IIBA CBAP Exam - Topic 1 Question 118 Discussion

Actual exam question for IIBA's CBAP exam

Question #: 118
Topic #: 1

[All CBAP Questions]

A business analyst (BA) has completed the prioritization of requirements with various risk-averse stakeholder groups. Several requirements conflict with a regulatory requirement that, if not implemented, will result in a fine from a regulatory body.

What should the BA do?

AMeasure the value of the other requirements against the penalty of not meeting the regulatory requirement

BCompare the regulatory requirement to the recommended solution

CDetermine a means to work around the regulatory requirement

DInform the stakeholders that the regulatory requirement takes precedence over other requirements

Show Suggested Answer

Suggested Answer: D

The BA should inform the stakeholders that the regulatory requirement takes precedence over other requirements, because it is a mandatory constraint that must be satisfied by the solution. The BA should explain the rationale and implications of the regulatory requirement, and how it affects the other requirements and the solution scope. The BA should also seek to resolve any conflicts or issues that may arise from the stakeholders, and ensure that they understand and accept the priority of the regulatory requirement. Measuring the value of the other requirements against the penalty of not meeting the regulatory requirement, comparing the regulatory requirement to the recommended solution, or determining a means to work around the regulatory requirement are not the best options, because they do not address the root cause of the problem and may result in non-compliance, legal liability, or stakeholder dissatisfaction.Reference:

CBAP / CCBA Certified Business Analysis Study Guide, 2nd Edition, Chapter 3: Requirements Life Cycle Management, page 122

Business Analysis Body of Knowledge (BABOK) Guide, Version 3, Chapter 3: Requirements Life Cycle Management, section 3.5: Prioritize Requirements, page 62

Business Analysis Professional Resources, IIBA Resource Collection, Business Analysis Body of Knowledge (BABOK) Guide

CBAP / CCBA Certified Business Analysis Study Guide, 2nd Edition, Skillsoft Book, Chapter 3: Requirements Life Cycle Management, page 122

by Taryn at Nov 23, 2025, 09:50 AM

Limited Time Offer

25%

Off

Get Premium CBAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Annette

1 day ago

B seems like a good approach to find a balance.

upvoted 0 times

...

Deja

7 days ago

I think C could work, but isn't that risky?

upvoted 0 times

...

Earleen

25 days ago

A makes sense too, but can we really ignore the fines?

upvoted 0 times

...

Louann

1 month ago

This question is a real regulatory nightmare! I'd go with D and just get it over with.

upvoted 0 times

...

Michell

1 month ago

D) Regulatory compliance is not something to mess with. Stakeholders may not like it, but they'll like the fine even less.

upvoted 0 times

...

Leonora

1 month ago

D) Definitely the way to go. Regulatory requirements are non-negotiable, no matter how much the stakeholders pout.

upvoted 0 times

...

Reed

2 months ago

A) Measure the value of the other requirements against the penalty of not meeting the regulatory requirement. Gotta weigh the pros and cons here.

upvoted 0 times

...

Sina

2 months ago

D) Inform the stakeholders that the regulatory requirement takes precedence over other requirements. It's the safest option to avoid hefty fines.

upvoted 0 times

...

Aleisha

2 months ago

Working around the regulatory requirement seems risky, so I would avoid option C. I think we should stick to the rules.

upvoted 0 times

...

Paola

2 months ago

I feel like we practiced a similar question where we had to prioritize compliance, and I think option B could be relevant here.

upvoted 0 times

...

Willodean

2 months ago

I'm not entirely sure, but I think measuring the value of other requirements against the penalty could help clarify the situation. Maybe option A?

upvoted 0 times

...

Catarina

2 months ago

I remember discussing how regulatory requirements usually take precedence, so I think option D makes sense.

upvoted 0 times

...

Blondell

3 months ago

Definitely option D. The regulatory requirement is non-negotiable, so we have to inform the stakeholders that it takes precedence over everything else.

upvoted 0 times

...

Aja

3 months ago

Hmm, I'm not sure. Measuring the value of the other requirements against the penalty seems like a good approach to me. I'd lean towards option A.

upvoted 0 times

...

Martin

3 months ago

D is the only option. Regulations come first!

upvoted 0 times

...

Albina

3 months ago

I agree, but A could work too. We need to measure risks.

upvoted 0 times

...

Elliot

3 months ago

I think option D is the best. Regulations must come first.

upvoted 0 times

...

Gerri

4 months ago

I think comparing the regulatory requirement to the recommended solution, as in option B, could be a good way to see if there's any room for compromise. But option D is probably the safest bet.

upvoted 0 times

...