Isaca COBIT-2019 Online Practice Questions and Exam Preparation

Isaca COBIT-2019 Online Questions & Answers

• Question 161:

  Which of the following describes the COBIT performance model?

  A. The COBIT performance model is a stand-alone model that can be used in conjunction with the COBIT core model.
  B. The COBIT performance model is integrated into the COBIT core model.
  C. The COBIT performance model is unique and not aligned with existing maturity and capability models.
  B. The COBIT performance model is integrated into the COBIT core model.

  ---

  Explanation/Reference:

  Reference: https://community.mis.temple.edu/mis5203sec001sp2019/files/2019/01/COBIT-2019-Framework-Introduction-and-Methodology_res_eng_1118.pdf

• Question 162:

  Which of the following stakeholders ensures the business case and program plan are realistic and achievable?

  A. IT process owners
  B. Business process owners
  C. Chief information officer (CIO)
  D. Implementation team
  C. Chief information officer (CIO)

  ---

  Explanation/Reference:

  The Chief Information Officer (CIO) is responsible for ensuring that the business case and program plan are realistic and achievable. The CIO oversees the overall IT strategy and works with IT process owners, business process owners, and implementation teams to ensure that the business case and program plan are aligned with the organization's goals and objectives. The CIO will also review the plans to make sure they are feasible, efficient, and cost-effective.

• Question 163:

  When reviewing the risk profile of an enterprise during the governance design phase, what MUST be established prior to conducting a high-level risk analysis?

  A. Risk response strategy
  B. Key risk indicators (KRIs)
  C. Enterprise's risk appetite
  D. Risk management framework
  C. Enterprise's risk appetite

  ---

  Explanation/Reference:

  Before conducting a high-level risk analysis during the governance design phase, it is necessary to establish the Enterprise's risk appetite (Option C). The enterprise's risk appetite is a statement of the level of risk that an organization is willing to accept in pursuit of its objectives. This information helps in setting the scope and objectives of the risk analysis, as well as guiding decisions on which risks to prioritize and manage. Understanding the enterprise's risk appetite is crucial in order to effectively assess and manage risks, and to align the governance framework with the enterprise's risk management goals and objectives. According to the ISACA COBIT 2019 official Manual, it is important to establish the enterprise's risk appetite prior to conducting a high-level risk analysis to ensure that the risk profile and risk assessment results are evaluated within the context of the organization's risk appetite and comfort zone. The risk appetite should be documented and approved by the board of directors or the governing body and should be used to determine the acceptable level of risk the organization is willing to bear.

• Question 164:

  Which of the following governance components is ESSENTIAL for effective decision making?

  A. People, skills and competencies
  B. Processes
  C. Organizational structures
  C. Organizational structures

  ---

  Explanation/Reference:

• Question 165:

  A privately held company is planning to be listed on the stock exchange and is working on meeting regulatory requirements. After considering an assessment by external consultants, the company has decided to implement the process 'Ensured Stakeholder Engagement." Who is BEST suited for this responsibility?

  A. Relationship manager
  B. Chief information officer
  C. The board and executive management
  D. Chief information security officer
  C. The board and executive management

  ---

  Explanation/Reference:

  According to the ISACA COBIT 2019 official Manual, the board and executive management should be responsible for ensuring stakeholder engagement when a company is planning to be listed on the stock exchange and is working on meeting regulatory requirements. This is because they are the ones who need to ensure the company is meeting the necessary standards set by the regulatory body and engaging with stakeholders to ensure the company is being transparent and open about its plans. The board and executive management should ensure that all relevant stakeholders are consulted and that their views are taken into account when making decisions about listing the company on the stock exchange.

• Question 166:

  Which of the following metrics would BEST enable an enterprise to evaluate an alignment goal specifically related to security of information and privacy?

  A. Ratio and extent of erroneous business decisions in which erroneous IandT-related information was a key factor
  B. Number of critical business processes supported by up-to-date infrastructure and applications
  C. Number of confidentiality incidents causing financial loss, business disruption or public embarrassment.
  C. Number of confidentiality incidents causing financial loss, business disruption or public embarrassment.

  ---

  Explanation/Reference:

  Reference: https://community.mis.temple.edu/mis5203sec001sp2019/files/2019/01/COBIT-2019-Framework-Introduction-and-Methodology_res_eng_1118.pdf (31)

• Question 167:

  An enterprise that specializes in software development is designing a new IT governance system as part of a transition from traditional waterfall to a more agile approach. Which step in the design phase would this transition impact the MOST?

  A. Compliance requirements
  B. Implementation method
  C. Sourcing model
  B. Implementation method

• Question 168:

  The enterprise goal "Staff skills, motivation and productivity" is organized into which balanced scorecard (BSC) dimension?

  A. Growth
  B. Internal
  C. Customer
  B. Internal

  ---

  Explanation/Reference:

• Question 169:

  Which COBIT domain of management objectives incorporates managed risk?

  A. Build, acquire and implement (BAI)
  B. Align, plan and organize (APO)
  C. Deliver, service and support (DSS)
  A. Build, acquire and implement (BAI)

  ---

  Explanation/Reference:

• Question 170:

  Which of the following is the PRIMARY purpose of implementing an enterprise governance of information and technology (EGIT) system?

  A. To document IandT business objectives and processes
  B. To deliver stakeholder value from IandT-enabled investments
  C. To comply with IandT regulatory requirements
  B. To deliver stakeholder value from IandT-enabled investments