Study Guide for Western Governors University Students | IT
Governance Frameworks, Systems Development Life Cycle
(SDLC), Enterprise Systems, Data Management, Cybersecurity
Fundamentals, Project Management, Business-IT Alignment, and
Practice Questions with Detailed Rationales | Updated 2026
Assessment Prep
QUESTION 1
Which of the following BEST describes the primary purpose of IT governance within an
organization?
A) To manage daily IT operational tasks and troubleshooting
B) To ensure IT investments support business objectives and deliver value
C) To develop software applications for end users
D) To maintain hardware infrastructure and network security
Correct Answer: B
Rationale: IT governance focuses on aligning IT strategy with business goals, ensuring
that technology investments create value, manage risks appropriately, and support
organizational objectives. While operations, development, and infrastructure are
important, governance operates at the strategic level to ensure IT serves the business
mission.
QUESTION 2
In the Systems Development Life Cycle (SDLC), during which phase are user
requirements formally documented and approved?
A) Planning
B) Analysis
C) Design
D) Implementation
Correct Answer: B
Rationale: The Analysis phase of SDLC is where business analysts gather, document,
and validate functional and non-functional requirements from stakeholders. This
creates the foundation for system design. Planning focuses on feasibility and scope;
Design translates requirements into technical specifications; Implementation involves
building and deploying the system.
QUESTION 3
Which project management methodology emphasizes iterative development, customer
collaboration, and responding to change over following a fixed plan?
A) Waterfall
,B) PRINCE2
C) Agile
D) Critical Path Method
Correct Answer: C
Rationale: Agile methodology is founded on the Agile Manifesto values, prioritizing
individuals and interactions, working software, customer collaboration, and responding
to change. Waterfall is sequential and rigid; PRINCE2 is a structured process-based
method; Critical Path Method is a scheduling technique, not a full methodology.
QUESTION 4
What is the PRIMARY benefit of implementing an Enterprise Resource Planning (ERP)
system?
A) Reducing the need for employee training
B) Integrating core business processes into a unified system
C) Eliminating all manual data entry tasks
D) Guaranteeing immediate return on investment
Correct Answer: B
Rationale: ERP systems integrate functions like finance, HR, supply chain, and
customer relations into a single coherent system, enabling data consistency, improved
reporting, and streamlined processes across departments. While ERPs can reduce
manual tasks, they don't eliminate all data entry, require significant training, and ROI is
not immediate or guaranteed.
QUESTION 5
Which ITIL practice focuses on restoring normal service operation as quickly as possible
after an incident?
A) Change Enablement
B) Incident Management
C) Problem Management
D) Service Level Management
Correct Answer: B
Rationale: Incident Management in ITIL is specifically designed to restore normal
service operation rapidly and minimize business impact. Problem Management
addresses root causes to prevent recurrence; Change Enablement manages
modifications to services; Service Level Management ensures agreed service levels are
met.
QUESTION 6
When evaluating cloud service models, which model provides the customer with the
,MOST control over the operating system, applications, and data?
A) Software as a Service (SaaS)
B) Platform as a Service (PaaS)
C) Infrastructure as a Service (IaaS)
D) Function as a Service (FaaS)
Correct Answer: C
Rationale: IaaS provides virtualized computing resources over the internet, giving
customers control over operating systems, storage, deployed applications, and limited
network components. PaaS abstracts the infrastructure layer; SaaS delivers complete
applications; FaaS is event-driven serverless computing with minimal infrastructure
management.
QUESTION 7
Which of the following is a KEY characteristic of a Decision Support System (DSS)?
A) Automates routine transactional processing
B) Provides structured reports for operational staff
C) Supports semi-structured or unstructured decision-making with analytical models
D) Replaces human judgment in strategic planning
Correct Answer: C
Rationale: DSS tools help managers analyze complex, semi-structured problems using
data analytics, modeling, and simulation. They augment—not replace—human
judgment. Transaction processing is handled by TPS; structured operational reports
come from MIS; DSS specifically supports analytical decision-making.
QUESTION 8
In business process management, what is the PRIMARY purpose of process modeling?
A) To replace existing workflows with automated scripts
B) To visually represent processes for analysis, communication, and improvement
C) To eliminate the need for stakeholder interviews
D) To generate code for system implementation automatically
Correct Answer: B
Rationale: Process modeling creates visual diagrams (e.g., BPMN) that document
current or future-state processes, enabling teams to analyze inefficiencies,
communicate workflows, and identify improvement opportunities. It supports but
doesn't replace stakeholder engagement or automatically generate code.
QUESTION 9
Which risk response strategy involves transferring the impact of a threat to a third party?
A) Avoidance
, B) Mitigation
C) Acceptance
D) Transference
Correct Answer: D
Rationale: Transference shifts risk consequences to another party, commonly through
insurance, outsourcing, or contracts. Avoidance eliminates the risk source; mitigation
reduces likelihood or impact; acceptance acknowledges risk without active
intervention.
QUESTION 10
What is the PRIMARY objective of a Business Impact Analysis (BIA) in business
continuity planning?
A) To identify potential cybersecurity threats
B) To determine the financial cost of IT infrastructure
C) To prioritize critical business functions and their recovery time objectives
D) To select vendors for disaster recovery services
Correct Answer: C
Rationale: A BIA identifies and evaluates the effects of disruptions on business
operations, establishing recovery priorities, Maximum Tolerable Downtime (MTD), and
Recovery Time Objectives (RTO). Threat identification is part of risk assessment; vendor
selection occurs later in planning.
QUESTION 11
Which database type is BEST suited for storing highly interconnected data such as
social networks or recommendation engines?
A) Relational database
B) Hierarchical database
C) Graph database
D) Flat-file database
Correct Answer: C
Rationale: Graph databases use nodes, edges, and properties to represent and store
data, making them ideal for querying relationships and connections. Relational
databases use tables and SQL; hierarchical databases use parent-child structures; flat-
files lack relationship modeling capabilities.
QUESTION 12
In change management, what is the PRIMARY purpose of a Change Advisory Board
(CAB)?
A) To implement all approved changes immediately