Free EXIN EPI Certified Information Technology Manager Practice Questions

Sample Practice Questions

Try these 10 sample questions from the EXIN EPI Certified Information Technology Manager practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1What should guide an organization's decisions about using IT in its strategy?

   1. A.The organization's business needs and missionCorrect answer: A
   2. B.The supplier's release roadmap as the primary business driver
   3. C.The IT team's preferred tools regardless of business priorities
   4. D.The lowest technology cost regardless of business outcomes

   Explanation: California’s State Administrative Manual describes an information management strategy as a "comprehensive plan for using information technology to address its business needs". IT decisions should therefore support the organization’s needs and mission.

   Reference: State Administrative Manual: Information Management Strategy — 4900-1, Agency Information Management Strategy

2. 2An IT team expects to need 12 cloud engineers next year and projects that 8 qualified engineers will be available. What staffing gap does this comparison identify?

   1. A.4 engineersCorrect answer: A
   2. B.8 engineers
   3. C.12 engineers
   4. D.20 engineers

   Explanation: OPM describes workforce planning as "identifying and addressing any gaps between the workforce of today and the human capital needs of tomorrow". Here, the projected need of 12 minus the projected supply of 8 leaves a gap of 4 engineers.

   Reference: Planning a Strategic Approach — Conducting Workforce Planning

3. 3Which characteristic is associated with agile development methods?

   1. A.Incremental releases and responsiveness to changing requirementsCorrect answer: A
   2. B.A single release with no intermediate feedback
   3. C.A fixed sequence that excludes customer collaboration
   4. D.A complete prohibition on changing product requirements

   Explanation: NASA describes agile development as emphasizing "responsiveness to change, and incremental product development and releases". These methods allow teams to adapt as knowledge grows.

   Reference: NASA Information Technology Program and Project Management Requirements — Appendix A, Agile Development Methodology

4. 4What does a software development life cycle (SDLC) provide?

   1. A.A methodology for designing, creating and maintaining softwareCorrect answer: A
   2. B.A method that ends when software is deployed to production
   3. C.A process limited to operating software already in production
   4. D.A procurement process for purchasing software licenses

   Explanation: NIST describes an SDLC as "a formal or informal methodology for designing, creating, and maintaining software". Different models can organize those activities differently.

   Reference: Secure Software Development Framework Version 1.1 — Section 1, Introduction

5. 5A service repeatedly fails and individual incidents have been restored. What should problem management investigate to reduce recurrence?

   1. A.The underlying cause of the related incidentsCorrect answer: A
   2. B.The time needed to close the latest individual incident
   3. C.The incident's current priority without examining its cause
   4. D.The number of users restored by the latest workaround

   Explanation: PeopleCert describes problem management as reducing incident likelihood and impact by "identifying actual and potential causes of incidents". Investigating the shared cause addresses the recurring problem.

   Reference: PeopleCert DevOps Leadership Syllabus — Glossary, Problem Management

6. 6What should enterprise risk management guidance make clear to operational managers?

   1. A.Risk appetite, tolerance and boundaries for decisionsCorrect answer: A
   2. B.The list of assets without acceptable risk levels
   3. C.Prior incident totals without guidance on current tolerances
   4. D.The risk owners' names without decision boundaries

   Explanation: NIST says senior leaders should express "guidance regarding risk appetite and risk tolerance" with measurable boundaries where possible. This helps managers make consistent risk decisions.

   Reference: Integrating Cybersecurity and Enterprise Risk Management — Section 3.1.2, Risk Management Strategy

7. 7What does NIST Cybersecurity Framework 2.0 organize at its highest level?

   1. A.Cybersecurity outcomes grouped into six core functionsCorrect answer: A
   2. B.Security and privacy controls grouped into control families
   3. C.An individual organization's current and target profiles
   4. D.Individual risks listed with their owners and responses

   Explanation: NIST states that the CSF Core Functions "organize cybersecurity outcomes at their highest level". They provide a high-level structure for managing cybersecurity risk.

   Reference: The NIST Cybersecurity Framework 2.0 — Section 2, Introduction to the CSF Core

8. 8Which sequence describes the general lifecycle of organizational records?

   1. A.Creation or receipt, maintenance and use, then final dispositionCorrect answer: A
   2. B.Disposition, creation, then maintenance and use
   3. C.Maintenance and use, disposition, then creation
   4. D.Creation followed by immediate disposition with no use

   Explanation: NARA describes "three stages: creation, maintenance and use, and final disposition". Managing records covers their use and eventual disposition, not only creation.

   Reference: Records Management Overview Participant Guide — Module 2, Introduction and Objectives

9. 9What is the primary purpose of a proof of concept when exploring a new technical approach?

   1. A.Experimentally demonstrate whether the concept is feasibleCorrect answer: A
   2. B.Confirm that the finished production system meets every acceptance criterion
   3. C.Approve the final operating budget for the completed service
   4. D.Validate all production recovery procedures for the deployed service

   Explanation: NASA describes a proof of concept as "An analytical and experimental demonstration of hardware/software concepts". It may or may not be incorporated into later development.

   Reference: NASA Information Technology Program and Project Management Requirements — Appendix A, Proof of Concept

10. 10Which sequence reflects the process approach described by ISO for continual quality improvement?

    1. A.Plan, do, check, actCorrect answer: A
    2. B.Do, plan, check, act
    3. C.Plan, check, do, act
    4. D.Plan, do, act, check

    Explanation: ISO describes the approach as "planning what to do, doing what was planned, checking the outcomes, and then acting on those findings". The cycle supports improvement.

    Reference: Quality management: The path to continual improvement — What is a quality management system?