IT Governance and Strategy CISA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A retail company's IT department proposes a project to implement an advanced analytics platform. The business case shows a positive return on investment, but the project requires significant upfront investment and will take two years to complete. The company's strategy is to rapidly expand its online presence. Which governance action would BEST ensure this project supports the business strategy?

   • AApprove the project because of the positive ROI, regardless of strategic fit.
   • BReject the project because it is too expensive and takes too long.
   • CEvaluate the project against the strategic objective of expanding online presence and prioritize it accordingly.
   • DDefer the decision until the project team can reduce the implementation time.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of enterprise architecture?

   • ATo manage IT vendor contracts
   • BTo enforce security policies
   • CTo design the physical layout of data centers
   • DTo align IT strategy with business goals
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company's IT department has a history of implementing projects that are technically successful but do not deliver the expected business value. The CEO wants to improve this. Which governance practice would MOST directly address this issue?

   • AOutsource project management to a professional services firm.
   • BAdopt agile methodologies for all IT projects.
   • CIncrease the IT budget to allow for more thorough testing.
   • DRequire a business case with measurable benefits for every IT project and track benefits realization after implementation.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A global company is deciding between a centralized and a decentralized IT organizational structure. The company operates in highly regulated industries where compliance is critical, but also needs to be agile to respond to local market demands. Which structure would BEST balance these competing needs?

   • AA hybrid structure with central governance for standards and compliance, and local IT teams for implementation and support.
   • BA fully centralized structure to ensure uniform compliance.
   • CA fully decentralized structure to maximize local agility.
   • DA structure where IT is outsourced to a global provider.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A financial services firm operates in multiple countries with strict data residency requirements. The IT organization is currently centralized, but local business units complain that IT decisions are slow and not responsive to local needs. Which organizational structure would BEST balance compliance with local responsiveness?

   • AA fully decentralized model where each country's IT operates independently.
   • BA federated model with a central IT governance body and local IT liaisons who adapt solutions to meet regional requirements.
   • CA fully centralized model with no local IT presence.
   • DA matrix structure where IT staff report to both local and global managers, but with no clear escalation path.
   Reveal Solution Discussion Select an answer first