Isaca COBIT COBIT-2019 Questions & Answers

• Question 171:

  When refining the scope of a new IT governance system during the design phase, which of the following is the MOST significant driver to be considered?

  A. The size of the enterprise

  B. National or international locations

  C. Cloud versus on-premises services

  Correct Answer: C

• Question 172:

  Which of the following is determined at each level of a capability maturity model?

  A. Who is responsible for ensuring all activities at a given level are performed successfully

  B. How well a process is implemented and performing at a given level

  C. Which internal policies are relevant to a process at a given level

  Correct Answer: C

• Question 173:

  Which COBIT principle addresses the need to consider how many changes in technology or strategy impact the enterprise governance system as a whole?

  A. A governance system should be tailored to the enterprise's needs.

  B. A governance system should cover the enterprise end to end.

  C. A governance system should be dynamic.

  Correct Answer: A

  Reference: https://www.escoute.com/finally-a-guide-for-tailoring-a-governance-system-for-information-and-technology/

• Question 174:

  Which of the following COBIT 2019 publications includes a workflow for planning a tailored governance system for the enterprise?

  A. COBIT 2019 Implementation Guide: Implementing and Optimizing an Information and Technology Governance Solution

  B. COBIT 2019 Framework: Governance and Management Objectives

  C. COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution

  Correct Answer: C

  Reference: https://community.mis.temple.edu/mis5203sec003spring2020/files/2019/01/COBIT-2019-Framework-Introduction-and-Methodology_res_eng_1118.pdf (19)

• Question 175:

  What would be the PRIMARY reason for management to conduct a process capability assessment?

  A. To better understand the current state as compared to the target

  B. To better understand the cost of implementing the improved process

  C. To better understand the current level of risk versus future risk

  Correct Answer: B

• Question 176:

  A consultant tasked with facilitating an enterprise's COBIT implementation has met with the CEO and identified enterprise goals based on mission and vision. Which of the following roles is BEST suited to meet with the consultant to identify alignment goals?

  A. Chief risk officer

  B. Chief information officer

  C. Chief financial officer

  Correct Answer: B

  Reference: https://netmarket.oss.aliyuncs.com/df5c71cb-f91a-4bf8-85a6-991e1c2c0a3e.pdf

• Question 177:

  Which of the following MUST be defined before determining alignment goals?

  A. External laws and regulations

  B. Stakeholder drivers and needs

  C. Governance and management objectives

  Correct Answer: C

  Reference: https://www.joetheitguy.com/cobit-a-z/

• Question 178:

  Recognizing and rewarding EGIT implementation program performance is MOST beneficial when:

  A. executing the program plan.

  B. measuring realized program benefits.

  C. reviewing the effectiveness of the program.

  D. assigning key tasks to defined roles.

  Correct Answer: B

  According to the COBIT 2019 Design Guide , recognizing and rewarding EGIT implementation program performance is most beneficial when measuring realized program benefits [1]. This is because measuring the realized program benefits allows for continuous feedback and evaluation, which can help to identify areas where the program can be improved and where additional resources may be needed to achieve desired outcomes. Additionally, measuring realized program benefits helps to ensure that the program is appropriately rewarded for its successes and helps to motivate the team to continue working towards successful program outcomes.

• Question 179:

  When tailoring a governance system for an enterprise, which of the following is MOST important to consider for an operating environment with a high compliance requirement?

  A. Enterprise goals

  B. Enterprise strategy

  C. Threat landscape

  D. Geopolitical situation

  Correct Answer: C

  According to the COBIT 2019 Official Manual, it is important to consider the threat landscape when tailoring a governance system for an enterprise. This is especially important for operating environments with a high compliance requirement, as it helps ensure that the required security measures are in place to protect the enterprise from potential threats. Additionally, it is important to consider the enterprise goals and strategy when tailoring a governance system, as these will help inform the decisions made regarding the appropriate security measures. The geopolitical situation is not as relevant when tailoring a governance system, as it does not directly affect the security measures that need to be in place.

• Question 180:

  The primary target audience for COBIT is:

  A. anyone responsible for the governance solution.

  B. assurance professionals responsible for evaluating and reporting on the existence of internal controls.

  C. business and IT management responsible for building and deploying IandT solutions.

  Correct Answer: C

  The course is suitable for business managers, chief executives, IT/IS auditors, internal auditors, information security and IT practitioners, consultants and IT/IS managers requiring an insight into the enterprise governance of IT and who may also be requiring certification as a COBIT 5. Reference: https://s3-eu-west-1.amazonaws.com/cdn.webfactore.co.uk/6176_2_cobit%C2%AE+5+foundation.pdf