IT Governance — CISA Practice Questions

Learning

Loading practice session...

Loading certificate…

Ready to learn

Sample questions — IT Governance

1. Which of the following would be included in an IS strategic plan?

A.Brochures for future hardware purchases
B.At least a six-month list of goals from the IT manager
C.Target dates for development projects
D.Plans and directives from senior non-IT managers✓ Correct

Explanation

The IS strategy must support business objectives set by senior managers in other departments.

2. What is the primary purpose of the IT steering committee?

A.Make technical recommendations
B.Identify business issues and objectives✓ Correct
C.Review vendor contracts
D.Specify the IT organizational structure

Explanation

The steering committee ensures IT decisions are aligned with business issues and objectives.

3. Which of the following functions should be separated from the others if segregation of duties cannot be achieved in an automated system?

A.Origination
B.Authorization✓ Correct
C.Correction
D.Reprocessing

Explanation

Authorization must be separated from all other functions to maintain control integrity.

4. The Software Engineering Institute’s Capability Maturity Model (CMM) is best described by which of the following statements?

A.Measurement of resources necessary to ensure a reduction in coding defects
B.Documentation of accomplishments achieved during program development
C.Relationship of application performance to the user’s stated requirement
D.Baseline of the current progress or regression✓ Correct

Explanation

The CMM provides a baseline measurement of process maturity through its five levels.

5. What would be the area of greatest interest during an audit of a business process reengineering (BPR) project?

A.The steering committee approves sufficient controls for fraud detection.
B.Planning methods include Program Evaluation Review Technique (PERT).
C.Risk management planning with alignment of the project to business objectives.✓ Correct
D.Vendor participation including documentation, installation assistance, and training.

Explanation

Risk management and alignment of the project with business objectives are the primary audit concerns.

Practice all 35+ questions in this domain

Start free practice →

Frequently asked questions

How many CISA practice questions are there for IT Governance?↓

AnyCert has 35 CISA practice questions specifically for the IT Governance domain, each with a detailed AI-tutored explanation.

Is IT Governance heavily tested on the CISA exam?↓

IT Governance is one of the core domains in the CISA exam blueprint. Mastering this domain is essential for passing. AnyCert's practice questions cover the full scope of testable topics in this domain.

How should I study the IT Governance domain for CISA?↓

Practice all 35 IT Governance questions in AnyCert, review every explanation for missed answers, and use the AI tutor to clarify any concept. Focus on understanding the reasoning behind each answer, not just memorizing the correct choice.

Sample questions — IT Governance

1. Which of the following would be included in an IS strategic plan?

A.Brochures for future hardware purchases
B.At least a six-month list of goals from the IT manager
C.Target dates for development projects
D.Plans and directives from senior non-IT managers✓ Correct

Explanation

The IS strategy must support business objectives set by senior managers in other departments.

2. What is the primary purpose of the IT steering committee?

A.Make technical recommendations
B.Identify business issues and objectives✓ Correct
C.Review vendor contracts
D.Specify the IT organizational structure

Explanation

The steering committee ensures IT decisions are aligned with business issues and objectives.

3. Which of the following functions should be separated from the others if segregation of duties cannot be achieved in an automated system?

A.Origination
B.Authorization✓ Correct
C.Correction
D.Reprocessing

Explanation

Authorization must be separated from all other functions to maintain control integrity.

4. The Software Engineering Institute’s Capability Maturity Model (CMM) is best described by which of the following statements?

A.Measurement of resources necessary to ensure a reduction in coding defects
B.Documentation of accomplishments achieved during program development
C.Relationship of application performance to the user’s stated requirement
D.Baseline of the current progress or regression✓ Correct

Explanation

The CMM provides a baseline measurement of process maturity through its five levels.

5. What would be the area of greatest interest during an audit of a business process reengineering (BPR) project?

A.The steering committee approves sufficient controls for fraud detection.
B.Planning methods include Program Evaluation Review Technique (PERT).
C.Risk management planning with alignment of the project to business objectives.✓ Correct
D.Vendor participation including documentation, installation assistance, and training.

Explanation

Risk management and alignment of the project with business objectives are the primary audit concerns.

Practice all 35+ questions in this domain

Start free practice →

Frequently asked questions

How many CISA practice questions are there for IT Governance?↓

AnyCert has 35 CISA practice questions specifically for the IT Governance domain, each with a detailed AI-tutored explanation.

Is IT Governance heavily tested on the CISA exam?↓

How should I study the IT Governance domain for CISA?↓