Isaca COBIT COBIT-2019 Questions & Answers

• Question 41:

  An enterprise that specializes in software development is designing a new IT governance system as part of a transition from traditional waterfall to a more agile approach. Which step in the design phase would this transition impact the MOST?

  A. Compliance requirements

  B. Implementation method

  C. Sourcing model

  Correct Answer: B

• Question 42:

  What functional task area is responsible for assessing the potential return on investment (ROI) during future state planning?

  A. Continuous improvement

  B. Change enablement

  C. Risk management

  D. Program management

  Correct Answer: D

  According to the Official COBIT 2019 Study Manual from Isaca, the Program Management functional task area is responsible for assessing the potential return on investment (ROI) during future state planning. This includes creating a business case, assessing the economic benefits and costs associated with the project, and developing a roadmap for implementation. Program management also involves ensuring that the project is aligned with the organization's strategic goals and objectives, as well as assessing risks and developing mitigation plans.

• Question 43:

  Which of the following involves numeric mapping tables created for each of the design factors?

  A. An architecture design approach

  B. A quantitative approach

  C. A qualitative approach

  D. A risk-based approach

  Correct Answer: B

  According to the COBIT 2019 Design Guide, a quantitative approach involves numeric mapping tables created for each of the design factors. This approach is used to assign numerical values to design factors and assess their relative importance in the governance system design. It provides a structured and systematic approach to decision-making and helps to ensure that the governance system design aligns with the enterprise's overall strategy and objectives.

• Question 44:

  Which of the following functions would be responsible for executing a contract that retains independent legal consultants to review the level of regulatory compliance of a proposed IT solution?

  A. Procurement office

  B. landT security

  C. Executive leadership team

  D. Legal office

  Correct Answer: D

  According to the ISACA COBIT 2019 Framework, the Legal office is responsible for executing contracts that retain independent legal consultants to review the level of regulatory compliance of a proposed IT solution. This is specified in Domain 1, Objective 1.2: "Ensure external legal, regulatory and contractual compliance". The Legal office is responsible for ensuring compliance with applicable laws and regulations, as well as for managing risk associated with any noncompliance.

• Question 45:

  The alignment goal titled "Knowledge, expertise and initiatives for business innovation" is aligned to which IT balanced scorecard (BSC) dimension?

  A. Learning and Growth

  B. Customer

  C. Internal

  Correct Answer: A

• Question 46:

  Who is accountable for monitoring the performance of the execution of an EGIT implementation program plan against success metrics and adjusting long-term targets when necessary?

  A. Board of directors

  B. IT process owners

  C. IT audit department

  D. CIO

  Correct Answer: A

  According to the ISACA COBIT 2019 Framework, the Board of Directors is responsible for monitoring the performance of the execution of an EGIT implementation program plan against success metrics and adjusting long-term targets when necessary. This is specified in Domain 4, Objective 4.1: "Establish and govern the enterprise governance of IT (EGIT)". The Board of Directors is responsible for ensuring that the EGIT implementation program plan is executed according to the organization's objectives and in alignment with the enterprise strategy. Additionally, the Board of Directors is responsible for monitoring the EGIT program's progress and making adjustments when necessary.

• Question 47:

  What is the BEST approach when determining which of the archetype enterprise strategies most closely aligns with an enterprise's own strategy?

  A. Select a mix of equally important strategy archetypes.

  B. Select one primary strategy archetype and only one secondary strategy archetype.

  C. Select all the strategy archetypes that are applicable to the enterprise.

  D. Select the strategy archetype most closely aligned to the enterprise's information and technology risk profile.

  Correct Answer: D

  Select the strategy archetype most closely aligned to the enterprise's information and technology risk profile. When determining which of the archetype enterprise strategies most closely aligns with an enterprise's own strategy, it is best to select the strategy archetype that best fits the enterprise's information and technology risk profile. This will ensure that the enterprise's strategy is tailored to its own specific risk profile and that the strategy is best suited to address its unique challenges. This is outlined in the COBIT 2019 Framework: Introduction and Methodology, which states that "It is important to select the strategy archetype that best fits the enterprise's IT risk profile and is best suited to address the challenges faced by the enterprise." (ISACA, COBIT 2019 Framework: Introduction and Methodology, USA, 2018. Reprinted with permission).

• Question 48:

  The identification and definition of EGIT continual improvement success metrics is recommended and completed when:

  A. executing the EGII implementation program plan.

  B. reviewing the effectiveness of EGIT implementation plan results.

  C. defining the EGIT implementation road map

  D. developing the EGIT implementation program plan.

  Correct Answer: D

  According to the official COBIT 2019 Study Manual from ISACA, the identification and definition of EGIT continual improvement success metrics should be completed when developing the EGIT implementation program plan. This involves defining measurable goals that can be used to measure the success of the improvement program, such as cost savings, increased efficiency, and improved customer satisfaction.

• Question 49:

  An enterprise has hired a consultant to resolve the issue of multiple IT-enabled change initiatives frequently being delivered late and failing to meet business needs. Which of the following management objectives from the COBIT core model is BEST for the consultant to recommend for developing a governance and management system?

  A. DSS03 Managed Problems

  B. APO10 Managed Vendors

  C. AP014 Managed Data

  D. BAI11 Managed Projects

  Correct Answer: D

  As per COBIT 2019, the objective of BAI11 Managed Projects is to ensure that projects are planned, executed and delivered within scope, time, cost and quality parameters, and that they deliver expected benefits. The objective is relevant in the scenario described where the enterprise is facing issues with multiple IT-enabled change initiatives being delivered late and failing to meet business needs. The consultant can recommend developing a governance and management system around BAI11 Managed Projects to address these issues.

• Question 50:

  Which of the following is CRITICAL to ensuring IandT-related decisions are aligned with the enterprise's strategies and objectives?

  A. Compliance with legal, contractual and regulatory requirements is confirmed.

  B. Technology and innovation processes are overseen by the board.

  C. Assurance on controls is obtained from independent IT auditors.

  Correct Answer: A