COBIT5 Sample Questions Answers

Only 1 is true

Only 2 is true

Both 1 and 2 are true

Neither 1 or 2 is true

Ensure COBIT guidance is strictly followed without alterations

Customize COBIT guidance to meet specific enterprise needs

Customize COBIT guidance to meet industry best practices

Well-documented and monitored business processes

A clearly defined I&T management structure

An actionable strategy and governance system

An improvement target for identifiable gaps and solutions

The proposed solutions and definitions of the initiative

A review of the success factors of the initiative

How the investment and value creation will be monitored throughout the economic life cycle

Operating and using the new approaches

Forming the implementation team

Identifying the role players

Communicating outcome

Build, Acquire and Implement (BAI)

Deliver, Service and Support (DSS)

Align, Plan and Organize (APO)

Setting the Governance Framework

Identifying responsibilities for governance

Ensuring compliance with regulations

Optimization of IT assets, resources and capabilities

Treating implementation as a program

Separating business and IT-related activities during implementation

Including improvement initiatives in implementation

the deliverables of the task

who is providing input to the activities

the level of responsibility for process practices

the information to be provided

Physical infrastructure

Processes

IT Goals

Policies

To translate stakeholder needs into actionable goals

To influence whether something will work

To provide a simple architecture

To define the relationship between Governance and Management

It allows users to modify existing focus areas while ensuring new ones cannot be added

It allows users to define and build the enterprise IT strategy from the framework

At allows users to tailor the framework to align with specific enterprise needs

Enterprise roles and organizational structures

Enterprise process practices and activities

Enterprise procedures and job descriptions

Highly capable security-related processes and ensured risk optimization

High involvement of IT-related roles in organizational structures

Documented IT policies and procedures

Accountability must be approved by the board

Accountability can be delegated

Accountability cannot be shared

COBIT includes relevant content from other related I&T standards, frameworks and regulations

COBIT aligns with other related and relevant I&T standards, frameworks and regulations

COBIT servers as a comprehensive standalone framework that covers all relevant I&T-related activities

Forms the basis of a process capability assessment for the Capability Dimension

Provides the mechanism whereby defined Process Assessment Models era related measurement framework

Provides the basis for one or more Process Assessment Models

Provides the basis to undertake an assessment on the process dimension

Implement risk appetite

Set principles and policies

Execute strategy

Plan activities to meet enterprise goals

Stakeholder

Owner

Management

Governing Body

Delegates and is accountable for the governance of enterprise IT

Operates, executes and reports to management

Instructs, aligns and monitors performance

Sets direction and is responsible to the Owners and stakeholders

Identifying related industry standards

Maintaining integrity and consistency

Aligning with internal IT policies and procedures

Resolving inherent priority conflicts

Selecting an implementation method

Determining a sourcing model

Information

Principles, policies and frameworks

Services, infrastructure and applications

enterprise objectives design factors

enterprise strategy design factors

enterprise goal risk factors

Transforming

Selecting

Supporting

Negotiating

Forms the basis of a process capability assessment for the Capability Dimension

Provides the mechanism whereby defined Process Assessment Models ire related to the measurement framework

Provides the basis for one or more Process Assessment Models

Provides the basis to undertake an assessment on the process dimension

Support

Strategic

Turnaround

Process

Management practice

Activity

Detailed Activity

Key components should function independently to maintain integrity

The interaction among key components will impede automation and should therefore be limited

The relationships among key components should be identified to maximize consistency

COBIT helps to ensure that a third-party vendor’s operations are secure

COBIT provides insight on how to derive value from the use of I&T

COBIT helps to ensure that a governance system is in place to sustain regulatory compliance

It should be independent of other standards, frameworks and regulations

It should be self-contained and not allow for the addition of new content

It should be based on a conceptual model

Organizational Structures

Services, Infrastructure and Applications

Principles, Policies and Frameworks

Processes

the enterprise’s risk profile

the enterprise’s strategy

current IT-related issues

Continual improvement life cycle

Change enablement

Sustain

Programme management

Perform a process risk assessment

Calculate return on investment (ROI)

Conduct a capabilities assessment

Manage Continuity

Manage Operations

Manage Risk

Manage Availability and Capacity

Organizational structures

Behavioral aspects

Service capabilities

IT goals

Information

Value

Knowledge

Data

Documented work products and policies

Understanding of the business by IT professionals

Managed strategy and operations

An identified subset of the activities of that level can be executed effectively

All activities of that level are successfully performed

Capability is demonstrated on the most relevant process activities

Revise the organizational hierarchy with job descriptions

Adapt the COBIT roles and organizational structures

Add two levels of involvement for consulted and informed

It integrates enterprise goals with IT-related goals

It integrates in any governance system

It integrates IT-related goals with enablers

It aligns with other relevant standards

Role of IT

Technology adoption

IT implementation

Provides the 'what' to implement for each management practice

Aligns with standards and good practices

Provides specific detailed activities

Provides statements of actions to deliver benefits

A Process Purpose

A Work Product

A Process Outcome

A Base Practice