COBiT 2019 Assessment B Flashcards

1
Q

Growth, innovation, cost leadership and stability are examples of which design factors?

A. Enterprise goals

B. Technology adoption strategy

C. Risk profile

D. Enterprise strategy

A

D. Enterprise strategy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Complete the sentence :

The ? organizes Governance and Management Objectives into five domains.

A. Governance framework

B. COBIT Core Model

C. Governance system

D. Maturity model

A

B. COBIT Core Model

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

In what sequence would the following occur in the COBIT Core Model?

  1. Build
  2. Support
  3. Plan
  4. Direct

A. 1,3,2,4

B. 4,3,2,1

C. 1,2,3,4

D. 4,3,1,2

A

D. 4,3,1,2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which of the following is a substep of the “Determine the initial scope of the governance system” phase in the governance system design process?

A. Understand enterprise strategy

B. Consider enterprise goals and apply the COBIT goals cascade

C. Consider the threat landscape.

D. Resolve inherent priority conflicts.

A

B. Consider enterprise goals and apply the COBIT goals cascade

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which process capability scheme does COBIT® 2019 support?

A. ISO/IEC 15504

B. CMMI

C. None

D. ISO/IEC 33000

A

B. CMMI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Identify the missing words in the following sentence.
Managed IT Changes is considered a management objective of the [?] domain.

A. Evaluate, Direct and Monitor (EDM)

B. Build, Acquire and Implement (BAI)

C. Align, Plan and Organize (APO)

D. Monitor, Evaluate and Assess (MEA)

A

B. Build, Acquire and Implement (BAI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q
  • *Which of the following are main criteria for information quality?**
    1. Intrinsic
    2. Contextual
    3. Integrity
    4. Security

A. 1,2,4

B. 1,3,4

C. 2,3,4

D. 1,2,3

A

A. 1,2,4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which of the following is NOT a component of the governance system?

A. Processes

B. Information

C. Risk profile

D. Organizational structures

A

C. Risk profile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which of the following is true about COBIT Performance Management CPM?

A. Process activities are associated to capability levels

B. Other governance and management component types (e.g., organizational structures, information) may also have capability levels defined for them

C. Maturity levels are associated with focus areas

D. All the above

A

A. 1,2,4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

An enterprise that is very risk averse will give more priority to management objectives that aspire to govern and manage risk and security. Which of the following objectives are more suitable?
EDM03 : Ensured risk optimization
APO12 : Managed risk,
APO13 : Managed security
APO11 : Managed Quality
DSS05 : Managed security services

B. EDM03, APO13, APO11, DSS05

C. APO12, APO13, APO11, DSS05

D. EDM03, APO12, APO11, DSS05

A

A. EDM03, APO12, APO13, DSS05

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is COBIT design process phase called when inherent priority conflicts are resolved?

A. Understand the enterprise context and strategy

B. Determine the initial scope of the governance system

C. Refine the scope of the governance system

D. Conclude the governance system design

A

D. Conclude the governance system design

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the maturity level for focus area when the enterprise is focused on continuous improvement?

A. Level 2-Managed

B. Level 4-Quantitative

C. Level 3-Defined

D. Level 5-Optimizing

A

D. Level 5-Optimizing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A focus area is of maturity level “managed” if

A. Work is completed but the full goal and intent of the focus area are not yet achieved

B. Planning and performance measurement take place, although not yet in standardized way.

C. The enterprise is focused on continuous improvement

D. Work may or may not be completed towards achieving the purpose of governance and management objectives in the focus area

A

B. Planning and performance measurement take place, although not yet in standardized way.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the name given to the element that can influence in different ways the tailoring of the governance system of an enterprise.

A. Design factor

B. Governance component

C. Governance system principle

D. Governance framework principle

A

A. Design factor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the term used to describe the key decision-making entities in an enterprise?

A. Enterprise functions

B. Decisional positions

C. Leadership entities

D. Organizational structures

A

D. Organizational structures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which management objective supports the digital transformation strategy of the organization and delivers the desired value through a road map of incremental changes?

A. APO04 : Managed innovation

B. APO03 : Managed enterprise architecture

C. APO02 : Managed strategy

D. APO05 : Managed portfolio

A

C. APO02 : Managed strategy

17
Q

What is the purpose of the Goals Cascade?

A. Consider the Inputs and Outputs of an IT process in the enterprise

B. Define and implement the Enterprise Architecture of an enterprise

C. Support alignment between enterprise needs and IT solutions and services

D. Support the definition of clear roles and responsibilities in an enterprise

A

C. Support alignment between enterprise needs and IT solutions and services

18
Q

At what level are Inputs and Outputs defined?

A. Processes

B. Management practices

C. Information flow and Items

D. Activities

A

C. Information flow and Items

19
Q

Variant components are

A. Described in the COBIT core model and apply in principle to any situation

B. Generic in nature but need customization before being practically implemented

C. Based on generic components but are tailored for a specific purpose

D. None of the above

A

C. Based on generic components but are tailored for a specific purpose

20
Q

Identify the missing word(s) in the following sentence.
A(An)____________ ? describes a certain governance topic, domain or issue that can be addressed by a collection of governance and management objectives and their components.

A. Governance system

B. Focus area

C. Alignment goal

D. Enterprise goal

A

B. Focus area

21
Q

Which activity should be done by governance?

A. Implement risk management

B. Set principles and policies


C. Execute strategy


D. Plan activities to meet enterprise goals

A

B. Set principles and policies


22
Q

Which aspects of a Governance and management system are impacted by design factors?

A. Management Objective Priority and Target Capability Levels

B. Specific Focus Areas

C. Component Variations

D. All the above

A

D. All the above

23
Q

What is the most suitable process domain for skills such as Portfolio Management?

A. Deliver, Service and Support (DSS)

B. Monitor, Evaluate and Assess (MEA)

C. Build, Acquire and Implement (BAI)

D. ​Align, Plan and Organise (APO)

A

D. ​Align, Plan and Organise (APO)

24
Q

When an enterprise identifies the most relevant enterprise goal(s) from the enterprise goal list and applies the goals cascade, this will lead to

A. An increase in overall risk

B. A change in the entreprise strategy

C. A selection of priority management objectives.

D. An expansion in the enterprise portfolio

A

C. A selection of priority management objectives.

25
Q

Which component translates desired behavior into practical guidance for day-to-day management.

A. Services, Infrastructure and Applications

B. Principles, Policies and Frameworks

C. Culture, Ethics and Behavior

D. People, Skills and Competencies

A

B. Principles, Policies and Frameworks

26
Q

An enterprise that uses DevOps in solution development and operations will require specific activities, organizational structures, culture, etc.. Those components are focused on which of the following?
APO10 : Managed Vendors
BAI03 : Managed solutions identification
DSS01 : Managed operations

A. APO10, BAI03

B. APO10, DSS01

C. BAI03, DSS01

D. None of the above

A

C. BAI03, DSS01

27
Q

Which option is NOT a benefit to the enterprise of using the COBIT framework?

A. Creating value for the enterprise through I&T,

B. Maintaining and increasing value derived from existing I&T

C. Eliminating IT initiatives and assets that are not creating sufficient value

D. Managing business processes

A

D. Managing business processes

28
Q

To which stakeholder does COBIT provide guidance in how to organize and monitor performance of I&T across the enterprise?

A. The board

B. Business managers

C. Executive management

D. Assurance providers

A

C. Executive management

29
Q

Which most senior official is responsible for aligning IT and business strategies, and accountable for planning, resourcing and managing delivery of I&T services and solutions?

A. Chief Executive Officer (CEO)

B. Chief Information Officer (CIO)

C. Chief Technology Officer (CTO)

D. Chief Digital Officer (CDO)

A

B. Chief Information Officer (CIO)

30
Q
  • *What is the correct order of steps of the governance system design process?**
    1. Understand the enterprise context and strategy
    2. Conclude the governance system design
    3. Refine the scope of the governance system.
    4. Determine the initial scope of the governance system

A. 1,2,3,4

B. 2,4,3,1

C. 1,4,3,2

D. 4,3,1,2

A

C. 1,4,3,2

31
Q

Which is NOT a principle of a governance system?

A. A governance system should be dynamic

B. A governance system should be tailored to the enterprise’s needs

C. A governance system should clearly distinguish between governance and management activities and structures.

D. A governance should provide a full description of the whole IT environment of an enterprise.

A

D. A governance should provide a full description of the whole IT environment of an enterprise.

32
Q

Governance programs need to

A. Be sponsored by executive management

B. Be properly scoped

C. Define objectives that are attainable

D. All the above

A

D. All the above

33
Q
  • *What is the missing word?**
  • *COBIT’s goals-cascade concept is a ? approach that helps organizations to create enterprise goals from its stakeholder drivers and needs.**

A. Bottom-up

B. Top-down

C. Horizontal

D. Analytical

A

B. Top-down

34
Q
  • *Identify the missing word.**
  • *COBIT is a ? for the governance and management of enterprise information and technology of the whole enterprise**.

A. System

B. Standard

C. Framework

D. Guidance

A

C. Framework

35
Q

Which of the following is NOT a principle of COBIT Performance Management (CPM)?

A. The CPM should provide reliable, repeatable and relevant results

B. The CPM must be flexible, so it can support the requirements of different organizations with different priorities and need

C. The CPM should be simple to understand and use.

D. The CPM should follow a performance management standard

A

D. The CPM should follow a performance management standard

36
Q

One of the common reasons why some governance system implementations fail is that

A. They are not initiated and then managed properly as programs to ensure that benefits are realized

B. They are not initiated and then controlled properly to avoid cost overrun

C. Risks are not addressed and mitigated properly and resources are not optimized

D. Business stakeholders and members of IT are not involved in the design process

A

A. They are not initiated and then managed properly as programs to ensure that benefits are realized

37
Q

Generic or variant elements that aid the alignment of the framework to the organization’s needs are called?

A. Components

B. Design factors

C. Enablers

D. Focus areas

A

A. Components

38
Q

Which phase in the COBIT implementation approach aligns I&T-related objectives with enterprise strategies and risk, and prioritizes the most important enterprise goals, alignment goals and processes?

A. Phase 4—What Needs to Be Done?

B. Phase 3—Where Do We Want to Be?

C. Phase 1—What Are the Drivers?

D. Phase 2—Where Are We Now?

A

D. Phase 2—Where Are We Now?

39
Q

An underlying principle for COBIT is that

A. It can manage all IT aspects

B. It helps achieve all other industry frameworks’ objectives

C. It integrates well with other industry frameworks

D. It can replace all other industry frameworks

A

C. It integrates well with other industry frameworks