mediumMultiple Choice
CISA Practice Question: An organization's IT department is structured…
An organization's IT department is structured with a central unit that provides infrastructure and support, while individual business units have their own application development teams. This structure is BEST described as:
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Federated (hybrid) IT
A centralized IT structure consolidates IT functions in a central unit, while a decentralized structure distributes IT across business units. A hybrid (federated) structure combines aspects of both, with some functions centralized and others decentralized.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Outsourced IT
Why it's wrong here
A central infrastructure unit plus embedded business-unit development teams describes a matrix or federal IT model, not outsourcing. Outsourced IT transfers defined functions to an external provider under contract; it would fit a scenario where a vendor operates infrastructure or development, not one where internal units share responsibility.
- ✗
Centralized IT
Why it's wrong here
In centralized IT, all IT functions are managed centrally.
- ✗
Decentralized IT
Why it's wrong here
Decentralized IT means business units own infrastructure and applications alike, with no central authority. Here a central unit still provides infrastructure and support, so control is shared rather than devolved. Decentralized would fit only if each unit ran its own infrastructure independently.
- ✓
Federated (hybrid) IT
Why this is correct
Federated (hybrid) IT matches the stem because a central unit retains infrastructure and support, while business units keep their own development teams. Authority is split along a functional axis, not fully centralised or devolved. This satisfies the stated constraint of coexisting central infrastructure provision with distributed application development.
Go deeper
Related to this question
About these practice questions
One of 934 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.