Cobit 5 - Foundation Practice Questions
Who is an internal stakeholder? a) A staff member b) A shareholder c) A business partner d) A regulator
a) A staff member is an internal stakeholder, while the others are external stakeholders
[APMG-18]Which driver influences Stakeholder needs? A.Good practices B.Contextual quality C.Lag indicators D.Regulatory environment
D.Regulatory environment
Which mechanism can define and implement policies within their span of control? A. Organizational structures B. Process practices C. Governance framework D. Rules and Norms
A. Organizational structures
In the PRM, what element provides an overview of what the process does? A) A process description B) A process purpose C) A process identification D) A process goal and metric
A) A process description
What is the best way to describe COBIT5? A) COBIT5 is a business framework for governance and management of Enterprise IT. B) COBIT5 is an IT service management framework provided by AXELOS. C) COBIT5 is an Enterprise IT governance framework provided by ISACA. D) COBIT5 is a project management framework based on best practices.
A) COBIT5 is a business framework for governance and management of Enterprise IT.
Which characteristic is necessary for a good policy? A) Effective B) Expresses the core values of the enterprise C) Intrusive D) Limited in number
A) Effective
You learned more about policies and principles. Regarding policies, which are the main characteristics? A) Effective, efficient, non-intrusive and accessible B) Effective, efficient, intrusive and accessible C) Efficient, unlimited, non-intrusive and accessible
A) Effective, efficient, non-intrusive and accessible
What component of the Implementation Life Cycle addresses behavioural and cultural aspects of the implementation? A) Enablement of Change B) Management of the programme C) Core continual improvement life cycle D) Defining the road map
A) Enablement of Change
Which element is a key component of the COBIT 5 Governance Approach? A) Governance Scope B) Stakeholder Transparency C) Evaluate, Direct and Monitor D) Plan, Build, Run and Monitor
A) Governance Scope
Which option is NOT a component of phase 3 in the Implementation Life Cycle? A) Identify role players B) Define Target state C) Communicate the Outcome D) Define the road map
A) Identify role players
What component of the Implementation Life Cycle addresses the question 'how do we get there'? A) Implement improvements B) Define problems and opportunities C) Enable new approaches D) Monitor and evaluate
A) Implement improvements
What is the purpose of a policy lifecycle as defined in the COBIT5 Framework? A) It must support a policy framework in order to achieve defined goals. B) It must support a governance framework in order to achieve defined goals. C) The purpose of a policy life cycle is to cover the whole enterprise.
A) It must support a policy framework in order to achieve defined goals.
In a RACI chart, how is the role of someone who is Responsible for a task described? A) Someone who gets the task done B) Someone who provides input to the task C) Someone who is answerable for the success of the task D) Someone who is receiving information on a task
A) Someone who gets the task done
In what order would the following outputs of the COBIT 5 Goals cascade mechanism be produced? 1. Enterprise Goals 2. Stakeholder needs 3 Enabler Goals 4. IT-related Goals A. 2, 1, 4, 3 B. 1, 2, 3, 4 C. 2. 3, 1, 4 D. 3, 2, 4, 1
A. 2, 1, 4, 3
Which characteristic should a good policy framework provides? A. A structure for consistency B. Detailed process activities C. Access to social media D. Confirmation that practices are applied
A. A structure for consistency
Which option is a driver that influences stakeholder needs? A. Strategy changes B. Lead indicators C. Enterprise resources D. Good practices
A. Strategy changes
[APMG-01] Which question is valid to ask when establishing how to manage the enabler performance? A.Are good practices applied? B.Is security ensured? C.Are operations efficient? D.Is performance monitored?
A. Are good practices applied?
What do lead indicators monitor in the Generic Enabler model? A. Good practices are being applied B. Stakeholder needs are being addressed C. Enabler goals are being achieved D. Enabler outcomes are being made available
A. Good practices are being applied
What is the name of the Change enablement life cycle Phase which supports Phase 4. What needs to be done? A. Identify role players B. Define target state C. Plan program D. Define problems and opportunities
A. Identify role players
What enabler describes the key decision-making entities in an organization? A. Organizational structures B. Processes C. People, skills and competencies D. Principles, policies and frameworks
A. Organizational structures
What statement describes the main difference between Policies and Principles, as stated by COBIT 5? A. Policies provide detailed guidance to influence decision making B. Policies express the core values of the enterprise C. Principles are designed to achieve the stated purpose D. Principles are designed to provide detailed controls over regulatory requirements
A. Policies provide detailed guidance to influence decision making
At what level are Inputs and Outputs defined? A. Process B. Management practice C. Activity D. Detailed Activity
A. Process
Which item describes a key component of a Governance System? A. Setting the Governance Framework B. Identifying responsibilities for governance C. Ensuring compliance with regulations D. Optimization of IT assets, resources and capabilities
A. Setting the Governance Framework
Which attribute is relevant to a Process Activity? A. Supports establishment of distinct roles and responsibilities B. Aligns with standards and good practices C. Provides specific detailed activities D. Provides statements of actions to deliver benefits
A. Supports establishment of distinct roles and responsibilities
Which statement about the difference between the capability dimension and the process dimension is correct? A. The capability dimension focuses on the process attribute indicators, the process dimension focuses on the processes B. Specific work products are defined in the capability dimension and do NOT relate to the process dimension C. Capability dimension focuses on specific base practices, the process dimension focuses on generic base practices D. The definitions of all COBIT processes are the basis for the capability dimension and NOT for the process dimension
A. The capability dimension focuses on the process attribute indicators, the process dimension focuses on the processes
What percentage represents P - Partially achievement of an attribute in an assessed process, defined by the COBIT 5 assessment approach? A.15% to 50% B.85% to 100% C.75% to 100% D.On average 85 %
A.15% to 50%
[APMG-23] In what sequence would the following occur in the COBIT 5 Process Reference Model? 1. Build 2. Direct 3. Plan A.2,3,1 B.1,2,3 C.2,1,3 D.3,1,2
A.2,3,1
[APMG-34] Which characteristic is necessary for a good policy? A.Effective B.Expresses the core values of the enterprise C.Intrusive D.Limited in number
A.Effective
[APMG-26] What are IT-related outcomes, required to achieve enterprise goals, represented by? A.IT-related goals B.Enabler goals C.IT balanced scorecard D.Processes
A.IT-related goals
[APMG-02] What type of process goal is compliant with external rules? A.Intrinsic B.Business C.Contextual D.Accessibility and security
A.Intrinsic
[APMG-06]Which requirement describes 'contextual quality' in the Goals Enabler dimension? A.Outcomes should be relevant and complete B.Enablers are available when, and if, needed C.Enablers provide accurate, objective and reputable results D.Outcomes are secured
A.Outcomes should be relevant and complete
[APMG-09]Which activity is a good practice of operating principles within the organisation structures enabler? A.Publishing a schedule of Board meetings in advance B.Issuing the boundaries of the organisational structure's decision rights C.Defining the structure to delegate decision rights D.Documenting the decisions which the structure is authorised to take
A.Publishing a schedule of Board meetings in advance
[APMG-32] What attribute describes information that is applicable and helpful? A.Relevancy B.Currency C.Completeness D.Ease of manipulation
A.Relevancy
[APMG-39] How are Generic Practices used in the Process Assessment Model (PAM)? A.To assess processes from levels 2 to 5 B.To assess processes only at level 1 C.To assess process at all levels of the Capability Model D.To assess processes only at level 6
A.To assess processes from levels 2 to 5
[APMG-31] Why is a process capability assessment performed? A.To identify process improvement B.To make a cost-benefit analysis of the process C.To judge the quality of the people executing the process D.To define the metrics of the process
A.To identify process improvement
There are 7 categories of enablers in COBIT5. Those enablers can have their performances measured by lag and lead indicators. Choose the alternative that best describes what a "lag indicator" is: A) A metric for measuring how well implemented COBIT5 is. B) A specific metric for measuring the achievement of goals. C) A metric for measuring practice application. D) A metric to determine if the life cycle is managed.
B) A specific metric for measuring the achievement of goals.
Processes are essential in COBIT 5. Which domain represents management? A) EDM B) APO C) XPO D) BDS
B) APO
Which business tool is used to justify business investments? A) Business Objectives B) Business case C) Business Policies D) Process Capability Model
B) Business case
What role is the most senior official of the enterprise who is responsible for aligning IT and business strategies? A) Chief Operating Officer (COO) B) Chief Information Officer (CIO) C) Head of Architecture D) Business Executive
B) Chief Information Officer (CIO)
Which is not a good practice related to organizational structures? A) Level of authority B) Ensure benefits delivery C) Span of control D) Escalation procedures
B) Ensure benefits delivery
What capability level is an established process? A) Level 6 B) Level 3 C) Level 2 D) Level 1
B) Level 3
Awareness of a desired behavior can be accomplished by doing what? A) Communication and principles B) Senior management example and communication C) Senior management example and policies D) Policies and well established principles
B) Senior management example and communication
What percentage represents F - full achievement of an attribute in an assessed process, as defined by the COBIT 5 assessment approach? A. 100% B. 85% to 100% C. 75% to 100% D. On average 85 %
B. 85% to 100%
[APMG-16]Which option is NOT a benefit to the enterprise of using the COBIT 5 framework? A. COBIT 5 is first and foremost a 'business framework' B. COBIT 5 is a framework to be used mainly for IT Service management C. COBIT 5 enables IT to be managed in a holistic manner D. COBIT 5 encourages a common language throughout the enterprise
B. COBIT 5 is a framework to be used mainly for IT Service management
Which option is an environmental factor which the enterprise is dependent upon when designing its implementation plan? A. Effective communication of the necessary changes B. Capabilities & available resources C. Tailoring COBIT to fit the unique context of the enterprise D. Focusing on quick wins and improvements
B. Capabilities & available resources
Identify the missing word(s) in the following sentence. Service capabilities are leveraged primarily through the [ ? ] to deliver internal and external services. A. Physical infrastructure B. Processes C. IT Goals D. Policies
B. Processes
Which is NOT a purpose of the Process Reference Model? A. Forms the basis of a process capability assessment for the Capability Dimension B. Provides the mechanism whereby defined Process Assessment Models are related to the measurement framework C. Provides the basis for one or more Process Assessment Models D. Provides the basis to undertake an assessment on the process dimension
B. Provides the mechanism whereby defined Process Assessment Models are related to the measurement framework
Identify the missing word in the following sentence. One of the benefits of the COBIT 5 capability assessment model is improved reliability and [ ? ] of process capability assessment activities and evaluations. A. Enablement B. Repeatability C. Effectiveness D. Integrity
B. Repeatability
Which factor may indicate a need for the improved governance of enterprise IT? A. Tailoring COBIT and other supporting good practices and standards to fit the unique context of the enterprise is required B. Significant incidents related to IT risk, such as data loss or project failure, have been experienced C. A focus on quick wins and prioritizing the most beneficial improvements that are #a»»e*l lo implement is needed D. Key program roles and responsibilities should be defined and assigned
B. Significant incidents related to IT risk, such as data loss or project failure, have been experienced
Which statement is the MOST important reason for using a framework like COBIT 5? A. To support business processes by integrating applications and technology into business processes B. To help enterprises create optimal value from IT by maintaining a balance between realizing benefits and optimizing risk levels C. To enable the business requirements for external laws and regulations to be supported by IT D. To be able to map to other standards and guidance in the market place
B. To help enterprises create optimal value from IT by maintaining a balance between realizing benefits and optimizing risk levels
Which aspect is fundamental to the COBIT 5 integrator Model? A. To link Governance with Management B. To link COBIT 5 to existing ISACA guidance C. To link stakeholder needs with enterprise D. To link Plan, Build, Run and Monitor
B. To link COBIT 5 to existing ISACA guidance
Which requirement was a major driver for developing the COBIT5 framework? A. To obtain commitment of executive management for making IT-related decisions B. To provide further guidance in the area of innovation and emerging technologies C. To enable the management of a portfolio of competitive products and service D. To deliver programs on time, on budget and meeting stakeholder requirements
B. To provide further guidance in the area of innovation and emerging technologies
Which aspect relates to the COBIT 5 principle 'Meeting Stakeholder Needs? A. Aligns with the latest views on Governance B. Translates stakeholder requirements into strategy C. Provides a simple architecture D. Defines relationship between Governance and Management
B. Translates stakeholder requirements into strategy
[APMG-44] Which is a valuable tool in guiding the creation of business value? A.Business objectives B.Business case C.Business Framework D.Process Capability model
B.Business case
The domain for the "Service Desk and Incident Management" process is: A.Monitor. Evaluate and Assess (MEA) B.Deliver. Service and Support (DSS) C.Build, Acquire and Implement (BAI) D.Align. Plan and Organise (APO)
B.Deliver. Service and Support (DSS)
[APMG-33] What are stakeholder needs cascaded into? A.IT-related goals B.Enterprise goals C.Process goals D.Risk Optimisation goals
B.Enterprise goals
[APMG-48] Which item is a Service capability to deliver internal and external services? A.Frameworks B.Information C.Intrinsic Goal D.Contextual Goal
B.Information
[APMG-43] What is the term used to describe the values by which the enterprise wants to operate? A.Intrinsic quality B.Organisational ethics C.Individual ethics D.Good practices
B.Organisational ethics
[APMG-21] What term is used to describe projects that are duplicated which may indicate a need for improved governance of enterprise IT? A.Mergers and acquisitions B.Pain points C.Trigger events D.IT risk
B.Pain points
[APMG-19]Which is an important vehicle for executing policies? A.Organisational structures B.Process practices C.Governance framework D.Rules and Norms
B.Process practices
[APMG-37] Which aspect relates to the COBIT 5 key principle 'Applying a Single Integrated Framework'? A.Aligns with the latest views on Governance B.Provides a simple architecture C.Translates Stakeholder needs into strategy D.Defines the relationship between Governance and Management
B.Provides a simple architecture
[APMG-47] Which dimension(s) deals specifically with the Process Reference Model? A.The Capability Dimension B.The Process Dimension C.The Enabler Dimension D.Both the Process and capability dimensions
B.The Process Dimension
[APMG-30] What is the purpose of the principles element within the principles, policies and frameworks model? A.To be limited in number B.To express the core values of the enterprise C.To be open and flexible to ensure policies achieve the stated purpose D.To provide a logical flow for staff who have to comply with them
B.To express the core values of the enterprise
There are how many COBIT5 enablers? A) 5 B) 6 C) 7 D) 3
C) 7
According to the COBIT5 framework, what are the 3 objectives related to meeting stakeholder needs? A) Benefits realization, risk optimization and opportunity optimization B) Benefits realization, income optimization and resource optimization C) Benefits realization, risk optimization and resource optimization
C) Benefits realization, risk optimization and resource optimization
IT Governance is based on international standards and has frameworks to support it. In which framework is this course based on? A) ISO 15504 B) ITIL C) COBIT5 D) ISO 38500
C) COBIT5
What are stakeholder needs cascaded into? A) Risk optimization goals B) IT related goals C) Enterprise goals D) Process goals
C) Enterprise goals
Which of these represents the 3 Governance domains as described in the COBIT5 framework: A) Plan, direct and monitor B) Plan, build and run C) Evaluate, direct, and monitor D) Plan, monitor and evaluate
C) Evaluate, direct, and monitor
In most enterprises, management is the responsibility of the executive management under the leadership of the CEO. How about governance? A) Governance is the responsibility of high level managers. B) Governance is the responsibility of the government. C) Governance is the responsibility of the board of directors under a chairperson. D) Governance is the responsibility of the CEO.
C) Governance is the responsibility of the board of directors under a chairperson.
What are IT-related outcomes that are required to achieve enterprise goals represented by? A) Processes B) IT balanced scorecard C) IT related goals D) Enabler goals
C) IT related goals
What is the purpose of the policies element within the principles, policies and frameworks model? A) To be open and flexible B) To specify consequences of failing to comply C) To provide detailed guidance on how to put principles into practice D) To express the core values of the enterprise
C) To provide detailed guidance on how to put principles into practice
What term refers to an artifact associated with the execution of a process? A. A Process Purpose B. A Work Product C. A Process Outcome D. A Base Practice
C. A Process Outcome
What type of process goal is only known to and used by those who need it? A. Confidentiality B. Intrinsic C. Accessibility and Security D. Contextual
C. Accessibility and Security
What attributes describes the quantity of information that is suitable for the required activity? A. Relevancy B. Completeness C. Appropriate amount of information D. Ease of manipulation
C. Appropriate amount of information
Which process domain is the MOST suitable for skills such as Project management and Capacity management? A. Monitor, Evaluate and Assess (MEA) B. Deliver, Service and Support (DSS) C. Build, Acquire and implement (BAI) D. Align, Plan and Organize (APO)
C. Build, Acquire and implement (BAI)
Who is an internal stakeholder? A. Shareholder B. Regulator C. Business process owner D. Business partner
C. Business process owner
Which item is considered a good practice for within a policy framework? A. Statements of actions B. Skill categories C. Compliance requirements D. Defined goals
C. Compliance requirements
Which principle is key for the governance and management of enterprise IT? A. Managing IT Operations B. Insure Resource Optimization C. Enabling a Holistic Approach D. Managing Information
C. Enabling a Holistic Approach
Which activity should be done by governance? A. Implement risk appetite B. Set principles and policies C. Execute strategy D. Plan activities to meet enterprise goals
C. Execute strategy
What do Processes produce to ensure consistent implementation? A. Roles which operate according to RACI charts B. Cultural and behavioral aspects C. Policies and procedures D. Business and IT goals
C. Policies and procedures
What is the name of the architectural principle that is designed to be as straightforward as possible but still meeting enterprise requirements? A. Reuse B. Agility C. Simplicity D. Openness
C. Simplicity
When can a process be rated as a capability level two? A. When all process attributes are F- Fully for level two B. The process must be rated F - Fully for all process attributes at level two, and be rated L -Largely on level one C. The process must be rated L - Largely or F - Fully achieved at level two, and be rated F-Fully achieved on level one D. When the process attributes of the five capability levels, rate an average score of two
C. The process must be rated L - Largely or F - Fully achieved at level two, and be rated F-Fully achieved on level one
Why are the enabler dimensions important? A. A link between Governance and Management is provided B. They facilitate the planning, building, running and monitoring of an entity's IT C. They allow an entity to manage its complex interactions D. A link between COBIT 5 to other standards and framework is provided
C. They allow an entity to manage its complex interactions
Which is a requirement of the Framework element, within the principles, policies and framework model? A. To express the core values of the enterprise B. To describe the desired outcome of a process C. To be flexible enough to allow adaption to the enterprise's specific situation D. To provide a logical flow for staff to comply with the framework
C. To be flexible enough to allow adaption to the enterprise's specific situation
[APMG-22]What is the purpose of the Process Reference Model? A.To be the basis for the capability dimension which defines the rating method to conform to ISO15540 B.To be the basis for the process dimension which outlines the structure of the 37 COBIT processes C.To be the basis for the process dimension which gives the specific process references on each level D.To contain the generic attributes for the levels two, three, four and five
C. To be the basis for the process dimension which gives the specific process references on each level
[APMG-24] Identify the missing words in the following sentence.Enterprise Architecture is considered a skill category for the [ ? ] Process Domain. A.Evaluate, Direct and Monitor (EDM) B.Build, Acquire and Implement (BAI) C.Align, Plan and Organise (APO) D.Monitor, Evaluate and Assess (MEA)
C.Align, Plan and Organise (APO)
[APMG-40] When designing an implementation plan for the governance and management of IT, what is an environment factor that should be taken into consideration? A.Mergers, Acquisitions or divesture B.Hidden and rogue IT spending C.Applicable laws and regulations D.External audit or consultant assessments
C.Applicable laws and regulations
[APMG-36] Which action is a good practice to help encourage desired behaviour in an enterprise? A.Publishing Operating Principles B.Communicating Skill categories C.Appointing Business champions D.Publishing Delegation of Authority procedures
C.Appointing Business champions
[APMG-17]What role is the most senior official of the enterprise who is responsible for aligning IT and business strategies? A.Business Executive B.Head of Architecture C.Chief Information Officer (CIO) D.Chief Operating Officer(COO)
C.Chief Information Officer (CIO)
[APMG-45] Which statement is NOT a reason why COBIT 5 is an integrated framework? A.It is complete in enterprise coverage B.Provides a simple architecture C.Has to be used with other standards D.Operates with previous ISACA frameworks
C.Has to be used with other standards
[APMG-35] What rating level is a process assessed to pass an assessment? A.F - Fully B.P - Partially and or L - Largely C.L - Largely and or F- Fully D.P - Partially
C.L - Largely and or F- Fully
[APMG-25] What capability level is an established process? A.Level 1 B.Level 2 C.Level 3 D.Level 6
C.Level 3
[APMG-28] What information layer contains the attribute for how the information is carried? A.Social world B.Semantic C.Physical world D.Empiric
C.Physical world
[APMG-03] What is the Programme Management Phase in the Implementation Life Cycle called when practical solutions are supported by justifiable business cases? A.Build improvements B.Define road map C.Plan programme D.Initiate programme
C.Plan programme
What are the capability level of a previously "Established Process" that now operates within defined limits to achieve its processes outcomes? A.Performed process B.Optimising process C.Predictable process D.Managed process
C.Predictable process
[APMG-05]What is the name given to an enterprise communication mechanism for corporate values and desired behavior? A.Process outcomes B.Organisational structures C.Principles and policies D.Rules and norms
C.Principles and policies
[APMG-15]Which enabler translates desired behaviour into practical guidance? A.Culture, Ethics and Behaviour B.Services, Infrastructure and Applications C.Principles, Policies and Frameworks D.People, Skills and Competencies
C.Principles, Policies and Frameworks
[APMG-13] What do Processes produce as a result of their operation? A.RACI charts B.Cultural aspects C.Service capabilities D.Business goals
C.Service capabilities
[APMG-10]What is the purpose of the Goals Cascade? A.Consider the Inputs and Outputs of an IT process in the enterprise B.Define and implement the Enterprise Architecture of an enterprise C.Support alignment between enterprise needs and IT solutions and services D.Support the definition of clear roles and responsibilities in an enterprise
C.Support alignment between enterprise needs and IT solutions and services
[APMG-11]What is the purpose of the policies element within the principles, policies and frameworks model? A.To be open and flexible B.To specify consequences of failing to comply C.To provide detailed guidance on how to put principles into practice D.To express the core values of the enterprise
C.To provide detailed guidance on how to put principles into practice
[APMG-04]Which requirement was a major driver for developing the COBIT 5 framework? A.To encourage a common language throughout the enterprise to allow better understanding of IT by stakeholders B.To be generic and useful for enterprises of all sizes, whether commercial, not-for-profit or in the public sector C.To provide further guidance in areas with high interest, such as enterprise architecture D.To enable enterprises to achieve operational excellence through the reliable and efficient application of technology
C.To provide further guidance in areas with high interest, such as enterprise architecture
When designing an implementation plan for the governance and management of IT, what is an environmental factor that should be taken into consideration? A) Complex IT operating models B) External audit or consultant assessments C) Hidden and rogue IT spending D) Applicable laws and regulations
D) Applicable laws and regulations
Regarding Deliver, Service and Support (DSS), what are the best set of skill categories? A) IT strategy and Enterprise architecture B) Business analysis and project management C) Software decommissioning and capacity management D) Availability management and problem management
D) Availability management and problem management
There are five architecture principles that govern the implementation and use of IT related resources. Which is an incorrect principle? A) Reuse B) Agility C) Openness D) Buy vs. Fix
D) Buy vs. Fix
Globomantics decided to implement COBIT 5. Who should lead its implementation? A) CTO - Chief Technology Officer B) CEO - Chief Executive Officer C) CRO - Chief Risk Officer D) CIO - Chief Information Officer
D) CIO - Chief Information Officer
Based on the COBIT5 framework, which best describes its scope? A) COBIT5 governance system scope is management. B) COBIT5 governance system scope is the IT department. C) COBIT5 governance system scope is the enterprise IT. D) COBIT5 governance system scope is the enterprise.
D) COBIT5 governance system scope is the enterprise.
What belongs to the social layer within the information model? A) Attributes B) Relationship status C) Details D) Contracts
D) Contracts
What is the Governance domain? A) BAI B) MEA C) DSS D) EDM
D) EDM
How does a goal cascading mechanism work when related to stakeholder's needs? A) It translates stakeholder needs into IT goals. B) It translates stakeholder drivers into IT goals. C) It translates stakeholders drivers into enterprise goals. D) It translates stakeholder needs into enterprise goals.
D) It translates stakeholder needs into enterprise goals.
What rating level must a process attain to pass an assessment? A) P - Partially and or L - Largely B) F - Only Fully C) P - Partially D) L - Largely and or F- Fully
D) L - Largely and or F- Fully
Which best represents the link between all key roles in the COBIT5 framework? A) Owners and stakeholders > management > governing body > operations and execution B) Governing body > owners and stakeholders > management > operations and execution C) Operations and execution > management > governing body > owners and stakeholders D) Owners and stakeholders > governing body > management > operations and execution
D) Owners and stakeholders > governing body > management > operations and execution
Which best describes an example of a professional guide? A) Any practical reference published by one person or a group of people B) A book from a senior professional on how to manage Enterprise IT C) A set of practices created by the company you work for D) PMBOK from the Project Management Instute
D) PMBOK from the Project Management Institute
A very important concept in COBIT5, the "Governance Enablers" makes Governance possible. Regarding performance management, how would you describe "Lead Indicators"? A) They are specific metrics to measure KPIs. B) They are specific metrics to measure if stakeholder needs are addressed. C) They are specific metrics to measure the achievement of goals. D) They are specific metrics to measure the application of practices.
D) They are specific metrics to measure the application of practices.
What item is generated by Business processes as the first stage of the Information Cycle? A. Information B. Value C. Knowledge D. Data
D. Data
Which information should a business case include? A. An improvement target for identifiable gaps and solutions B. The proposed solutions and definitions of the initiative C. A review of the success factors of the initiative D. How the investment and value creation will be monitored throughout the economic life cycle
D. How the investment and value creation will be monitored throughout the economic life cycle
Why is COBIT 5 considered to be an integrated framework? A. It integrates enterprise goals with IT-related goals B. It integrates in any governance system C. It integrates IT-related goals with enablers D. It aligns with other relevant standards
D. It aligns with other relevant standards
Which is not a requirement of a good policy? A. Achieves the stated purpose B. Implemented in most efficient way C. Non-intrusive D. Limited on number
D. Limited on number
Which process is included in the Build. Acquire and Implement Process domain of the Management of Enterprise IT? A. Manage Continuity B. Manage Operations C. Manage Risk D. Manage Availability and Capacity
D. Manage Availability and Capacity
[APMG-41] Which attribute does NOT apply to a Process Activity? A.Considers the input and outputs of the process B.Supports establishment of clear roles and responsibilities C.Describes a set of implementation steps to achieve a management practice D.Provides statements of actions to deliver benefits
D.Provides statements of actions to deliver benefits
Which statement, related to capability and maturity, is NOT correct? A. Organizational maturity has a relationship to the achievement of the organization's business goals B. A maturity assessment is done at an enterprise or organizational level and a capability assessment is done at a process level C. A maturity assessment can use the findings of a capability assessment D. Maturity and capability assessments are only defined by CMMI (Capability Maturity Model -Integrated), NOT by ISO15504
D. Maturity and capability assessments are only defined by CMMI (Capability Maturity Model -Integrated), NOT by ISO15504
Identify the missing word in the following sentence. Governance is about [?] and deciding amongst different stakeholders" value interests. A. Transforming B. Selecting C. Supporting D. Negotiating
D. Negotiating
Which mechanism is NOT considered to be a good practice of Organizational Structures? A. Delegation of authority B. Escalation procedures C. Span of Control D. Process Reference Model
D. Process Reference Model
Identify the missing word in the following sentence.The definition of (?) is a collection of practices influenced by the enterprise's policies and procedures that takes input from a number of sources, manipulates the inputs and produces outputs. A. Principles B. Intrinsic goals C. Enterprise goals D. Processes
D. Processes
Which practice would NOT help to encourage desired behavior in an enterprise? A. Introducing a bonus scheme B. Communicating enforcement of policies C. Appointing business champions D. Publishing Escalation procedures
D. Publishing Escalation procedures
What is the name of an enterprise communication mechanism which provides more guidance on desired organizational behavior? A. Escalation procedures B. Statement of actions C. Principles and policies D. Rules and norms
D. Rules and norms
What role does the Governing body play in the governance and management of enterprise IT? A. Delegates and is accountable for the governance of enterprise IT B. Operates, executes and reports to management C. Instructs, aligns and monitors performance D. Sets direction and is responsible to the Owners and stakeholders
D. Sets direction and is responsible to the Owners and stakeholders
Which statement describes the difference between specific and generic work products? A. Specific work products are defined at each capability level, generic work products are defined on an organizational level B. Specific work products are associated with the IT-related goals, generic work products are associated with the higher level enterprise goals C. Specific work products are defined for each process, generic work products are defined for all generic processes from capability level 2 to 5 D. Specific work products define the objectives at activity level, generic work products define the level objectives of a process
D. Specific work products define the objectives at activity level, generic work products define the level objectives of a process
What information layer contains the attribute that includes the rules for using artificial languages? A. Semantic B. Physical world C. Empiric D. Syntactic
D. Syntactic
What is the purpose of the COBIT 5 Goals Cascade mechanism? A. To define relationship between Governance and Management B. To ensure that business change programs are managed C. To provide a simple architecture D. To translate stakeholder needs into strategy
D. To translate stakeholder needs into strategy
[APMG-38] Who is an internal stakeholder? A.A customer B.A business partner C.A regulator D.A business executive
D.A business executive
[APMG-14]What is the MOST suitable process domain for skills such as Portfolio Management? A.Monitor, Evaluate and Assess (MEA) B.Deliver, Service and Support (DSS) C.Build, Acquire and Implement (BAI) D.Align, Plan and Organise (APO)
D.Align, Plan and Organise (APO)
[APMG-29] How is the Governance Objective of 'Value Creation' met? A.By realising benefits B.By optimising resources C.By optimising risk D.All of the above
D.All of the above
[APMG-50] What is the specific information category called if it meets only the need of the information consumer? A.Compliant B. Believability C.Ease of operation D.Effective
D.Effective
[APMG-08]Which statement refers to a key component of a Governance System? A.Stakeholder Transparency B.Evaluate, Direct and Monitor C.Plan, Build, Run and Monitor D.Effective use of all resources
D.Effective use of all resources
One change introduced on COBIT 5 was the Process Capability Model. It´s based on: A.ISO 17799 B.ISO 20000 C.ISO 27002 D.ISO 15504
D.ISO 15504
[APMG-49] What does a 'Lead Indicator' measure? A.If enabler goals are achieved B.If stakeholder needs are addressed C.If governance is managed D.If good practices are applied
D.If good practices are applied
[APMG-20]What role is responsible for monitoring activities to achieve enterprise objectives in the Governance Approach? A.Governing Body B.Operations C.Stakeholders D.Management
D.Management
[APMG-27] What is a collection of practices influenced by the enterprise's policies and procedures that takes input from a number of sources, manipulates the inputs and produces outputs known as? A.Framework B.Policies C.Enablers D.Process
D.Process
[APMG-07]Which statement is correct about the three COBIT guides, (Process Assessment Model, Assessor Guide, Self-assessment Guide)? A.The Process Assessment Model (PAM) is assessed by the Assessor Guide B.The Program Assessment Model does NOT have any value without the Assessor Guide C.The Self-Assessment Guide is the same as the Assessor Guide, but used internally in an organisation D.The Self-Assessment Guide can be used to prepare for a formal Process Capability Assessment
D.The Self-Assessment Guide can be used to prepare for a formal Process Capability Assessment
[APMG-42] Identify the missing word in the following sentence.The responsibilities of Management include planning and monitoring activities in alignment with the direction set by the governance body to achieve the [ ? ] objectives. A.enabler B.stakeholder C.IT-related D.enterprise
D.enterprise
Which is not a good policy? A.Achieves the stated purpose B.implemented in the most efficient way C.non intrusive D.limited in number
D.limited in number
[APMG-12]Identify the missing word(s) in the following sentence.Process [ ? ] is a process attribute for a Predictable process. A.innovation B.performance management C.assessment D.measurement
D.measurement
[APMG-46] Identify the missing words in the following sentence.Business processes transform knowledge in order to create [ ? ] for an enterprise. A.IT Processes B.information C.data D.value
D.value
Achieving IT-related goals requires the successful application and use of what? a) Enablers b) Enabler Goals c) IT Balanced Scorecard d) Processes
a) Achieving IT-related goals requires the successful application and use of a number of enablers.
Which architecture principle suggests the meeting of changing business needs in an effective and efficient manner? a) Agility b) Simplicity c) Openness d) Reusability
a) Agility is an example of an architecture principle - The enterprise architecture should incorporate speed and ease to meet changing business needs.
What is the activity in continual improvement phase in the implementation lifecycle called where practical solutions are supported by justifiable business cases? a) Build Improvements b) Define Roadmap c) Plan Programme d) Initiate Programme
a) Build Improvements is the activity in the continual improvement phase; the phase where the question 'What needs to be done?' is addressed.
When designing an implementation plan for IT governance and management, what is an environmental factor to be considered? a) Industry practices b) Insufficient IT resources, staff with inadequate skills or staff burnout/dissatisfaction c) Significant incidents related to IT risk d) External audit or consultant assessments
a) Industry practices are one among many environment factors that are taken into consideration while designing an implementation plan
Identify the missing word(s) in the following sentence. Process __[?]__ is a process attribute for an optimising process. a) Innovation b) Performance management c) Assessment d) Measurement
a) Process Innovation is a process attribute for an optimising process
What role is responsible for setting direction through prioritisation and decision making? a) Governing Body b) Operations c) Stakeholders d) Management
a) The governing body (mostly board of directors under the leadership of the Chairperson) is responsible for setting direction through prioritisation and decision making
Which characteristic is necessary for a good policy? a) Efficient b) Expresses the core values of the enterprise c) Intrusive d) Limited in number
a) a good policy needs to be efficient.
Which requirement describes 'contextual quality' in the Goals Enabler dimension? a) Enablers are available when, and if, needed b) Outcomes should be current and appropriate c) Enablers provide accurate, objective and reputable results d) Outcomes are secured
b) 'Outcomes should be current and appropriate' is a contextual quality goal.
Which element is a key component of the COBIT 5 governance approach? a) Stakeholder Transparency b) Roles, Responsibilities and Activities c) Evaluate, Direct and Monitor d) Plan, Build, Run and Monitor
b) 'Roles, Responsibilities and Activities' is one of the key components of the COBIT 5 governance approach
What is a good practice of the policies element within the Principles, policies and frameworks model? a) To be open and flexible b) To specify consequences of failing to comply c) To provide detailed guidance on how to put principles into practice d) To express the core values of the enterprise
b) 'To specify consequences of failing to comply' is a good practice within a policy framework.
Which is one of the ways of meeting the Governance Objective of 'Value Creation'? a) By providing incentives b) By optimising resources c) By hiring SMEs d) By providing free service
b) By realising benefits, optimising risks and optimising resources the governance objective of 'Value Creation' is met
What attribute describes information sufficiently up-to-date for the task at hand? a) Relevancy b) Currency c) Completeness d) Ease of manipulation
b) Currency is the extent to which information is sufficiently up-to-date for the task at hand.
What is a benefit of the Goals Cascade? a) Consider the inputs and outputs of an IT process in the enterprise b) Define relevant and tangible goals and objectives at various levels of responsibility c) Define and implement the enterprise architecture d) Support the definition of clear roles and responsibilities in an enterprise
b) Defining relevant and tangible goals and objectives at various levels of responsibility is one of the benefits of Goals Cascade.
Which is the MOST suitable process design for skills such as Incident Management? a) Monitor, Evaluate and Assess (MEA) b) Deliver, Service and Support (DSS) c) Build, Acquire and Implement (BAI) d) Align, Plan and Organise (APO)
b) Deliver, Service and Support (DSS) is the most suitable process design for skills such as Incident Management.
Identify the missing word(s) in the following sentence. Governance ensures that __[?]__ are evaluated to determine balanced, agreed-on enterprise objectives to be achieved. a) Processes b) Stakeholder needs c) IT-Related goals d) Enterprises
b) Governance ensures that stakeholder needs, conditions and options are evaluated to determine balanced, agreed-on enterprise objectives to be achieved.
What does span of control mean in the organisational structures enabler? a) Publishing a schedule of Board meetings in advance b) Issuing the boundaries of the organisational structure's decision rights c) Defining the structure to delegate decision rights d) Documenting the decisions which the structure is authorised to take
b) Issuing the boundaries of the organisational structure's decision rights refers to the span of control.
What term is used to describe a merger, acquisition or divestiture's impact on the governance and management of IT? a) Pain points b) Trigger events c) Enterprise change d) IT risk
b) Merger, acquisition or divestiture are trigger events for focussing on the governance and management of IT.
What is a very important enterprise communication mechanism for corporate values and desired behaviour? a) Process outcomes b) Principles and policies c) Organisational structures d) Rules and norms
b) Principles and policies form an important enterprise communication mechanism for corporate values and desired behaviour.
Which is a vehicle to translate desired behaviour into practical guidance for day-to-day management? a) Organisational structures b) Principles, Policies and Framework c) Processes d) Rules and Norms
b) Principles, Policies and Frameworks are the vehicle to translate desired behaviour into practical guidance for day-to-day management.
Which enabler describes an organised set of practices and activities to achieve certain objectives? a) Culture, Ethics and Behaviour b) Processes c) Principles, Policies and Frameworks d) People, Skills and Competencies
b) Processes describe an organised set of practices and activities to achieve certain objectives and produce a set of outputs in support of overall IT-related goals.
The COBIT 5 framework delivers to its stakeholders the most complete and up-to-date guidance on governance and management of enterprise IT by ___[?]___. a) Keeping the other ISACA frameworks separate b) Providing a sound and comprehensive reference of good practices c) Providing a complex architecture d) Mandatorily using other standards
b) Providing a sound and comprehensive reference of good practices is one of the ways in which COBIT 5 framework delivers to its stakeholders the most complete and up-to-date guidance on governance and management of enterprise IT
What information layer defines the rules and principles for constructing sentences in natural or artificial languages? a) Social world b) Semantic c) Physical World d) Empiric
b) Semantic layer defines the rules and principles for constructing meaning out of syntactic structures. Semantics refers to the meaning of information.
What does a 'Lag Indicator' measure? a) If the enabler lifecycle is managed b) If stakeholders needs are addressed c) If governance is managed d) If good practices are applied
b) The question 'Are stakeholder needs addressed?' deals with the actual outcome of the enabler and the metrics used are called 'Lag Indicators.
Which driver influences stakeholder needs? a) Good Practices b) Contextual Quality c) Lag Indicators d) A Changing Business Environment
d) A changing business environment influences stakeholder needs.
In what sequence would the following occur in the COBIT 5 Process Reference Model? 1. Run 2. Build 3. Direct a) 2,3,1 b) 1,2,3 c) 3,2,1 d) 3,1,2
c) 3,2,1 - The PRM flow is Evaluate -> Direct -> Plan -> Build -> Run -> Monitor (MEA) -> Monitor -> Evaluate
Which option is a benefit to the enterprise of using the COBIT 5 framework? a) COBIT 5 is first and foremost an 'IT framework' b) COBIT 5 does not encourage a common language throughout the enterprise c) COBIT 5 enables IT to be managed in a holistic manner d) COBIT 5 is a framework to be used mainly for IT Service Management
c) COBIT 5 enables IT to be managed in a holistic manner and is one of the key benefits.
What is the information category called if it corresponds to the restricted access information quality goal? a) Compliant b) Believability c) Confidential d) Effective
c) Confidentiality corresponds to the restricted access information quality goal
What are enabler goals cascaded into? a) IT-related goals b) Enablers c) Not cascaded but supported by processes d) Risk optimisation goals
c) Enabler Goals are not cascaded but supported by processes; Processes are one of the enablers.
Which item provides the structure under which processes can operate? a) Information b) Values c) Frameworks d) Rules and norms
c) Frameworks provide the structure within which processes operate.
Generic resources are used in which levels of the Process Assessment Model (PAM)? a) Only at level 1 b) At all levels of the capability model c) From levels 2 to 5 d) Only at level 5
c) Generic resources are used from levels 2 to 5 in the PAM
When are policies said to be effective? a) When they are limited in number b) When they express the core values of the enterprise c) When they achieve the stated purpose d) When they provide a logical flow for staff who have to comply with them
c) Good policies are effective when they achieve the stated purpose.
What is the main purpose of performing a process capability assessment? a) To define goals of the process b) To hire people with correct skills and competencies for executing the process c) To identify and be part of a process improvement initiative d) To define the metrics of the process
c) One of the main purpose of process capability assessment is to identify and be part of a process improvement initiative
Which COBIT 5 dimension(s) deals specifically with good practices? a) The Capability Dimension b) The Process Dimension c) The Enabler Dimension d) Both the Process and Capability Dimensions
c) The Enabler Dimension deals with stakeholders, goals, lifecycle and good practices.
At what process capability level(s) is the Process Reference Model used? a) All Levels b) None of the Levels c) Level 1 only d) Level 2, 3, 4 and 5
c) The Process Reference Model is used at Process Capability Level 1 only.
Which requirement was a major driver for developing the COBIT 5 framework? a) To encourage a common language throughout the enterprise to allow better understanding of IT by stakeholders b) To be generic and useful for enterprises of all sizes, whether commercial, not-for-profit or public sector c) To get better control over increasing user-initiated and user-controlled IT solutions d) To enable enterprises to achieve operational excellence through the reliable and efficient application of technology
c) To get better control over increasing user-initiated and user-controlled IT solutions is one of the key drivers for developing the COBIT 5 framework.
Which aspect relates to the COBIT 5 key principle of 'meeting stakeholder needs'? a) Aligns with the latest views on governance b) Provides a simple architecture c) Translates stakeholder needs into strategy d) Defines the relationship between governance and management
c) Translating stakeholder needs into strategy is a key aspect of the Principle 'Meeting stakeholder Needs'
Which question is asked to decide how enabler performance be managed? a) Is security ensured? b) Are operations efficient? c) Is performance monitored? d) Is lifecycle managed?
d) 'Is lifecycle managed?' is one of the four questions asked when establishing how to manage enabler performance.
Which attributes apply to a process activity? a) Based on generally accepted standards and good practices b) Considers the input and outputs of the process c) Supports establishment of clear roles and responsibilities d) All the above
d) All the mentioned attributes apply to a process activity
Identify the missing word(s) in the following sentence. Availability Management is considered a skill category for the __[?]__ Process Domain. a) Evaluate, Direct and Monitor (EDM) b) Build, Acquire and Implement (BAI) c) Align, Plan and Organise (APO) d) Deliver, Service and Support (DSS)
d) Availability Management is a skill category for the DSS domain.
Identify the missing word(s) in the following sentence. Business processes generate and process __[?]__, transforming them into information. a) Value b) Knowledge c) Policies d) Data
d) Business processes generate and process data, transforming them into information and knowledge, and ultimately generating value for the enterprise.
Which role is most senior in the enterprise and is accountable for the operation of the enterprise? a) Business Executive b) Head of Architecture c) Chief Information Officer (CIO) d) Chief Operating Officer (COO)
d) Chief Operating Officer is the most senior officer of the enterprise who is accountable for the operation of the enterprise.
What is followed for creating, encouraging and maintaining desired behaviour throughout the enterprise? a) Lifecycle b) Individual ethics c) Organisational ethics d) Good practices
d) Good practices are followed for creating, encouraging and maintaining desired behaviour throughout the enterprise.
Which enabler can be structured or unstructured, formalised or informalised? a) Process b) Policies c) Enablers d) Information
d) Information can be structured or unstructured, formalised or informalised
What capability level is an optimised process? a) Level 1 b) Level 2 c) Level 3 d) Level 5
d) Level 5 is an optimised process.
What rating does a process attain when some aspects of the defined attribute's achievement may be unpredictable in the assessed process? a) F-Fully b) P-Partially and or L-Largely c) L-Largely and or F-Fully d) P-Partially
d) P (Partially achieved) - There is some evidence of an approach to, and some achievement of, the defined attribute in the assessed process. Some aspects of achievement of the attribute may be unpredictable. (15 to 50 percent achievement).
What do processes make or need to ensure consistent implementation and execution? a) RACI Charts b) Cultural Aspects c) Business Goals d) Policies and Procedures
d) Processes make or need, policies and procedures to ensure consistent implementation and execution
Which action is NOT considered a good practice to encourage desired behaviour in an enterprise? a) Incentives to encourage and deterrents to enforce desired behaviour b) Communication throughout the enterprise of desired behaviours and the underlying corporate values c) Appointing business champions d) Publishing delegation of authority procedures
d) Publishing delegation of authority procedures is not one of the good practices to help encourage desired behaviour but the other three are.
What type of process goal ensures the process remains confidential when required, and known and accessible to those who need it? a) Intrinsic b) Business c) Contextual d) Accessibility and Security
d) The Accessibility and Security goals are meant to ensure the process remains confidential when required, and is known and accessible to those who need it.
In which of the following will you find a description of how the investment and value creation would be monitored throughout the economic lifecycle, and the metrics to be used (based on goals and metrics)? a) Business Objectives b) Process Capability Model c) Business Policies d) Business Case
d) The business case should include 'how investment and value creation will be monitored throughout the economic lifecycle, and the metrics to be used (based on goals and metrics)?' as one of the minimum requirements.
