COBIT 2019 FOUNDATION

An enterprise interested in adapting COBIT components with relaxed documentation such as inputs and outputs references should refer to. A) goals and metrics. B) process practices. C) process activities.

Within an organizational structure chart (RACI chart), which role drives a given task or process?. A) Responsible (R) role. B) Informed (I) role. C) Accountable (A) role.

DevOps is an example of which of the following?. A) A component variant and focus area. B) A design factor and hybrid method. C) A process and service.

Time-to-market is a metric that is directly related to which of the following enterprise goals?. A) Portfolio of competitive products and services. B) Optimization of internal business process functionality. C) Managed digital transformation programs.

The value that I&T delivers should be: A) restricted to maintaining and increasing value derived from existing I&T investments. B) aligned directly with the values on which the business is focused. C) focused exclusively on I&T investments that generate financial benefits.

Which of the following benefits derived from the use of COBIT is PRIMARILY associated with an internal stakeholder?. A) COBIT helps to ensure that a third-party vendor's operations are secure. B) COBIT helps to ensure that a governance system is in place to sustain regulatory compliance. C) COBIT provides insight on how to derive value from the use of I&T.

Which of the following domains deals with the definition of IT solutions and their integration in business processes?. A) Deliver, Service and Support (DSS). B) Align, Plan and Organize (APO). C) Build, Acquire and Implement (BAI).

The Goals Cascade model illustrates that each governance or management objective supports the achievement of alignment goals that are related to: A) individual business unit goals. B) larger enterprise goals. C) IT-specific goals.

The primary target audience for COBIT is: A) business and IT management responsible for building and deploying I&T solutions. B) assurance professionals responsible for evaluating and reporting on the existence of internal controls. C) anyone responsible for the governance solution.

Which of the following management objectives would be given HIGHER priority in an enterprise's governance system when the enterprise is very risk-averse?. A) Managed security. B) Managed operations. C) Managed portfolio.

Who is responsible for the oversight of structures and mechanisms that drive enterprise governance of information and technology?. A) The board. B) External regulators. C) Individual business units.

An enterprise is not having success implementing IT governance because key staff are not participating in planning meetings. What is the MOST likely underlying cause?. A) Lack of senior leadership commitment. B) Lack of consequences for not attending. C) Failure to utilize program management principles.

How can an enterprise determine whether expected outcomes from initiatives are being achieved?. A) Implement a monitoring system. B) Track key risk indicators (KRIs). C) Assess business leader satisfaction.

The level achieved when all processes of a focus area achieve a particular capability level is referred to as: A) the maturity level. B) the performance level. C) the rating level.

The alignment goal titled "Knowledge, expertise and initiatives for business innovation" is aligned to which IT balanced scorecard (BSC) dimension?. A) Internal. B) Customer. C) Learning and Growth.

Which of the following is the PRIMARY objective of implementing the process of managed innovation?. A) Improving customer experience. B) Enhancing brand reputation. C) Avoiding technological obsolescence.

In most cases, management of the enterprise is the responsibility of: A) the board of directors. B) the project management office. C) the executive management team.

Which of the following is a characteristic of the COBIT framework?. A) COBIT addresses the activities required to manage all I&T within an enterprise. B) COBIT distinguishes between governance and management activities. C) COBIT organizes enterprise business processes.

Which of the following is a common characteristic of process capability levels 2 to 5?. A) The process's performance is monitored. B) The process's purpose is achieved. C) The process's description is well defined.

According to Capability Maturity Model Integration (CMMI), which of the following BEST describes Level 2 within the five maturity levels for processes?. A) The process achieves its purpose in a much more organized way using organizational assets, and processes are typically well defined. B) The process achieves its purpose through the application of a basic, yet complete, set of activities that can be characterized as performed. C) The process more or less achieves its purpose through the application of an incomplete set of activities that can be characterized as intuitive and not very organized.

Which of the following is considered good practice with regard to performance management of organizational structures?. A) The organizational structure is informally established to enable agile change management. B) Decision rights of the organizational structure are situation-dependent to facilitate escalation processes. C) Organizational meeting reports/minutes are available and meaningful to ensure transparency.

Which of the following is the role or structure formed by a group of stakeholders and experts accountable for guiding IT-related matters and decisions?. A) Architecture board. B) I&T governance board. C) Executive committee.

The enterprise goals defined in the COBIT framework are structured along which of the following dimensions?. A) Corporate rationalization. B) Balanced scorecard. C) Business impact analysis.

Which of the following COBIT 2019 publications includes a workflow for planning a tailored governance system for the enterprise?. A) COBIT 2019 Implementation Guide: Implementing and Optimizing an Information and Technology Governance Solution. B) COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution. C) COBIT 2019 Framework: Governance and Management Objectives.

Before designing an enterprise IT governance system, an organization should FIRST review and understand: A) the enterprise's risk profile. B) current IT-related issues. C) the enterprise's strategy.

Which of the following enterprise risk management concepts is MOST important to fully understand prior to finalizing the design of an IT governance system?. A) The enterprise's risk profile. B) The enterprise's risk appetite. C) The enterprise's risk tolerance.

When tailoring the COBIT organization structure to organizational context and priorities, which of the following should be done NEXT after mapping organizational structures with specific responsibility or accountability?. A) Revise the organizational hierarchy with job descriptions. B) Adapt the COBIT roles and organizational structures. C) Add two levels of involvement for consulted and informed.

Who is responsible for the oversight of structures and mechanisms that drive enterprise governance of information and technology (EGIT)?. A) Individual business units. B) External regulators. C) The board.

Which of the following is MOST important to providing trust in operations, confidence in the achievement of enterprise objectives, and an adequate understanding of residual risk?. A) A risk management framework. B) A managed system of internal controls. C) A continuity of operations response plan.

A governance or management objective always relates to: A) a group of related processes. B) a single process. C) a single related component.

Which of the following COBIT components is a PRIMARY driver for the execution of corrective actions required to achieve governance or management objectives?. A) Principles, policies and frameworks. B) Organizational structures. C) People, skills and competencies.

Which of the following metrics would BEST enable an enterprise to evaluate an alignment goal specifically related to security of information and privacy?. A) Number of critical business processes supported by up-to-date infrastructure and applications. B) Ratio and extent of erroneous business decisions in which erroneous I&T related information was a key factor. C) Number of confidentiality incidents causing financial loss, business disruption or public embarrassment.

The enterprise goal titled "Optimization of Business Process Costs" is aligned to which balanced scorecard (BSC) dimension?. A) Internal. B) Customer. C) Growth.

Once IT governance is implemented, what is the NEXT phase in the life cycle of governance?. A) Initiating improvements. B) Measuring objectives. C) Updating the program.

COBIT defines stakeholder value creation as which of the following?. A) Realization of benefits at a reduced resource cost while mitigating risk. B) Realization of benefits at a controlled resource cost while controlling risk. C) Realization of benefits at a controlled resource cost while controlling riskB) Realization of benefits at a controlled resource cost while controlling risk.

How do the assigned capability levels in the COBIT core model facilitate the achievement of the different capability levels?. A) By setting performance metrics for enabler goals. B) By defining organizational structure with specific roles and responsibilities. C) By providing clear definition of the processes and required activities.

The enterprise goal of compliance with external laws and regulations is aligned to which balanced scorecard (BSC) dimension?. A) Financial. B) Internal. C) Growth.

Which of the following is the MOST essential attribute of the highest process capability level (Level 5)?. A) Full achievement of the process's purpose. B) Pursuit of continuous improvement. C) Quantitative performance measures.

Which of the following COBIT organizational structure roles fulfills the practice and creates the intended outcome?. A) Consulted (C). B) Responsible (R). C) Accountable (A).

What is the BEST way to determine whether IT governance is achieving intended outcomes one year after implementation?. A) Survey the satisfaction level of key business stakeholders. B) Evaluate performance measurements identified in the business case. C) Review change drivers to determine whether corresponding changes were successful.

Which COBIT principle addresses the need to consider how any changes in technology or strategy impact the enterprise governance system as a whole?. A) A governance system should be tailored to the enterprise's needs. B) A governance system should be dynamic. C) A governance system should cover the enterprise end-to-end.

Which of the following is an important principle of a proper governance framework?. A) The governance framework should allow for flexibility in addressing new issues. B) The governance framework should be rigorous and focus exclusively on prioritized existing issues. C) The governance framework should be based on a single relevant standard, framework or regulation.

Which of the following is an alignment goal according to COBIT?. A) Compliance with external laws and regulations. B) Optimization of business process functionality. C) Agility to turn business requirements into operational solutions.

Which of the following is determined at each level of a capability maturity model?. A) Which internal policies are relevant to a process at a given level. B) Who is responsible for ensuring all activities at a given level are performed successfully. C) How well a process is implemented and performing at a given level.

The alignment goal titled "Enabling and supporting business processes by integrating applications and technology" is aligned to which IT balanced scorecard (BSC) dimension?. A) Financial. B) Customer. C) Internal.

Which of the following is a key component of a governance system?. A) Performance metrics. B) Legal and regulatory requirements. C) Processes.

Which of the following is a guiding principle in the development of COBIT?. A) COBIT serves as a comprehensive standalone framework that covers all relevant I&T related activities. B) COBIT includes relevant content from other related I&T standards, frameworks and regulations. C) COBIT aligns with other related and relevant I&T standards, frameworks and regulations.

MOST critical that IT governance objectives: A) reduce unmitigated IT risk. B) increase business profitability. C) align with enterprise goals.

COBIT addresses governance issues by doing which of the following?. A) Providing a full description of the entire IT environment within an enterprise. B) Defining specific governance strategies and processes to implement in specific situations. C) Grouping relevant governance components into objectives that can be managed to a required capability level.

Which element of a business case BEST enables senior leadership to assess the future success of the IT governance program?. A) Qualitative perspective. B) Investment justification. C) Quantified benefits.

Which of the following components of governance and management objectives includes the expected capability level?. A) Alignment goals. B) Process activities. C) Organization structure.

Which of the following describes the COBIT performance model?. A) The COBIT performance model is unique and not aligned with existing maturity and capability models. B) The COBIT performance model is integrated into the COBIT core model. C) The COBIT performance model is a stand-alone model that can be used in conjunction with the COBIT core model.

The alignment goal "Delivery of I&T services in line with business requirements" is organized into which IT balanced scorecard (BSC) dimension?. A) Financial. B) Internal. C) Customer.

Which of the following is an element of governance?. A) Building plans to align with the direction set by the governance body. B) Evaluating stakeholder needs to determine enterprise objectives. C) Monitoring activities designed to achieve enterprise objectives.

Which of the following governance components is ESSENTIAL for effective decision making?. A) People, skills and competencies. B) Processes. C) Organizational structures.

hich of the following is the PRIMARY purpose of implementing an enterprise governance of information and technology (EGIT) system?. A) To document I&T business objectives and processes. B) To deliver stakeholder value from I&T-enabled investments. C) To comply with I&T regulatory requirements.

Which of the following alignment goals is MOST likely to be associated with the metric "percent of I&T services with defined operational costs and expected benefits?". A) Quality of technology-related financial information. B) Delivery of I&T services in line with business requirements. C) Agility to turn business requirements into operational solutions.

Which of the following should be scheduled for completion FIRST when prioritizing improvement initiatives?. A) Initiatives with the lowest cost regardless of expected business value. B) Initiatives that are the least expensive in order to lower risk due to failure. C) Initiatives that are easiest to achieve and will garner business benefits.

How does the flexibility of COBIT design factors benefit an enterprise?. A) It allows users to define and build the enterprise IT strategy from the framework. B) It allows users to tailor the framework to align with specific enterprise needs. C) It allows users to modify existing focus areas while ensuring new ones cannot be added.

The alignment goal titled "Delivery of programs on time, on budget and meeting requirements and quality standards" is part of which IT balanced scorecard (BSC) dimension?. A) Customer. B) Financial. C) Internal.

Which of the following alignment goals is located within the Learning and Growth dimension of the IT balanced scorecard (BSC)?. A) Competent and motivated staff with mutual understanding of technology and business. B) Realized benefits from I&T-enabled investments and services portfolio. C) Delivery of I&T services in line with business requirements.

The alignment goal titled "Security of information, processing infrastructure and privacy" is part of which IT balanced scorecard (BSC) dimension?. A) Customer. B) Learning and growth. C) Internal.

Which of the following is a PRIMARY benefit associated with the management objective "managed strategy"?. A) Service delivery is facilitated by adopting the latest technology innovations. B) Effective communication channels are established across all levels of management. C) Desired value is delivered through a roadmap of incremental changes.

When designing an IT governance system, the NEXT step after considering the enterprise's strategic business objectives is to assess: A) the IT implementation method. B) the role of IT within the enterprise. C) the enterprise's risk profile.

Which of the following cascades to enterprise goals?. A) Enterprise strategy. B) Organizational objectives. C) Stakeholder needs.

The COBIT framework is designed to meet the I&T goals for which of the following?. A) Board and executive management only. B) IT department only. C) Entire enterprise.

In Phase 1 of the COBIT implementation approach, which of the following should be used to outline executive management's desire for change within the enterprise?. A) Business case. B) Balanced scorecard. C) Risk assessment.

Which of the following is a KEY principle of an enterprise governance system?. A) It should focus only on technology and information processing that takes place within the IT function. B) It should focus only on technology and information processing that takes place in cost centers. C) It should focus on all technology and information processing, regardless of where processing takes place.

Within a tailored enterprise governance system, a sourcing model for information and technology is associated with: A) relevant industry frameworks. B) design factors. C) focus areas.

One year after IT governance is implemented, what KEY question should be asked and evaluated?. A) Has the enterprise achieved expected benefits?. B) Has the enterprise reduced its risk exposure?. C) Has the enterprise leveraged lessons learned?.

Which role is responsible for managing the development, implementation, evaluation and ongoing maintenance of new and existing products and services?. A) Service manager. B) Product manager. C) Business process owner.

Innovation and differentiation are examples of: A) enterprise strategy design factors. B) enterprise objectives design factors. C) enterprise goal risk factors.

The different levels of involvement associated with roles and organizational structure are PRIMARILY divided into: A) responsibility and accountability levels. B) governance and management levels. C) operational and practitioner levels.

Which of the following is CRITICAL to ensuring I&T-related decisions are aligned with the enterprise's strategies and objectives?. A) Assurance on controls is obtained from independent IT auditors. B) Technology and innovation processes are overseen by the board. C) Compliance with legal, contractual and regulatory requirements is confirmed.

Which of the following is a principle associated with the key components of a governance framework?. A) The relationships among key components should be identified to maximize consistency. B) Key components should function independently to maintain integrity. C) The interaction among key components will impede automation and should therefore be limited.

Which of the following BEST describes the "managed innovation" management objective of the COBIT core model?. A) Optimize individual IT capabilities to support the IT strategy and roadmap. B) Support the digital transformation strategy of the organization and deliver the desired value. C) Achieve competitive advantage, improve customer experience and improve operational effectiveness.

Within the principles for a governance system, the value generated from the use of I&T reflects: A) the ratio of costs versus achieved service levels. B) a balance among benefits, risk and resources. C) maximized financial benefits to the investment portfolio.

Which of the following enterprise goals is within the Customer dimension of the IT balanced scorecard?. A) Quality of management information. B) Delivery of programs on time and on budget. C) Product and business innovation.

Which of the following comprises the "information flow" component of a governance system?. A) People, skills and competencies. B) Process practices that include inputs and outputs. C) Assignment of responsibility and accountability roles.

Enterprise governance of information and technology (EGIT) is an integral part of: A) corporate governance. B) risk governance. C) financial governance.

Which "Role of IT" design factor is viewed as a driver for business process and service innovation?. A) Support. B) Strategic. C) Turnaround.

Which of the following is an enterprise goal that would MOST likely be evaluated by using a metric "percent of services that meet or exceed targets in revenues and market share"?. A) Portfolio of competitive products and services. B) Optimization of business process costs. C) Customer-oriented service culture.

The design factor associated with a highly regulated enterprise is likely to attribute MORE importance to which of the following?. A) Documented work products and policies. B) Managed strategy and operations. C) Understanding of the business by IT professionals.

Which of the following COBIT publications also references other standards and frameworks?. A) COBIT 2019 Implementation Guide: Implementing and Optimizing an Information and Technology Governance Solution. B) COBIT 2019 Framework: Governance and Management Objectives. C) COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution.

What IT governance implementation approach should be utilized in order to achieve maximum enterprise benefits?. A) Including improvement initiatives in implementation. B) Treating implementation as a program. C) Separating business and IT-related activities during implementation.

Which COBIT domain of management objectives incorporates managed risk?. A) Align, plan and organize (APO). B) Build, acquire and implement (BAI). C) Deliver, service and support (DSS).

When assessing organizational structures, it is MOST helpful when subcriteria for each criterion are defined and linked to: A) job descriptions. B) performance metrics. C) capability levels.

Which of the following is a KEY principle associated with the Accountable (A) role of an organizational structure?. A) Accountability cannot be shared. B) Accountability can be delegated. C) Accountability must be approved by the board.

What is the BEST way for senior leadership to communicate its expectations for IT governance prior to commencing a governance implementation plan?. A) Include a scope statement in the business case. B) Add key performance indicators (KPIs) to a balanced scorecard. C) Generate an IT governance policy.

Which of the following is a CRITICAL requirement when the IT function is strategic and crucial to the success of the business?. A) High involvement of IT-related roles in organizational structures. B) Highly capable security-related processes and ensured risk optimization. C) Documented IT policies and procedures.

While value delivery focuses on the creation of value, risk management focuses on which of the following?. A) Achievement of value. B) Optimization of value. C) Preservation of value.

Which of the following BEST enables a governance system to achieve governance and management objectives?. A) The governance system includes many components that work together in a holistic way. B) The governance system focuses specifically on organizational structures for decision making. C) The governance system primarily addresses the culture and behavior of the individuals involved in the system.

Which of the following should a stakeholder do to optimize the use of COBIT?. A) Ensure COBIT guidance is strictly followed without alterations. B) Customize COBIT guidance to meet specific enterprise needs. C) Customize COBIT guidance to meet industry best practices.

An enterprise's business line managers have voiced concerns because the cost of governance-required improvements is perceived as too expensive. How can the IT governance team BEST address this concern?. A) Involve business line managers in the improvement planning process. B) Improve the communication of business benefits. C) Share the return on investment (ROI) analysis.

Which of the following is the FINAL action before completing the design of an IT governance system?. A) Selecting an implementation metho. B) Determining a sourcing model. C) Resolving inherent priority conflicts.

Which of the following benefits derived from the use of COBIT is PRIMARILY associated with an external stakeholder?. A) COBIT helps to ensure compliance with applicable rules and regulations. B) COBIT helps to manage the dependency on the use of external service providers. C) COBIT provides guidance on how to organize and monitor the performance of I&T across the enterprise.

Which of the following is based on generic components of a governance system but are tailored for a specific purpose or context within a focus area?. A) Variant components. B) Design factors. C) Guiding principles.

When tailoring the COBIT organizational structure, which of the following is the PRIMARY purpose for aligning role descriptions to the enterprise's business context, organization and operating environment?. A) Assigning levels of accountability and responsibility. B) Developing hierarchy and reporting structure. C) Preparing key goal areas and metrics for each role.

Which of the following is a principle of a proper governance framework?. A) It should be based on a conceptual model. B) It should be self-contained and not allow for the addition of new content. C) It should be independent of other standards, frameworks and regulations.

Which enterprise role ensures the board is kept informed of major decisions related to value delivery of I&T deployment in accordance with the enterprise strategy?. A) Executive committee. B) Chief information officer. C) Chief executive officer.

The alignment goal titled "Competent and motivated staff with mutual understanding of technology and business" is part of which IT balanced scorecard (BSC) dimension?. A) Learning and growth. B) Internal. C) Customer.

The number of focus areas describing a certain governance topic or issue that can be addressed by governance objectives is: A) virtually unlimited. B) determined by the size of the enterprise. C) dependent on process maturity.

Which of the following is an enterprise goal according to COBIT?. A) Managed IT-related risks. B) Business service continuity and availability. C) IT compliance with internal policies.

According to the principles for a governance framework, which of the following is a PRIMARY consideration when addressing new issues within a flexible and open framework?. A) Aligning with internal IT policies and procedures. B) Identifying related industry standards. C) Maintaining integrity and consistency.

Which of the following must be done FIRST when implementing a culture and behavior governance component to ensure good governance and management of IT?. A) Define an approach for assessing the level of compliance. B) Define a set of desirable or undesirable behaviors. C) Determine the capability levels.

When making I&T-related decisions, stakeholders will find the COBIT framework MOST useful for: A) defining the components and the levels at which decisions should be made. B) obtaining prescribed decisions or solutions to specific problems and issues. C) deciding on the best solution in a given situation.

Which of the following would be an appropriate metric associated with an enterprise goal of "Business service continuity and availability"?. A) Ratio of significant incidents that were not identified in risk assessments vs. total incidents. B) Number of business processing hours lost due to unplanned service interruptions. C) Satisfaction levels of board and executive management with business process capabilities.

Within the COBIT goals cascade, stakeholder drivers are transformed into: A) the enterprise's actionable strategy. B) business unit performance metrics. C) the enterprise's governance framework.

An enterprise that specializes in software development is designing a new IT governance system as part of a transition from traditional waterfall to a more agile approach. Which step in the design phase would this transition impact the MOST. A) Compliance requirements. B) Implementation method. C) Sourcing model.

In the implementation model, when is IT governance implementation risk BEST managed?. A) Just prior to operationalization. B) Throughout the life cycle. C) During the planning phase.

Which of the following MUST be done before an enterprise can determine performance measures for a process improvement initiative?. A) Calculate return on investment (ROI). B) Conduct a capabilities assessment. C) Perform a process risk assessment.

Which of the following is a PRIMARY objective of reviewing the effectiveness of a new IT governance system that has been operational for 6 months?. A) Identifying further governance requirements. B) Obtaining executive management support for IT governance. C) Evaluating business performance reports.

Which of the following components of the governance system are required for successful completion of all activities?. A) People, skills and competencies. B) Principles, policies and frameworks. C) Processes.

Which of the following is ESSENTIAL to help ensure that a project's benefits are identified and continually monitored?. A) Stage gate reviews by a governance team. B) A well-developed business case. C) Earned value management reporting.

What is the focus of an enterprise that has a cost leadership strategy design factor?. A) Medium-term cost equalization. B) Short-term cost minimization. C) Long-term cost optimization.

Which of the following components of a governance system translates desired behavior into practical guidance?. A) Culture, ethics and behavior. B) People, skills and competencies. C) Principles, policies and frameworks.

Which of the following is an IT implementation method design factor that focuses on software building, deployment and operations?. A) DevOps. B) Agile. C) Traditional.

IT governance has been operating for three years and is satisfactorily achieving desired outcomes. What would be the PRIMARY purpose of reexamining the IT strategic plan?. A) To assess improvement opportunities. B) To identify newly emerging risks. C) To lower service delivery costs.

Which of the following describes a specific governance topic, domain or issue that can be addressed by a collection of governance and management objectives and their components?. A) Enablers. B) Design factor. C) Focus area.

Which of the following BEST describes the objectives of the Evaluate, Direct and Monitor (EDM) domain?. A) Addressing the overall organization, strategy and supporting activities for IT. B) Addressing the operational delivery and support of I&T services, including security. C) Assessing strategic options and guiding senior management on the options chosen.

Which COBIT design factor is broken down into first mover, follower and laggard strategies?. A) Role of IT. B) Technology adoption. C) IT implementation.

Which of the following could be used to map documentation for governance and management practices?. A) Policies and standards used within the enterprise. B) Relevant inputs and outputs with source and destination. C) Process activities with detailed procedures.

Which of the following MUST be defined before determining alignment goals?. A) Governance and management objectives. B) External laws and regulations. C) Stakeholder drivers and needs.

Which of the following COBIT publications can be used to develop a roadmap for continuous governance improvement?. A) COBIT 2019 Framework: Governance and Management Objectives. B) COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution. C) COBIT 2019 Implementation Guide: Implementing and Optimizing an Information and Technology Governance Solution.

Which of the following components of a governance system are MOST likely to be underestimated as factors in the success of governance and management activities?. A) Principles, policies and frameworks. B) Culture, ethics and behavior. C) People, skills and competencies.

A consultant tasked with facilitating an enterprise's COBIT implementation has met with the CEO and identified enterprise goals based on mission and vision. Which of the following roles is BEST suited to meet with the consultant to identify alignment goals?. A) Chief financial officer. B) Chief risk officer. C) Chief information officer.

Which governance component identifies the human resource needs that must be met to achieve governance and management objectives?. A) People, skills and competencies. B) Culture, ethics and behavior. C) Information flow and items.

Which of the following aspects of organizational structure is MOST critical to ensure effective performance?. A) Escalation procedures are defined and applied. B) Required resources are made available, allocated and used. C) A clearly understood and well-documented mandate is in place.

Which of the following figures BEST illustrates the context of an enterprise governance of information and technology (EGIT) system?. A) EGIT -> Business/IT Alignment -> Value Creation. B) EGIT -> Risk Identification -> Risk Optimization. C) EGIT -> Business/IT Value -> Business/IT Alignment.

When refining the scope of a new IT governance system during the design phase, which of the following is the MOST significant driver to be considered?. A) The size of the enterprise. B) National or international locations. C) Cloud versus on-premises service.

Which COBIT domain of management objectives incorporates managed business process controls?. A) Align, Plan and Organize (APO). B) Build, Acquire and Implement (BAI). C) Deliver, Service and Support (DSS).

Which of the following BEST enables an enterprise to maximize value from the use of I&T?. A) A clearly defined I&T management structure. B) Well-documented and monitored business processes. C) An actionable strategy and governance system.

Which of the following components of the governance system are the KEY decision-making entities in an enterprise?. A) People, skills and competencies. B) Principles, policies and frameworks. C) Organizational structures.

Within the COBIT organizational structures component, which role is solely liable for the success and achievement of assigned tasks?. A) Accountable (A). B) Responsible (R). C) Consulted (C).

Which of the following COBIT components includes a list of artifacts with links to relevant governance and management practices?. A) Information flow and items. B) Organizational structures. C) Policies and procedures.

After IT department goals have been aligned with enterprise goals, the NEXT step is to link the alignment goals with: A) governance and management practices. B) governance and management performance metrics. C) governance and management objectives.

What would be the PRIMARY reason for management to conduct a process capability assessment?. A) To better understand the current state as compared to the target. B) To better understand the cost of implementing the improved process. C) To better understand the current level of risk versus future risk.

To gain the GREATEST benefit from the COBIT framework, a stakeholder should have a certain level of experience and a thorough understanding of: A) the entire enterprise. B) the regulatory compliance function. C) the IT function.

Which of the following BEST describes the goal of having a customer-oriented service culture?. A) Governance goal. B) Alignment goal. C) Enterprise goal.

Which of the following performance measures is used to assess a specific focus area?. A) Process capability rating. B) Key goal indicator. C) Maturity level.

The ability to rapidly turn business requirements into operational solutions is an example of which type of goal?. A) An alignment goal. B) A strategic goal. C) An enterprise goal.

Which of the following is a component of the governance system that provides an enterprise with the tools and systems for I&T processing?. A) Information. B) Principles, policies and frameworks. C) Services, infrastructure and applications.

Which of the following would be an appropriate metric to align with a goal of "Delivery of programs on time, on budget, and meeting requirements and quality standards"?. A) Level of user satisfaction with the quality and availability of I&T-related management information. B) Percent of business staff satisfied that IT service delivery meets agreed service levels. C) Percent of stakeholders satisfied with program/project quality.

Which of the following management objectives is related to optimization of system performance?. A) Managed availability and capacity. B) Managed service agreements. C) Managed I&T management framework.

The enterprise goal "Staff skills, motivation and productivity" is organized into which balanced scorecard (BSC) dimension?. A) Customer. B) Internal. C) Growth.

Which of the following components is important to update in a COBIT RACI chart to align with the enterprise's context, priorities and preferred terminology?. A) Enterprise procedures and job descriptions. B) Enterprise process practices and activities. C) Enterprise roles and organizational structures.

Which of the following frameworks has been used as a basis for developing guidance for the COBIT governance component of people, skills and competencies?. A) Cyber Security Framework. B) Skills Framework for the Information Age. C) Sans Security Policy Framework.

Which of the following is an example of a focus area within COBIT?. A) Digital transformation. B) Internet of Things. C) Robotic process automation.

Which of the following criteria must be met for a process to meet a higher capability level?. A) An identified subset of the activities of that level can be executed effectively. B) Capability is demonstrated on the most relevant process activities. C) All activities of that level are successfully performed.

Which of the following is IMPERATIVE to the successful implementation of IT governance?. A) IT governance identifies benchmarking standards. B) IT governance is sponsored by executives. C) IT governance includes identification of business risk.

Which of the following is MOST critical to ensuring the objective of managed availability and capacity?. A) Future prediction of I&T resource requirements. B) Identification of single points of failure. C) Allocation of budgets for business continuity.