I85PREP
⌘ K
ICAB CL Management Information study materials
ICAB CL Management Information study resources

ICAB CL Management Information practice questions

One question at a time. Build your ICAB CL Management Information understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Information Systems and Business Processes

In a business process model, which element represents a decision point where the process path splits according to a condition?

  1. A message flow
  2. An exclusive gateway Correct answer.
  3. A start event
  4. A data store

Explanation

A gateway controls how the sequence flow branches or merges within a process. The exclusive gateway evaluates conditions and routes each token down exactly one outgoing path, so it is the standard construct for a decision point.

Question 2Information Systems and Business Processes

Which type of information system is primarily designed to support day-to-day operational transactions such as order entry and payroll?

  1. Transaction processing system Correct answer.
  2. Decision support system
  3. Expert system
  4. Executive information system

Explanation

Transaction processing systems capture and record routine operational events at the base of the information pyramid. They emphasise high volumes, accuracy and speed rather than analysis or strategic summarisation.

Question 3Information Systems and Business Processes

What is the main purpose of a data flow diagram in systems analysis?

  1. To document the pay grades of systems staff
  2. To show how data moves between processes, stores and external entities Correct answer.
  3. To define the physical server layout of a data centre
  4. To schedule project tasks and milestones

Explanation

A data flow diagram models the logical movement of data through a system, showing processes, data stores, external entities and the flows between them. It deliberately omits timing and physical implementation detail.

Question 4Information Systems and Business Processes

Which characteristic best distinguishes a business process from a single business activity?

  1. It is always performed by one individual without handoffs
  2. It requires no defined inputs or outputs
  3. It is a set of linked activities that together deliver an outcome of value Correct answer.
  4. It is executed only once during the life of the organisation

Explanation

A business process is an end-to-end sequence of coordinated activities with defined inputs, outputs and a customer-facing outcome. A single activity is one step within that larger chain.

Question 5Information Systems and Business Processes

In a relational database, what does a primary key do?

  1. Uniquely identifies each record in a table Correct answer.
  2. Encrypts sensitive fields automatically
  3. Stores the largest numeric value in a column
  4. Links two tables by duplicating every row

Explanation

A primary key is a column or combination of columns whose value is unique and non-null for every row. This guarantees that each record can be identified and referenced unambiguously.

Question 6Information Systems and Business Processes

Which of the following is an example of an unstructured information source used by a business?

  1. Free-text customer complaint emails Correct answer.
  2. A standard purchase order form
  3. A fixed-format sales invoice register
  4. A coded chart of accounts

Explanation

Unstructured information has no predefined, machine-readable format, and free-text emails are a typical example. Structured sources such as coded ledgers and standard forms follow fixed fields that are easy to query.

Question 7Information Systems and Business Processes

What does a customer relationship management system primarily consolidate?

  1. Machine-level sensor readings on a factory line
  2. Employee payroll and statutory deductions
  3. Customer interactions, sales pipeline and service history Correct answer.
  4. Raw material inventory bin locations

Explanation

A customer relationship management system provides a single view of each customer by combining contacts, opportunities, sales activity and service records. This supports consistent marketing, selling and support across the organisation.

Question 8Information Systems and Business Processes

In a process hierarchy, what does a sub-process represent?

  1. A decomposed step within a larger process that can be modelled in more detail Correct answer.
  2. The final output delivered to the customer
  3. The budget allocated to the process owner
  4. A completely unrelated process owned by another organisation

Explanation

Sub-processes allow a complex activity to be broken into a lower-level diagram that can be analysed in detail. The parent process references the sub-process, keeping each level readable while preserving the overall flow.

Question 9Information Systems and Business Processes

A retail bank wants each loan application routed automatically to a credit officer when the requested amount exceeds a threshold, and to a junior clerk otherwise. Which modelling construct implements this rule?

  1. A conditional sequence flow leaving a gateway Correct answer.
  2. A data object attached to the task
  3. A terminate end event
  4. A pool representing the bank

Explanation

Conditional sequence flows attached to a gateway evaluate the amount and direct each case to the appropriate role. The gateway ensures exactly one path is taken per application according to the stated rule.

Question 10Information Systems and Business Processes

An organisation captures the same customer address separately in sales, billing and delivery systems, and the values frequently disagree. Which information quality problem is this?

  1. Over-normalisation
  2. Insufficient encryption
  3. Excessive timeliness
  4. Inconsistency across sources Correct answer.

Explanation

When the same attribute is held in multiple places without a master source, the copies drift apart and different users see different values. The remedy is typically a data governance rule with a single authoritative record.

Question 11Information Systems and Business Processes

In a three-tier architecture, what is the main responsibility of the application tier?

  1. Executing business logic and processing requests Correct answer.
  2. Rendering the user interface on the client device
  3. Providing physical network cabling
  4. Storing the persistent database files

Explanation

The application tier sits between presentation and data, executing the business rules and coordinating requests. Separating these concerns allows each tier to be changed or scaled independently.

Question 12Information Systems and Business Processes

A manager needs a report that flags every purchase order raised without a matching goods receipt. Which report type is most appropriate?

  1. A statutory financial statement
  2. An exception report Correct answer.
  3. A scheduled summary report
  4. A ad hoc trend chart of annual spend

Explanation

Exception reporting highlights items that breach a defined control rule so that management can act on them. Unmatched purchase orders are precisely the deviations such a report should surface.

Question 13Information Systems and Business Processes

Which control most directly reduces the risk of a single clerk both creating a supplier record and approving payments to it?

  1. Archiving old payment records more frequently
  2. Segregation of duties between record creation and payment approval Correct answer.
  3. Increasing the batch size of payment runs
  4. Shortening the supplier master data field lengths

Explanation

Segregation of duties ensures that no single person controls all stages of a transaction, which removes the opportunity to create and pay a fictitious supplier. It is a preventive control aimed at fraud and error.

Question 14Information Systems and Business Processes

What distinguishes an enterprise resource planning system from a set of separate departmental applications?

  1. It removes the need for any business processes
  2. It is always hosted on a single desktop computer
  3. It uses a shared integrated database across functions Correct answer.
  4. It eliminates the requirement for user training

Explanation

Enterprise resource planning integrates finance, supply chain, human resources and other functions around one shared data model. This removes duplicate data entry and gives consistent information across departments.

Question 15Information Systems and Business Processes

A process owner measures average cycle time and the percentage of orders completed right first time. What are these measures examples of?

  1. Process performance indicators Correct answer.
  2. Entity relationship cardinalities
  3. Data dictionary entries
  4. Chart of accounts codes

Explanation

Process performance indicators quantify efficiency and quality so that a process can be monitored and improved. Cycle time reflects speed while right-first-time rate reflects quality of output.

Question 16Information Systems and Business Processes

In an entity relationship model, a foreign key in the order table referencing the customer table implements which concept?

  1. A many-to-many relationship between order and product
  2. A one-to-many relationship between customer and order Correct answer.
  3. A derived attribute of the customer entity
  4. A unique constraint on the order table

Explanation

Placing the customer identifier in each order row lets one customer be linked to many orders while each order belongs to one customer. That is the relational implementation of a one-to-many relationship.

Question 17Information Systems and Business Processes

Which of the following best describes a key performance indicator as opposed to a simple metric?

  1. A qualitative opinion gathered in a staff survey
  2. A measure tied to a strategic objective with a target and defined accountability Correct answer.
  3. A count of database transactions per hour regardless of purpose
  4. Any number that a system happens to record automatically

Explanation

A key performance indicator is deliberately chosen to track progress toward a strategic goal and is paired with a target and an owner. A simple metric may be recorded without any such linkage or accountability.

Question 18Information Systems and Business Processes

A company replaces paper approval of expenses with a workflow system that routes claims to the correct approver by amount. Which benefit is most directly attributable to this change?

  1. Reduced approval cycle time and clearer audit trail Correct answer.
  2. Lower depreciation charges on factory machinery
  3. Increased physical storage capacity in the warehouse
  4. Improved accuracy of product costing formulas

Explanation

Automated routing removes manual handoffs and delays while logging each action for audit. The immediate gains are therefore faster approval and a reliable record of who approved what and when.

Question 19Information Systems and Business Processes

What is the primary role of a data dictionary within systems development?

  1. Scheduling the testing phases of a project
  2. Documenting the definition, type and source of each data element Correct answer.
  3. Defining the marketing budget for a new product
  4. Storing the live production records of the organisation

Explanation

A data dictionary provides a common reference for each data element, including its meaning, format, allowed values and origin. This consistency reduces misunderstanding between analysts, developers and users.

Question 20Information Systems and Business Processes

A firm's order-to-cash process repeatedly stalls because credit checks wait for a manual email from finance. Which improvement approach addresses the root cause most directly?

  1. Extend the payment terms offered to customers
  2. Automate the credit check so the result is returned within the workflow Correct answer.
  3. Increase the number of approval signatures required
  4. Add more staff to re-key the same order data

Explanation

The delay stems from a manual handoff outside the process flow, so integrating an automated credit check removes the waiting. Adding signatures or re-keying would add further non-value-adding steps.

Question 21Information Systems and Business Processes

A system records a sales invoice before the corresponding goods issue is confirmed, causing inventory to be overstated. Which control weakness does this illustrate?

  1. Over-encryption of the inventory master file
  2. Excessive segregation of duties between warehouse and finance
  3. Insufficient user interface colour contrast
  4. Inadequate sequencing and matching controls at the process interface Correct answer.

Explanation

The interface between billing and inventory lacks a rule enforcing that goods issue precedes invoicing, or a matching check afterwards. Without such a control the two records diverge and inventory balances become unreliable.

Question 22Information Systems and Business Processes

Which situation most clearly calls for a decision support system rather than a transaction processing system?

  1. Issuing a sequential goods receipt number
  2. Evaluating several pricing scenarios against projected demand and margin Correct answer.
  3. Posting monthly payroll deductions
  4. Recording each customer payment against an open invoice

Explanation

Decision support systems are built for semi-structured analysis where the user explores alternatives and models outcomes. Comparing pricing scenarios against demand projections is exactly that kind of what-if evaluation.

Question 23Information Systems and Business Processes

An analyst finds that two departments define 'active customer' differently, so their reports cannot be reconciled. What is the most appropriate first step?

  1. Delete the customer records that cause the discrepancy
  2. Ask each department to keep its own definition and stop comparing reports
  3. Merge both reports into one by averaging the two totals
  4. Agree a single enterprise definition and record it in the data governance catalogue Correct answer.

Explanation

Conflicting definitions are a metadata governance problem, so the durable fix is to agree one authoritative definition and publish it. Once the definition is shared, reports can be reconciled and compared meaningfully.

Question 24Information Systems and Business Processes

A company automates a poorly designed process without first simplifying it, and cycle time barely improves. Which explanation is most consistent with this outcome?

  1. Automation always increases cycle time regardless of process design
  2. Automation removed manual steps but preserved redundant checks and handoffs Correct answer.
  3. Cycle time is unaffected by the number of process steps
  4. The workflow engine was necessarily configured incorrectly

Explanation

Automating waste simply makes the waste faster and can leave the dominant delays intact. Redundant checks and handoffs must be eliminated through simplification before automation delivers real gains.

Question 25Information Systems and Business Processes

A supply chain system shares live stock levels with the sales system through a service interface. Which risk is most directly introduced by this arrangement?

  1. Users must re-enter stock data manually in both systems
  2. Stock levels become impossible to store in any database
  3. A failure or delay in the interface leaves the two systems out of step Correct answer.
  4. The sales system loses all ability to record orders

Explanation

Real-time interfaces create a dependency: if the service is unavailable or messages queue, the receiving system works from stale data. Monitoring and reconciliation controls are needed to detect and correct such divergence.

Question 26Information Systems and Business Processes

Which type of business information system is designed mainly to support routine, high-volume transaction capture at the operational level of an organisation?

  1. A management information system
  2. A transaction processing system Correct answer.
  3. An executive information system
  4. A decision support system

Explanation

Transaction processing systems sit at the operational level and handle repetitive, structured events such as sales, payments and stock movements, recording each one accurately and quickly. Higher-level systems consume the data these systems produce rather than capturing it themselves.

Question 27Information Systems and Business Processes

In a value chain view of a business, which activity is best classified as a primary activity rather than a support activity?

  1. Outbound logistics Correct answer.
  2. Firm infrastructure
  3. Human resource management
  4. Procurement of office supplies

Explanation

Primary activities directly create and deliver the product or service to customers, and outbound logistics is one of them because it distributes finished goods to buyers. Support activities such as human resources, procurement and firm infrastructure enable the primary activities but do not themselves move the product to the customer.

Question 28Information Systems and Business Processes

Which of the following best describes the purpose of a business process model?

  1. To represent how work flows between roles and systems to produce an outcome Correct answer.
  2. To list the hardware and network devices that host business applications
  3. To record the accounting entries generated by each sales transaction
  4. To define the salary bands attached to each operational job title

Explanation

A process model shows the sequence of activities, decision points, inputs and outputs, and the roles or systems responsible for each step, so that the end-to-end flow can be understood and improved. It focuses on how work is coordinated to deliver a result, not on technical infrastructure or financial postings.

Question 29Information Systems and Business Processes

A purchasing process requires that any order above 5,000 currency units be reviewed by a second buyer before release. Which process design element does this rule represent?

  1. A user interface preference
  2. A network capacity constraint
  3. An internal control embedded in the workflow Correct answer.
  4. A data migration rule

Explanation

The threshold review is a control: it is designed to prevent unauthorised or excessive commitments by requiring independent scrutiny before the order proceeds. Embedding it in the workflow makes the control automatic rather than dependent on individual discretion.

Question 30Information Systems and Business Processes

A firm wants to compare the cost of its claims process against competitors while keeping the details of its own workflow confidential. Which technique is most appropriate?

  1. Replacing the process with an unrelated standard package
  2. Publishing its internal workflow diagrams on a shared portal
  3. Removing all controls from the claims workflow
  4. Benchmarking against published industry process metrics Correct answer.

Explanation

Benchmarking compares performance measures such as cost per claim or cycle time against external reference points without disclosing internal process detail. It gives a competitive comparison while protecting confidential workflow design.

Question 31Information Systems and Business Processes

A logistics manager notices that the same shipment is entered three times because the warehouse, carrier and finance teams each keep a separate spreadsheet. Which business problem does this most directly illustrate?

  1. Over-automation of manual reconciliation tasks
  2. Fragmented data ownership across functional silos Correct answer.
  3. Excessive system integration between departments
  4. Insufficient network bandwidth for data entry

Explanation

When each function maintains its own store of the same business event, the organisation suffers duplicated entry, inconsistent values and no single version of the truth. This is a classic symptom of functional silos with fragmented data ownership rather than a technical capacity issue.

Question 32Information Systems and Business Processes

A manufacturer wants a single system in which a confirmed sales order automatically reserves stock, schedules production and posts the accounting entries. Which system category is designed to deliver this?

  1. A web content management system
  2. An enterprise resource planning system with integrated modules Correct answer.
  3. A standalone spreadsheet-based planning model
  4. A document management repository

Explanation

Enterprise resource planning systems share a common database and integrated modules, so a single event such as an order confirmation can trigger stock reservation, production scheduling and financial postings without re-keying. The integration is what allows one transaction to propagate consistently across functions.

Question 33Information Systems and Business Processes

An analyst maps a process and finds that a step labelled 'check credit' is performed by the same clerk who approves the order, using the same login. Which conclusion is most defensible?

  1. The control is ineffective because it lacks independent verification Correct answer.
  2. The control is strong because it is documented in the model
  3. The process is efficient because one person handles both steps
  4. The process is compliant because a check step exists

Explanation

Segregation of duties requires that the person checking a transaction is independent of the person authorising it; when one individual performs both with the same credentials, the check cannot provide independent assurance. The mere existence of a documented step does not make the control effective.

Question 34Information Systems and Business Processes

A firm plans to redesign its order fulfilment process. Analysis shows that 70 per cent of delays come from waiting for manual stock confirmations by email, while the remaining steps are already efficient. Which action best targets the constraint?

  1. Redesign every step of the process simultaneously to balance effort
  2. Reduce the number of orders accepted each day
  3. Automate stock confirmation so the availability check is immediate and system-driven Correct answer.
  4. Add more email reviewers to the manual confirmation step

Explanation

Since the delays concentrate in one waiting step, improving that constraint yields the greatest gain, and automating the availability check removes the wait entirely. Spreading effort across already efficient steps or adding reviewers to a manual queue leaves the underlying bottleneck in place.

Question 35Information Technology Governance and Control

Which committee typically holds ultimate accountability for the overall direction and oversight of information technology in a large organisation?

  1. The data entry team
  2. The board of directors Correct answer.
  3. The IT service desk
  4. The internal audit team

Explanation

Ultimate accountability for IT direction normally rests with the board of directors, which delegates detailed oversight to an IT steering or governance committee. The board sets risk appetite and ensures IT supports strategic objectives, while operational groups execute the work.

Question 36Information Technology Governance and Control

In the COBIT framework, what is the primary purpose of separating governance from management?

  1. To reduce the number of IT staff required in the organisation
  2. To eliminate the need for internal audit in IT
  3. To allow vendors to manage all technology decisions
  4. To ensure decisions are evaluated, directed and monitored apart from planning and execution Correct answer.

Explanation

COBIT distinguishes governance, which evaluates, directs and monitors, from management, which plans, builds, runs and monitors activities. This separation creates clear accountability between those who set direction and those who execute it.

Question 37Information Technology Governance and Control

A company wants assurance that its IT controls are designed and operating effectively. Which function should provide this independent assessment?

  1. The application development team
  2. The procurement department
  3. Internal audit Correct answer.
  4. The IT operations manager

Explanation

Independent assurance over the design and operating effectiveness of controls is the role of internal audit, which reports to the audit committee or board. Self-assessment by operations or development lacks the required independence.

Question 38Information Technology Governance and Control

Which statement best describes the three lines model of governance?

  1. Three vendors jointly deliver IT services under one contract
  2. Three levels of password complexity are enforced across systems
  3. Operational management owns risk, a risk function oversees it, and internal audit gives independent assurance Correct answer.
  4. Three separate boards each govern a different technology platform

Explanation

The three lines model separates management ownership of risk, an independent oversight or compliance function, and independent internal audit assurance. This structure clarifies accountability and avoids conflicts of interest.

Question 39Information Technology Governance and Control

An organisation assigns the same manager to approve IT changes and to perform the post-implementation review of those changes. Which control weakness does this create?

  1. Segregation of duties conflict Correct answer.
  2. Overstaffing of the change team
  3. Insufficient network bandwidth
  4. Excessive data encryption

Explanation

Having one person both approve and review the same changes removes independent checking, which is a segregation of duties conflict. Approvals and reviews should be performed by different roles so errors or fraud are more likely to be detected.

Question 40Information Technology Governance and Control

Which is the most appropriate role of an IT steering committee?

  1. Conducting external financial statement audits
  2. Processing employee expense claims
  3. Writing application source code for major projects
  4. Prioritising IT investment proposals and aligning them with business strategy Correct answer.

Explanation

An IT steering committee typically prioritises IT investments, resolves cross-functional issues and ensures IT initiatives align with business strategy. It provides direction rather than performing operational or technical work.

Question 41Information Technology Governance and Control

What does an IT governance framework primarily provide to an organisation?

  1. A structured set of practices for directing and controlling IT to meet objectives Correct answer.
  2. A replacement for all statutory financial reporting
  3. A fixed price list for hardware purchases
  4. A guarantee that no IT project will fail

Explanation

Governance frameworks such as COBIT provide structured practices, processes and control objectives for directing and controlling IT. They improve alignment and control but cannot guarantee project success.

Question 42Information Technology Governance and Control

Which document formally defines the authority, responsibilities and reporting lines of the IT function within an organisation?

  1. The disaster recovery test log
  2. The network cabling diagram
  3. The IT charter or terms of reference Correct answer.
  4. The software licence inventory

Explanation

An IT charter or terms of reference formally records the mandate, authority, responsibilities and reporting relationships of the IT function or committee. It gives governance arrangements documented legitimacy and clarity.

Question 43Information Technology Governance and Control

Under the COSO internal control framework, which component addresses the policies and procedures that ensure management directives are carried out?

  1. Control activities Correct answer.
  2. Risk assessment
  3. Information and communication
  4. Internal environment

Explanation

Control activities are the policies and procedures, such as approvals and reconciliations, that help ensure management directives are executed. The other components establish tone, identify risks, or move information through the organisation.

Question 44Information Technology Governance and Control

A payroll system allows the person who maintains employee master data to also run the salary payment file without any independent review. What is the greatest governance concern?

  1. The system will run out of storage capacity
  2. Employees will receive excessive training
  3. A single individual could create a fictitious employee and pay them without detection Correct answer.
  4. Salary payments will necessarily be delayed each month

Explanation

Combining master data maintenance with payment processing enables a fictitious employee or altered bank details to be introduced and paid without independent detection. This is a classic segregation of duties failure in payroll.

Question 45Information Technology Governance and Control

Which of the following best describes the principle of 'tone at the top' in IT governance?

  1. The chief executive personally configures network firewalls
  2. Senior leadership visibly demonstrates commitment to ethical behaviour and effective controls Correct answer.
  3. The organisation installs louder alarms in the data centre
  4. Junior staff set the organisation's risk appetite

Explanation

Tone at the top means senior leaders set an ethical culture and visibly support controls, which shapes behaviour throughout the organisation. It is about leadership example and commitment, not technical configuration.

Question 46Information Technology Governance and Control

An organisation outsources its customer database to a cloud provider. Who remains accountable for the protection of customer data?

  1. The external auditor
  2. The outsourcing organisation Correct answer.
  3. The customers individually
  4. The cloud provider alone

Explanation

Accountability for data protection cannot be outsourced; the organisation remains responsible even when a provider processes data on its behalf. The provider has contractual obligations, but ultimate accountability stays with the data owner.

Question 47Information Technology Governance and Control

Which mechanism best enables a board to monitor whether IT risk is being managed within the approved appetite?

  1. Monthly review of stationery consumption
  2. Regular risk reporting with key risk indicators reviewed by a board committee Correct answer.
  3. Annual review of office furniture inventories
  4. Weekly review of staff holiday requests

Explanation

Boards monitor risk appetite through regular reporting supported by key risk indicators that signal whether exposures are within tolerance. This gives timely, relevant information for governance decisions.

Question 48Information Technology Governance and Control

What is the main purpose of an IT balanced scorecard in governance reporting?

  1. To record the physical location of servers
  2. To calculate employee income tax deductions
  3. To list software defects for developers
  4. To present financial and non-financial IT performance measures aligned to business goals Correct answer.

Explanation

An IT balanced scorecard reports a mix of financial and non-financial measures that show how IT contributes to business objectives. It supports governance by giving leadership a balanced view of performance.

Question 49Information Technology Governance and Control

A key IT project has exceeded its budget by 40 percent and missed two milestones, but the project manager continues to report it as 'on track'. Which governance control has most clearly failed?

  1. Printer maintenance planning
  2. Password complexity enforcement
  3. Independent project status reporting and oversight Correct answer.
  4. Data backup scheduling

Explanation

The failure is in oversight: status information reaching governance bodies is not independently validated, allowing optimistic reporting to persist. Effective governance requires reliable, verifiable project reporting and challenge.

Question 50Information Technology Governance and Control

Which of the following is a preventive control rather than a detective control?

  1. Restricting system access rights to authorised job roles Correct answer.
  2. Reconciling the general ledger to the subledger
  3. Investigating logged security incidents
  4. Reviewing exception reports after month end

Explanation

Preventive controls stop errors or unauthorised actions before they occur, and role-based access restriction does this by blocking inappropriate activity. The other options identify problems after the event and are therefore detective.