full security audit at the end of each release
B) Automating security checks within the CI/CD pipeline
C) Training developers on secure coding after each incident
D) Deploying a web application firewall (WAF) in production
Answer: B
Rationale: Automating security checks in CI/CD embeds security into
development (DevSecOps), enabling rapid detection and remediation.
End-of-release audits are slow; post-incident training is reactive;
WAFs protect only at runtime, not the code itself.
6 An IT project has a CPI of 0.8 and an SPI of 1.2. The project is
currently over budget but ahead of schedule. Which action is most
appropriate to bring the project back on track?
A) Fast-track remaining activities to maintain schedule
, B) Reduce scope to lower costs without affecting critical path
C) Crash the project by adding more resources to critical tasks
D) Re-estimate the budget and request a contract change
Answer: B
Rationale: With CPI < 1 (cost overrun) and SPI > 1 (ahead), the issue
is cost efficiency. Reducing scope can cut costs while schedule slack
allows it. Fast-tracking or crashing would increase costs; re-estimating
may not be justified if scope is controllable.
7 When evaluating a proposed IT investment, which metric best
captures the value created relative to the total cost of ownership
over the system's life?
A) Return on Investment (ROI)
B) Total Cost of Ownership (TCO)
C) Internal Rate of Return (IRR)
D) Payback Period
Answer: A
Rationale: ROI measures net value generated relative to investment
cost, including TCO over the lifecycle. TCO is only a cost measure;
IRR and payback ignore the magnitude of value created relative to
cost.
8 A company is adopting a hybrid cloud strategy. Which factor is
MOST important to ensure data governance and compliance across
on-premises and cloud environments?
A) Implementing a single sign-on (SSO) solution for all users
B) Establishing a consistent data classification and policy framework
C) Migrating all sensitive data to a private cloud
D) Using a cloud access security broker (CASB) for monitoring
Answer: B
Rationale: Consistent data classification and policies ensure
governance across environments. SSO addresses access, not data
governance; migrating all data to private cloud may be impractical;
Exam Practice Questions and Detailed Solutions Latest Update
2026/2027 | Project Planning, Technology Management, Verified
Answers - 190 Questions
This midterm exam assesses advanced understanding of IT systems planning, including strategic alignment,
project management methodologies, risk assessment, resource allocation, and technology lifecycle management. It
emphasizes critical thinking, application of frameworks, and decision-making in complex, realistic scenarios. It
contains 190 multiple-choice questions, each with four distractors and a fully worked rationale that explains why
the keyed answer is correct. Questions are organized into clearly labelled sections that mirror the major content
areas of the course. Targeted learning outcomes include: Evaluate and select appropriate IT planning frameworks
for diverse organizational contexts.; Analyze and mitigate risks in IT project portfolios using quantitative and
qualitative methods.; Synthesize business strategy with technology architecture to drive digital transformation.;
Apply project management best practices to optimize scope, schedule, and resources.. Every item has been
reviewed for clinical accuracy, current guidelines, and clarity so that students can study with confidence and
self-correct as they work through the bank. Use it as a high-yield review immediately before the exam, or as a
structured practice tool during the unit - the rationales double as concise teaching notes. The recommended
writing time is 3 hours, with a passing score of 70%. Aligned with Aligns with ABET computing accreditation
standards and AACSB assurance of learning for business-technology programs. standards and reflects the
question style commonly seen on accredited program examinations. Students consistently achieving above the cut
Section 1: General (Questions 1-190)
1 A multinational corporation is developing a 5-year IT strategic plan.
The CIO insists on aligning IT investments with business
capabilities. Which framework is most appropriate to map business
processes to underlying IT infrastructure?
A) TOGAF ADM
B) Balanced Scorecard
C) COBIT 2019
D) ITIL 4
Answer: A
Rationale: TOGAF ADM (Architecture Development Method) is
explicitly designed to create an enterprise architecture that links
business strategy to IT capabilities. The Balanced Scorecard is a
performance measurement tool, COBIT focuses on governance and
control, and ITIL addresses service management, not strategic
architecture mapping.
,2 In a hybrid project environment, the project manager must decide
which activities are best suited for predictive vs. adaptive
approaches. Which criterion most strongly indicates that an adaptive
(Agile) approach should be used for a specific work package?
A) Regulatory requirements mandate detailed documentation and
sequential approval gates.
B) The scope is highly uncertain and expected to evolve based on
user feedback.
C) The project has a fixed budget and timeline with contractual
penalties for changes.
D) The technology is well-understood and the team has delivered
similar packages before.
Answer: B
Rationale: Adaptive methods thrive when requirements are uncertain
and change is expected. Regulatory and fixed-price contexts favor
predictive approaches. Well-understood technology and prior
experience typically suit predictive methods because the path is clear.
3 An IT governance committee is evaluating a portfolio of projects.
They use a scoring model that includes strategic fit, risk, ROI, and
resource availability. Which technique best enables them to select
the optimal mix of projects under resource constraints?
A) Net Present Value (NPV) ranking
B) Earned Value Management (EVM)
C) Multi-objective linear programming
D) Monte Carlo simulation
Answer: C
Rationale: Multi-objective linear programming can optimize project
selection across multiple criteria and resource constraints
simultaneously. NPV ranking only considers financial return, EVM
monitors project performance, and Monte Carlo assesses risk
distribution, not selection optimization.
,4 During a digital transformation, the enterprise architecture team
identifies a critical gap: the current customer relationship
management (CRM) system cannot support real-time analytics
required by the new business model. Which architectural approach
best addresses this gap while minimizing disruption?
A) Big-bang replacement of the CRM with a cloud-native system
B) Implement a data lake to decouple analytics from the operational
CRM
C) Enhance the existing CRM by adding batch reporting capabilities
D) Outsource the analytics function to a third-party provider
Answer: B
Rationale: A data lake decouples analytics from transactional systems,
enabling real-time analytics without replacing the CRM. Big-bang
replacement is risky and disruptive; batch reporting does not meet
real-time needs; outsourcing may not address the architectural gap.
5 A company is adopting DevOps to accelerate delivery. Which
practice is most critical for ensuring security is integrated without
slowing down the pipeline?
A) Performing a full security audit at the end of each release
B) Automating security checks within the CI/CD pipeline
C) Training developers on secure coding after each incident
D) Deploying a web application firewall (WAF) in production
Answer: B
Rationale: Automating security checks in CI/CD embeds security into
development (DevSecOps), enabling rapid detection and remediation.
End-of-release audits are slow; post-incident training is reactive;
WAFs protect only at runtime, not the code itself.
6 An IT project has a CPI of 0.8 and an SPI of 1.2. The project is
currently over budget but ahead of schedule. Which action is most
appropriate to bring the project back on track?
A) Fast-track remaining activities to maintain schedule
, B) Reduce scope to lower costs without affecting critical path
C) Crash the project by adding more resources to critical tasks
D) Re-estimate the budget and request a contract change
Answer: B
Rationale: With CPI < 1 (cost overrun) and SPI > 1 (ahead), the issue
is cost efficiency. Reducing scope can cut costs while schedule slack
allows it. Fast-tracking or crashing would increase costs; re-estimating
may not be justified if scope is controllable.
7 When evaluating a proposed IT investment, which metric best
captures the value created relative to the total cost of ownership
over the system's life?
A) Return on Investment (ROI)
B) Total Cost of Ownership (TCO)
C) Internal Rate of Return (IRR)
D) Payback Period
Answer: A
Rationale: ROI measures net value generated relative to investment
cost, including TCO over the lifecycle. TCO is only a cost measure;
IRR and payback ignore the magnitude of value created relative to
cost.
8 A company is adopting a hybrid cloud strategy. Which factor is
MOST important to ensure data governance and compliance across
on-premises and cloud environments?
A) Implementing a single sign-on (SSO) solution for all users
B) Establishing a consistent data classification and policy framework
C) Migrating all sensitive data to a private cloud
D) Using a cloud access security broker (CASB) for monitoring
Answer: B
Rationale: Consistent data classification and policies ensure
governance across environments. SSO addresses access, not data
governance; migrating all data to private cloud may be impractical;
