Isaca COBIT-2019 Online Practice Questions and Exam Preparation

Isaca COBIT-2019 Online Questions & Answers

• Question 91:

  When designing an IT governance system, the NEXT step after considering the enterprise's strategic business objectives is to assess:

  A. the enterprise's risk profile.
  B. the IT implementation method.
  C. the role of IT within the enterprise.
  A. the enterprise's risk profile.

  ---

  Explanation/Reference:

  Reference: https://community.mis.temple.edu/mis5203sec001sp2019/files/2019/01/COBIT-2019-Framework-Introduction-and-Methodology_res_eng_1118.pdf

• Question 92:

  An enterprise will often fail to realize implementation commitments during the execution of an EGIT implementation program plan if it:

  A. leverages existing mechanisms and ways of working.
  B. simplifies the implementation process.
  C. reduces projects into smaller executable pieces.
  D. focuses on enabling IT value over business value.
  D. focuses on enabling IT value over business value.

  ---

  Explanation/Reference:

  According to ISACA COBIT 2019, an enterprise may fail to realize implementation commitments during the execution of an EGIT (Enterprise Governance of IT) implementation program plan if it focuses on enabling IT value over business value. The EGIT implementation program should prioritize delivering business value and outcomes, rather than simply enabling IT. By focusing on delivering business value, the organization can ensure that the implementation of the EGIT program is aligned with the overall strategy and objectives of the organization and that the program is able to deliver tangible benefits to the organization. Focusing solely on enabling IT value may result in the implementation of IT solutions that do not support the overall goals and objectives of the organization, leading to a failure to realize the desired outcomes and benefits of the program. An enterprise will often fail to realize implementation commitments during the execution of an EGIT implementation program plan if it focuses on enabling IT value over business value. The goal of an EGIT implementation program should be to effectively align IT with business objectives and enable the business to achieve its goals. An enterprise should always focus on business value rather than IT value, as this ensures that the IT implementation will provide the maximum value to the business.

  Reference: https://www.isaca.org/COBIT/Pages/COBIT-2019-Framework.aspx

• Question 93:

  Which of the following is MOST critical to ensuring the objective of managed availability and capacity?

  A. Identification of single points of failure
  B. Allocation of budgets for business continuity
  C. Future prediction of landT resource requirements
  C. Future prediction of landT resource requirements

• Question 94:

  Which of the following BEST enables an enterprise to maximize value from the use of IandT?

  A. A clearly defined IandT management structure
  B. An actionable strategy and governance system
  C. Well-documented and monitored business processes
  B. An actionable strategy and governance system

  ---

  Explanation/Reference:

  To create value, the enterprise must balance benefits, risk, and resources, and develop an actionable strategy and governance system. Reference: https://www.testpreptraining.com/tutorial/governance-system-principles/

• Question 95:

  It is CRITICAL to perform a due diligence review following which type of event?

  A. Merger, acquisition, or divestiture
  B. Shifts in the market or economy
  C. External consultant assessment
  D. New business strategy or priority
  A. Merger, acquisition, or divestiture

  ---

  Explanation/Reference:

  Performing a due diligence review following a merger, acquisition, or divestiture is critical to ensure that the new organizational structure is well-thought out, secure, and compliant with applicable regulations. The review should include an evaluation of the organization's IT assets, processes, and policies to ensure that they are appropriate for the new organization. Additionally, the review should evaluate the IT security and data privacy requirements for the new organization, as well as the potential impact of the change on the organization's IT services.

• Question 96:

  Which of the following is a principle of a proper governance framework?

  A. It should be based on a conceptual model.
  B. It should be independent of other standards, frameworks and regulations.
  C. It should be self-contained and not allow for the addition of new content.
  A. It should be based on a conceptual model.

  ---

  Explanation/Reference:

  Reference: https://oltconsulting.net/wp-content/uploads/2018/06/Gobierno-IT.pdf

• Question 97:

  Which of the following BEST describes the "managed innovation" management objective of the COBIT core model?

  A. Optimize available IT capabilities to support the IT strategy and roadmap.
  B. Achieve competitive advantage, improve customer experience and improve operational effectiveness.
  C. Support the digital transformation strategy of the organization and deliver the desired value.
  B. Achieve competitive advantage, improve customer experience and improve operational effectiveness.

  ---

  Explanation/Reference:

  Reference: https://netmarket.oss.aliyuncs.com/df5c71cb-f91a-4bf8-85a6-991e1c2c0a3e.pdf (81)

• Question 98:

  When refining the scope of a new IT governance system during the design phase, which of the following is the MOST significant driver to be considered?

  A. The size of the enterprise
  B. National or international locations
  C. Cloud versus on-premises services
  A. The size of the enterprise

  ---

  Explanation/Reference:

• Question 99:

  Which of the following functions would be responsible for executing a contract that retains independent legal consultants to review the level of regulatory compliance of a proposed IT solution?

  A. Procurement office
  B. landT security
  C. Executive leadership team
  D. Legal office
  D. Legal office

  ---

  Explanation/Reference:

  According to the ISACA COBIT 2019 Framework, the Legal office is responsible for executing contracts that retain independent legal consultants to review the level of regulatory compliance of a proposed IT solution. This is specified in Domain 1, Objective 1.2: "Ensure external legal, regulatory and contractual compliance". The Legal office is responsible for ensuring compliance with applicable laws and regulations, as well as for managing risk associated with any noncompliance.

• Question 100:

  When tailoring a governance system for an enterprise, which of the following is MOST important to consider for an operating environment with a high compliance requirement?

  A. Enterprise goals
  B. Enterprise strategy
  C. Threat landscape
  D. Geopolitical situation
  C. Threat landscape

  ---

  Explanation/Reference:

  According to the COBIT 2019 Official Manual, it is important to consider the threat landscape when tailoring a governance system for an enterprise. This is especially important for operating environments with a high compliance requirement, as it helps ensure that the required security measures are in place to protect the enterprise from potential threats. Additionally, it is important to consider the enterprise goals and strategy when tailoring a governance system, as these will help inform the decisions made regarding the appropriate security measures. The geopolitical situation is not as relevant when tailoring a governance system, as it does not directly affect the security measures that need to be in place.