The best answer is D. To document relationships between configuration items.
ISACA's configuration management guidance identifies the value of a CMDB in maintaining information about configuration items and their relationships. That relationship view is what supports effective impact analysis, change management, incident response, and dependency understanding across the environment.
Option A is too narrow. Option B describes monitoring rather than configuration management. Option C may be one data element in some environments, but the defining value of a CMDB is not physical location tracking. The central purpose is documenting configuration items and how they relate to one another.
References (Official ISACA):
* ISACA Glossary / configuration management references.

Reviewing a sample of system-generated backup logs is the best step to verify that regularly scheduled backups are timely and run to completion. Backup logs are records that document the details and results of backup operations, such as the date, time, duration, status, errors, and exceptions. By reviewing a sample of backup logs, the IS auditor can check whether the backups are performed according to the schedule and whether they are completed successfully or not. The other steps do not provide as much evidence or assurance as reviewing backup logs, as they do not show the actual outcome or performance of backup operations. References: CISA Review Manual, 27th Edition, page 247

The technology that has the smallest maximum range for data transmission between devices is near-field communication (NFC). NFC is a short-range wireless technology that enables two devices to communicate when they are in close proximity, usually within a few centimeters. NFC is commonly used for contactless payments, smart cards, and device pairing. According to the Bluetooth Technology Website1, the effective range of NFC is less than a meter, while the other technologies have much longer ranges. Wi-Fi can reach up to 100 meters indoors and300 meters outdoors2. Bluetooth can reach up to 800 feet with Bluetooth5.0 specification3. Long-term evolution (LTE) canreach up to several kilometers depending on the cell tower and the device4.
References:
5: What is Wi-Fi? - Definition from WhatIs.com
6: Understanding Bluetooth Range | Bluetooth Technology Website
7: What is Bluetooth Range? What You Need to Know
8: How far can LTE signals travel? - Quora

The primary basis for selecting which IS audits to perform in the coming year is the organizational risk assessment. An organizational risk assessment is a formal process for identifying, evaluating, and controlling risks that may affect the achievement of the organization'sgoals and objectives3. An organizational risk assessment can help IS auditors prioritize and plan their audit activities based on the level of risk exposure and impact of each area or process within the organization. An organizational risk assessment can also help IS auditors align their audit objectives and criteria with the organization's strategy and performance indicators.
Senior management's request, prior year's audit findings, and previous audit coverage and scope are also possible bases for selecting which IS audits to perform in the coming year, but not as primary as the organizational risk assessment. These factors are more secondary or supplementary sources of information that can help IS auditors refine or adjust their audit plan based on specific needs or issues identified by management or previous audits. However, thesefactors may not reflect the current or emerging risks that may affect the organization's operations or performance. References: ISACA CISA Review Manual 27th Edition, page 295

IfIT is not involvedinstrategic planning,IT strategy may diverge from business needs, leading tomisalignment and inefficiencies.
Option A (Incorrect):Business strategy alignmentis important, but the greater risk is thatIT investments do not support business goals.
Option B (Incorrect):Lack of emerging technology awareness is a risk, butIT-business misalignment has broader consequences.
Option C (Correct):Thegreatest riskis when IT strategyfails to align with business objectives, leading towasted investments, inefficiencies, and competitive disadvantages.
Option D (Incorrect):IT goals being overlooked is a concern, butmisalignment of IT and business strategies is a more critical risk.
Reference:ISACA CISA Review Manual -Domain 2: Governance and Management of IT- Coversstrategic IT alignment and governance best practices.