Courseiva
Governance and Management of ITmediumMatchingObjective-mapped

CISA Governance and Management of IT Practice Question

Match each COBIT 5 domain to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Evaluate, Direct, and Monitor

Align, Plan, and Organize

Build, Acquire, and Implement

Deliver, Service, and Support

Monitor, Evaluate, and Assess

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

EDM: Ensures stakeholder needs are addressed, governance objectives are met, and the enterprise is directed and monitored.

COBIT 5 has five process domains: EDM (governance), APO (planning), BAI (acquisition/implementation), DSS (delivery/support), and MEA (monitoring). Correct matches are as above; common confusions involve swapping APO/MEA or DSS/APO.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • EDM: Ensures stakeholder needs are addressed, governance objectives are met, and the enterprise is directed and monitored.

    Why this is correct

    EDM (Evaluate, Direct, Monitor) is the COBIT 5 domain focused on governance and stakeholder value.

  • APO: Plans, organizes, and aligns IT strategies and resources with business goals.

    Why this is correct

    APO (Align, Plan and Organise) covers strategic planning, policies, and resource management.

  • BAI: Manages projects, acquisition, and implementation of IT solutions and changes.

    Why this is correct

    BAI (Build, Acquire and Implement) focuses on project management and IT solution delivery.

  • DSS: Delivers IT services, manages operations, and provides support to users.

    Why this is correct

    DSS (Deliver, Service and Support) addresses service delivery, incident management, and continuity.

  • MEA: Manages IT resources and capabilities to optimize performance.

    Why it's wrong here

    This describes APO, not MEA. MEA (Monitor, Evaluate and Assess) focuses on performance monitoring and compliance.

  • DSS: Ensures alignment of IT strategy with business goals.

    Why it's wrong here

    This describes APO or EDM. DSS deals with delivery and support, not strategic alignment.

About these practice questions

This CISA question is part of Courseiva's 995-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.