DPI Quick Quiz — 10 Questions

Question 1

A CISO is evaluating why security compliance failures continue to occur despite extensive policies. According to ITIL 4 guiding principles and GRC best practices, which THREE underlying root causes should the CISO investigate? (Choose three.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Security and compliance teams operate in strict silos, failing to collaborate with business operations ('Collaborate and promote visibility').. Option B is correct because ITIL 4's 'Collaborate and promote visibility' principle warns that siloed security and compliance teams that do not work with business operations create blind spots, misaligned controls, and unenforced policies, which directly explains persistent compliance failures. Option C is correct because 'Keep it simple and practical' means policies that are overly bureaucratic and impractical drive employees to workarounds and shadow IT, so the controls exist on paper but are bypassed in practice, producing compliance failures. Option D is correct because 'Focus on value' requires risk management to be tied to customer and business value streams; when policies appear as arbitrary roadblocks disconnected from value, the business resists or ignores them, undermining compliance. Option A is not correct because ITIL 4 and GRC best practices do not treat eliminating human error through excessive automation as a root cause of compliance failure; over-automation is not the stated problem, and zero tolerance for human error is neither realistic nor a guiding principle. Option E is not correct because thoroughly examining the current state is a sound starting point in ITIL 4's 'Start where you are' principle, not a root cause of compliance failures.

Answer

The organization may have automated too many security controls, leaving zero room for human error.

Answer

The CISO may have started their assessment by looking at the current state too thoroughly.

Question 2

An organization is implementing a comprehensive KPI framework across its IT value streams. During the DPI review, the strategist identifies that several metrics are causing dysfunctional behaviors. Which THREE warning signs indicate that a KPI is poorly designed and driving negative behavior?

Accepted Answer

Teams artificially inflate ticket counts or close trivial tasks rapidly to boost productivity numbers.. Option A is correct because gaming a metric—such as artificially inflating ticket counts or rapidly closing trivial tasks—is a classic dysfunctional behavior showing the KPI rewards volume over value, which distorts true productivity. Option B is correct because hiding service failures or delays to protect a departmental scorecard indicates the metric drives fear and opacity rather than transparency and continuous improvement. Option E is correct because local KPI success while enterprise strategic goals fail demonstrates suboptimization, where the metric is misaligned with the broader value stream and organizational objectives. Option C does not belong because objective, automated data from ServiceNow is a desirable KPI design characteristic, not a warning sign of dysfunction. Option D does not belong because monthly trend review with business stakeholders is a healthy governance practice that supports alignment, not a negative behavioral indicator.

Answer

The metric is based on objective, automated data collected directly from ServiceNow.

Answer

The metric trend is reviewed monthly in collaboration with business stakeholders.

Question 3

An internal audit reveals that privileged access management (PAM) policies are frequently bypassed by systems administrators during critical outages. The security team wants to enforce rigid automated lockdowns. How should the 'Collaborate and promote visibility' and 'Think and work holistically' principles be combined to address this?

Accepted Answer

Engage system administrators and auditors together to design transparent, auditable 'break-glass' emergency access workflows.. Engaging system administrators and auditors together to design transparent, auditable 'break-glass' emergency access workflows combines 'Collaborate and promote visibility' (bringing stakeholders together for shared understanding) with 'Think and work holistically' (addressing the entire access lifecycle, including emergencies). This produces a solution that respects operational urgency while maintaining auditability and control.

Answer

Outsource all outage troubleshooting to external vendors who are subject to PAM controls.

Answer

Suspend all PAM controls permanently so administrators can never be blocked during an outage.

Answer

Implement immediate automated termination for any admin who bypasses PAM, regardless of outage severity.

Question 4

An enterprise IT organization is designing a value-based measurement framework for cloud migration initiatives. Which THREE strategic considerations must the strategist address to ensure the framework accurately captures business value?

Accepted Answer

Linking cloud infrastructure investments directly to business agility, revenue growth, and risk reduction.. Option C is correct because a value-based framework must connect cloud spending to strategic business outcomes such as agility, revenue growth, and risk reduction, rather than treating infrastructure as an isolated IT cost. Option D is correct because measuring user adoption and productivity gains captures realized business value, whereas counting migrated VMs only reflects activity or output, not outcomes. Option E is correct because TCO combined with financial return (e.g., ROI/NPV) gives a complete economic picture, preventing decisions based only on low initial migration costs. Option A is incorrect because restricting metrics to raw CPU and memory utilization ignores business value and focuses narrowly on technical resource usage. Option B is incorrect because eliminating stakeholder feedback and qualitative assessments removes important context about perceived value, satisfaction, and adoption that quantitative metrics alone may miss.

Answer

Ensuring all metrics are restricted exclusively to raw server CPU and memory utilization.

Answer

Eliminating any requirement for stakeholder feedback or qualitative value assessments.

Question 5

During the execution of an organization-wide continual improvement initiative, leadership notices that improvements are implemented locally but rarely sustained. What communication and OCM gap is the root cause?

Accepted Answer

Communication was treated as a one-off launch event rather than an ongoing campaign tied to cultural reinforcement.. Sustaining improvements requires embedding new behaviors into performance metrics, reward systems, and cultural norms, rather than treating communication as a one-time launch event.

Answer

The IT service desk failed to categorize incidents according to ITIL 4 service desk practices.

Answer

The steering committee held meetings via video conference instead of in-person boardrooms.

Answer

The continual improvement register was stored in a spreadsheet instead of a relational database.

Question 6

An IT improvement team using Confluence and Jira is reviewing completed improvement actions. They want to conduct a structured 'lessons learned' review to capture what went well and what could be improved for future cycles. Which technique should the facilitator employ?

Accepted Answer

Conduct an Agile Retrospective meeting using structured brainstorming and categorization boards.. An Agile Retrospective is the structured ceremony designed precisely for reviewing completed work to capture what went well, what did not, and what to improve next cycle. Using brainstorming and categorization boards (for example, Start/Stop/Continue or Mad/Sad/Glad) gives the facilitator a repeatable format that surfaces themes and produces actionable improvements.

Answer

Initiate a Major Problem Review with external vendors.

Answer

Perform a SWOT analysis on the enterprise organizational structure.

Answer

Execute a root cause analysis using the Ishikawa (fishbone) diagram.

Question 7

An organization is defining its long-term aspirations. Which element specifically articulates the ultimate goal of what the organization intends to become in the future?

Accepted Answer

Vision statement. A vision statement articulates the ultimate future state the organization intends to become — it is aspirational, forward-looking, and describes 'what we want to be.' It differs from a mission statement, which describes the organization's purpose and reason for existing in the present. The vision is the north star that strategy and operational plans align to.

Answer

Value stream map

Answer

Operational plan

Answer

Mission statement

Question 8

A telecommunications company is planning a major value stream transformation to support a new 5G service offering. During the planning phase, the team maps out customer demand, design, build, test, and release. They notice that testing takes 80% of the total lead time. What is the most strategic planning intervention?

Accepted Answer

Invest in test automation and continuous testing infrastructure within the value stream plan.. When testing consumes 80% of total lead time, the dominant constraint is the test phase, so the highest-leverage planning intervention is to invest in test automation and continuous testing infrastructure. This directly attacks the bottleneck, reducing test cycle time, enabling faster feedback, and shrinking overall lead time without sacrificing quality. Value stream transformation planning should target the largest source of delay first.

Answer

Increase the size of development batches to reduce test frequency.

Answer

Eliminate testing phases to accelerate service release.

Answer

Outsource development while keeping testing manual and internal.

Question 9

A strategic planning team is translating the corporate vision into actionable goals for various business units. Which approach best ensures effective strategy cascading?

Accepted Answer

Ensuring every operational objective directly supports and traces back to the strategic vision.. Effective strategy cascading requires line-of-sight traceability: every operational objective must demonstrably support and roll up to the strategic vision. This ensures resources, metrics, and accountability align across levels and prevents departments from drifting into activities that do not advance enterprise goals.

Answer

Isolating executive leadership from operational teams to maintain top-down control.

Answer

Relying strictly on informal communication without documented metrics.

Answer

Allowing individual departments to create strategies completely independent of the enterprise.

Question 10

What is the primary function of setting organizational direction?

Accepted Answer

To establish a clear purpose and destination that guides decision-making at all levels.. Setting organizational direction means defining a clear purpose, vision, and destination that aligns decision-making across all levels of the organization. It provides the strategic context that guides priorities, resource allocation, and day-to-day choices so that teams work toward common goals rather than in isolation.

Answer

To write individual lines of code for software applications.

Answer

To order office supplies and stationery.

Answer

To repair broken physical server hardware.