Cobit 5 - Foundation :: Exam Practice Test with complete solutions

Which action is NOT considered a good practice to encourage desired behaviour in an enterprise? a) Incentives to encourage and deterrents to enforce desired behaviour b) Communication throughout the enterprise of desired behaviours and the underlying corporate values c) Appointing business champions d) Publishing delegation of authority procedures - ANSWER d) Publishing delegation of authority procedures is not one of the good practices to help encourage desired behaviour but the other three are. What is the main purpose of performing a process capability assessment? a) To define goals of the process b) To hire people with correct skills and competencies for executing the process c) To identify and be part of a process improvement initiative d) To define the metrics of the process - ANSWER c) One of the main purpose of process capability assessment is to identify and be part of a process improvement initiative Which requirement was a major driver for developing the COBIT 5 framework? a) To encourage a common language throughout the enterprise to allow better understanding of IT by stakeholders b) To be generic and useful for enterprises of all sizes, whether commercial, not-for-profit or public sector c) To get better control over increasing user-initiated and user-controlled IT solutions d) To enable enterprises to achieve operational excellence through the reliable and efficient application of technology - ANSWER c) To get better control over increasing user-initiated and user-controlled IT solutions is one of the key drivers for developing the COBIT 5 framework. What is a very important enterprise communication mechanism for corporate values and desired behaviour? a) Process outcomes b) Principles and policies c) Organisational structures d) Rules and norms - ANSWER b) Principles and policies form an important enterprise communication mechanism for corporate values and desired behaviour. What capability level is an optimised process? a) Level 1 b) Level 2 c) Level 3 d) Level 5 - ANSWER d) Level 5 is an optimised process. In which of the following will you find a description of how the investment and value creation would be monitored throughout the economic lifecycle, and the metrics to be used (based on goals and metrics)? a) Business Objectives b) Process Capability Model c) Business Policies d) Business Case - ANSWER d) The business case should include 'how investment and value creation will be monitored throughout the economic lifecycle, and the metrics to be used (based on goals and metrics)?' as one of the minimum requirements. Which is a vehicle to translate desired behaviour into practical guidance for day-to-day management? a) Organisational structures b) Principles, Policies and Framework c) Processes d) Rules and Norms - ANSWER b) Principles, Policies and Frameworks are the vehicle to translate desired behaviour into practical guidance for day-to-day management. When designing an implementation plan for IT governance and management, what is an environmental factor to be considered? a) Industry practices b) Insufficient IT resources, staff with inadequate skills or staff burnout/dissatisfaction c) Significant incidents related to IT risk d) External audit or consultant assessments - ANSWER a) Industry practices are one among many environment factors that are taken into consideration while designing an implementation plan What is the activity in continual improvement phase in the implementation lifecycle called where practical solutions are supported by justifiable business cases? a) Build Improvements b) Define Roadmap c) Plan Programme d) Initiate Programme - ANSWER a) Build Improvements is the activity in the continual improvement phase; the phase where the question 'What needs to be done?' is addressed. Achieving IT-related goals requires the successful application and use of what? a) Enablers b) Enabler Goals c) IT Balanced Scorecard d) Processes - ANSWER a) Achieving IT-related goals requires the successful application and use of a number of enablers. What is a benefit of the Goals Cascade? a) Consider the inputs and outputs of an IT process in the enterprise b) Define relevant and tangible goals and objectives at various levels of responsibility c) Define and implement the enterprise architecture d) Support the definition of clear roles and responsibilities in an enterprise - ANSWER b) Defining relevant and tangible goals and objectives at various levels of responsibility is one of the benefits of Goals Cascade. Which item provides the structure under which processes can operate? a) Information b) Values c) Frameworks d) Rules and norms - ANSWER c) Frameworks provide the structure within which processes operate. What rating does a process attain when some aspects of the defined attribute's achievement may be unpredictable in the assessed process? a) F-Fully b) P-Partially and or L-Largely c) L-Largely and or F-Fully d) P-Partially - ANSWER d) P (Partially achieved) - There is some evidence of an approach to, and some achievement of, the defined attribute in the assessed process. Some aspects of achievement of the attribute may be unpredictable. (15 to 50 percent achievement). Which COBIT 5 dimension(s) deals specifically with good practices? a) The Capability Dimension b) The Process Dimension c) The Enabler Dimension d) Both the Process and Capability Dimensions - ANSWER c) The Enabler Dimension deals with stakeholders, goals, lifecycle and good practices. Which requirement describes 'contextual quality' in the Goals Enabler dimension? a) Enablers are available when, and if, needed b) Outcomes should be current and appropriate c) Enablers provide accurate, objective and reputable results d) Outcomes are secured - ANSWER b) 'Outcomes should be current and appropriate' is a contextual quality goal. Which attributes apply to a process activity? a) Based on generally accepted standards and good practices b) Considers the input and outputs of the process c) Supports establishment of clear roles and responsibilities d) All the above - ANSWER d) All the mentioned attributes apply to a process activity Which is one of the ways of meeting the Governance Objective of 'Value Creation'? a) By providing incentives b) By optimising resources c) By hiring SMEs d) By providing free service - ANSWER b) By realising benefits, optimising risks and optimising resources the governance objective of 'Value Creation' is met Which question is asked to decide how enabler performance be managed? a) Is security ensured? b) Are operations efficient? c) Is performance monitored? d) Is lifecycle managed? - ANSWER d) 'Is lifecycle managed?' is one of the four questions asked when establishing how to manage enabler performance. What information layer defines the rules and principles for constructing sentences in natural or artificial languages? a) Social world b) Semantic c) Physical World d) Empiric - ANSWER b) Semantic layer defines the rules and principles for constructing meaning out of syntactic structures. Semantics refers to the meaning of information. Which option is a benefit to the enterprise of using the COBIT 5 framework? a) COBIT 5 is first and foremost an 'IT framework' b) COBIT 5 does not encourage a common language throughout the enterprise c) COBIT 5 enables IT to be managed in a holistic manner d) COBIT 5 is a framework to be used mainly for IT Service Management - ANSWER c) COBIT 5 enables IT to be managed in a holistic manner and is one of the key benefits. Which architecture principle suggests the meeting of changing business needs in an effective and efficient manner? a) Agility b) Simplicity c) Openness d) Reusability - ANSWER a) Agility is an example of an architecture principle - The enterprise architecture should incorporate speed and ease to meet changing business needs. Who is an internal stakeholder? a) A staff member b) A shareholder c) A business partner d) A regulator - ANSWER a) A staff member is an internal stakeholder, while the others are external stakeholders Identify the missing word(s) in the following sentence. Process __[?]__ is a process attribute for an optimising process. a) Innovation b) Performance management c) Assessment d) Measurement - ANSWER a) Process Innovation is a process attribute for an optimising process What type of process goal ensures the process remains confidential when required, and known and accessible to those who need it? a) Intrinsic b) Business c) Contextual d) Accessibility and Security - ANSWER d) The Accessibility and Security goals are meant to ensure the process remains confidential when required, and is known and accessible to those who need it. Which characteristic is necessary for a good policy? a) Efficient b) Expresses the core values of the enterprise c) Intrusive d) Limited in number - ANSWER a) a good policy needs to be efficient. Identify the missing word(s) in the following sentence. Business processes generate and process __[?]__, transforming them into information. a) Value b) Knowledge c) Policies d) Data - ANSWER d) Business processes generate and process data, transforming them into information and knowledge, and ultimately generating value for the enterprise. Which is the MOST suitable process design for skills such as Incident Management? a) Monitor, Evaluate and Assess (MEA) b) Deliver, Service and Support (DSS) c) Build, Acquire and Implement (BAI) d) Align, Plan and Organise (APO) - ANSWER b) Deliver, Service and Support (DSS) is the most suitable process design for skills such as Incident Management. What are enabler goals cascaded into? a) IT-related goals b) Enablers c) Not cascaded but supported by processes d) Risk optimisation goals - ANSWER c) Enabler Goals are not cascaded but supported by processes; Processes are one of the enablers. When are policies said to be effective? a) When they are limited in number b) When they express the core values of the enterprise c) When they achieve the stated purpose d) When they provide a logical flow for staff who have to comply with them - ANSWER c) Good policies are effective when they achieve the stated purpose. Identify the missing word(s) in the following sentence. Availability Management is considered a skill category for the __[?]__ Process Domain. a) Evaluate, Direct and Monitor (EDM) b) Build, Acquire and Implement (BAI) c) Align, Plan and Organise (APO) d) Deliver, Service and Support (DSS) - ANSWER d) Availability Management is a skill category for the DSS domain. Which enabler can be structured or unstructured, formalised or informalised? a) Process b) Policies c) Enablers d) Information - ANSWER d) Information can be structured or unstructured, formalised or informalised What is the information category called if it corresponds to the restricted access information quality goal? a) Compliant b) Believability c) Confidential d) Effective - ANSWER c) Confidentiality corresponds to the restricted access information quality goal What do processes make or need to ensure consistent implementation and execution? a) RACI Charts b) Cultural Aspects c) Business Goals d) Policies and Procedures - ANSWER d) Processes make or need, policies and procedures to ensure consistent implementation and execution What does a 'Lag Indicator' measure? a) If the enabler lifecycle is managed b) If stakeholders needs are addressed c) If governance is managed d) If good practices are applied - ANSWER b) The question 'Are stakeholder needs addressed?' deals with the actual outcome of the enabler and the metrics used are called 'Lag Indicators. What is a good practice of the policies element within the Principles, policies and frameworks model? a) To be open and flexible b) To specify consequences of failing to comply c) To provide detailed guidance on how to put principles into practice d) To express the core values of the enterprise - ANSWER b) 'To specify consequences of failing to comply' is a good practice within a policy framework. What role is responsible for setting direction through prioritisation and decision making? a) Governing Body b) Operations c) Stakeholders d) Management - ANSWER a) The governing body (mostly board of directors under the leadership of the Chairperson) is responsible for setting direction through prioritisation and decision making Which role is most senior in the enterprise and is accountable for the operation of the enterprise? a) Business Executive b) Head of Architecture c) Chief Information Officer (CIO) d) Chief Operating Officer (COO) - ANSWER d) Chief Operating Officer is the most senior officer of the enterprise who is accountable for the operation of the enterprise. Generic resources are used in which levels of the Process Assessment Model (PAM)? a) Only at level 1 b) At all levels of the capability model c) From levels 2 to 5 d) Only at level 5 - ANSWER c) Generic resources are used from levels 2 to 5 in the PAM Identify the missing word(s) in the following sentence. Governance ensures that __[?]__ are evaluated to determine balanced, agreed-on enterprise objectives to be achieved. a) Processes b) Stakeholder needs c) IT-Related goals d) Enterprises - ANSWER b) Governance ensures that stakeholder needs, conditions and options are evaluated to determine balanced, agreed-on enterprise objectives to be achieved. The COBIT 5 framework delivers to its stakeholders the most complete and up-to-date guidance on governance and management of enterprise IT by ___[?]___. a) Keeping the other ISACA frameworks separate b) Providing a sound and comprehensive reference of good practices c) Providing a complex architecture d) Mandatorily using other standards - ANSWER b) Providing a sound and comprehensive reference of good practices is one of the ways in which COBIT 5 framework delivers to its stakeholders the most complete and up-to-date guidance on governance and management of enterprise IT Which element is a key component of the COBIT 5 governance approach? a) Stakeholder Transparency b) Roles, Responsibilities and Activities c) Evaluate, Direct and Monitor d) Plan, Build, Run and Monitor - ANSWER b) 'Roles, Responsibilities and Activities' is one of the key components of the COBIT 5 governance approach At what process capability level(s) is the Process Reference Model used? a) All Levels b) None of the Levels c) Level 1 only d) Level 2, 3, 4 and 5 - ANSWER c) The Process Reference Model is used at Process Capability Level 1 only. What does span of control mean in the organisational structures enabler? a) Publishing a schedule of Board meetings in advance b) Issuing the boundaries of the organisational structure's decision rights c) Defining the structure to delegate decision rights d) Documenting the decisions which the structure is authorised to take - ANSWER b) Issuing the boundaries of the organisational structure's decision rights refers to the span of control. What is followed for creating, encouraging and maintaining desired behaviour throughout the enterprise? a) Lifecycle b) Individual ethics c) Organisational ethics d) Good practices - ANSWER d) Good practices are followed for creating, encouraging and maintaining desired behaviour throughout the enterprise. What term is used to describe a merger, acquisition or divestiture's impact on the governance and management of IT? a) Pain points b) Trigger events c) Enterprise change d) IT risk - ANSWER b) Merger, acquisition or divestiture are trigger events for focussing on the governance and management of IT. Which enabler describes an organised set of practices and activities to achieve certain objectives? a) Culture, Ethics and Behaviour b) Processes c) Principles, Policies and Frameworks d) People, Skills and Competencies - ANSWER b) Processes describe an organised set of practices and activities to achieve certain objectives and produce a set of outputs in support of overall IT-related goals. Which aspect relates to the COBIT 5 key principle of 'meeting stakeholder needs'? a) Aligns with the latest views on governance b) Provides a simple architecture c) Translates stakeholder needs into strategy d) Defines the relationship between governance and management - ANSWER c) Translating stakeholder needs into strategy is a key aspect of the Principle 'Meeting stakeholder Needs' What attribute describes information sufficiently up-to-date for the task at hand? a) Relevancy b) Currency c) Completeness d) Ease of manipulation - ANSWER b) Currency is the extent to which information is sufficiently up-to-date for the task at hand. In what sequence would the following occur in the COBIT 5 Process Reference Model? 1. Run 2. Build 3. Direct a) 2,3,1 b) 1,2,3 c) 3,2,1 d) 3,1,2 - ANSWER c) 3,2,1 - The PRM flow is Evaluate -> Direct -> Plan -> Build -> Run -> Monitor (MEA) -> Monitor -> Evaluate Which driver influences stakeholder needs? a) Good Practices b) Contextual Quality c) Lag Indicators d) A Changing Business Environment - ANSWER d) A changing business environment influences stakeholder needs.