ISACA COBIT 2019 Practice Exams
Last updated on Oct 21,2026- Exam Code: COBIT 2019
- Exam Name: COBIT 2019 Foundation
- Certification Provider: ISACA
- Latest update: Oct 21,2026
Question #21
The alignment goal titled "Enabling and supporting business processes by integrating applications and technology" is aligned to which IT balanced scorecard (BSC) dimension?
- A . Financial
- B . Internal
- C . Customer
Correct Answer: B
B
Explanation:
The IT balanced scorecard (BSC) is a tool that helps to measure and communicate the achievement of IT goals in relation to enterprise goals, using four dimensions: financial, customer, internal, and learning and growth. The alignment goal titled “Enabling and supporting business processes by integrating applications and technology” is aligned to the internal dimension of the IT BSC, as it relates to the efficiency and effectiveness of IT processes that support business processes2, p. 20.
Reference: 2: COBIT 2019 Framework: Governance and Management Objectives
B
Explanation:
The IT balanced scorecard (BSC) is a tool that helps to measure and communicate the achievement of IT goals in relation to enterprise goals, using four dimensions: financial, customer, internal, and learning and growth. The alignment goal titled “Enabling and supporting business processes by integrating applications and technology” is aligned to the internal dimension of the IT BSC, as it relates to the efficiency and effectiveness of IT processes that support business processes2, p. 20.
Reference: 2: COBIT 2019 Framework: Governance and Management Objectives
Question #22
Which of the following is a CRITICAL requirement when the IT function is strategic and crucial to the success of the business?
- A . Documented IT policies and procedures
- B . High involvement of IT-related roles in organizational structures
- C . Highly capable security-related processes and ensured risk optimization
Correct Answer: B
B
Explanation:
The high involvement of IT-related roles in organizational structures is a critical requirement when the IT function is strategic and crucial to the success of the business. The IT function is the part of the enterprise that is responsible for planning, delivering, operating, and supporting information and technology services. The IT function can have different levels of strategic importance for the business, depending on the nature, scope, and objectives of the enterprise. When the IT function is strategic and crucial to the success of the business, it means that information and technology are essential for creating value, achieving competitive advantage, enabling innovation, etc. In this case, it is critical to have high involvement of IT-related roles in organizational structures, such as having IT representation at the board level, having clear IT leadership roles and responsibilities, having effective IT governance committees or forums, etc.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts
B
Explanation:
The high involvement of IT-related roles in organizational structures is a critical requirement when the IT function is strategic and crucial to the success of the business. The IT function is the part of the enterprise that is responsible for planning, delivering, operating, and supporting information and technology services. The IT function can have different levels of strategic importance for the business, depending on the nature, scope, and objectives of the enterprise. When the IT function is strategic and crucial to the success of the business, it means that information and technology are essential for creating value, achieving competitive advantage, enabling innovation, etc. In this case, it is critical to have high involvement of IT-related roles in organizational structures, such as having IT representation at the board level, having clear IT leadership roles and responsibilities, having effective IT governance committees or forums, etc.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts
Question #23
What is the FINAL step in governance system design?
- A . Review governance objectives that correspond to high compliance requirements.
- B . Reconcile inherent priority conflicts.
- C . Define target capability levels for the most critical objectives.
- D . Refine the scope of the governance system.
Correct Answer: C
C
Explanation:
The final step in governance system design is to define target capability levels for the most critical objectives. The governance system design is the process of designing and implementing a governance system for an enterprise using COBIT 2019. The governance system design involves tailoring the COBIT 2019 components such as principles, enablers, goals, processes, practices, roles, structures, metrics, etc., according to the enterprise’s context and needs. The governance system design also involves considering various design factors such as enterprise strategy archetype; enterprise goals; IT-related goals; risk profile; IT deployment; threat landscape; compliance requirement; operating environment; size of enterprise; culture; stakeholders; etc., that influence how an enterprise designs and implements its governance system using COBIT 2019. The final step in governance system design is to define target capability levels for the most critical objectives. The capability levels are a measure of how well an enterprise performs its information and technology governance and management processes in terms of process attributes such as process performance, process definition, process deployment, process measurement, process control, process optimization, etc. The capability levels range from 0 (incomplete) to 5 (optimizing), indicating the degree of maturity and effectiveness of an enterprise’s information and technology governance and management processes. The critical objectives are the governance and management objectives that have been prioritized based on the design factors and the stakeholder needs. The governance and management objectives are the statements of what an enterprise wants to achieve in terms of its information and technology governance. The governance and management objectives are derived from the enterprise goals, which are the high-level statements of what an enterprise wants to achieve in terms of its mission, vision, values, strategy, etc. By defining target capability levels for the most critical objectives as the final step in governance system design, an enterprise can ensure that it has set realistic and achievable goals for its information and technology governance and management processes that support its strategy and objectives. This will also help to identify the gaps or issues that need to be addressed to enhance the capability levels of the selected processes.
Reference: COBIT 2019 Design Guide: page 53-54: COBIT 2019 Process Assessment Model: page 11-13
C
Explanation:
The final step in governance system design is to define target capability levels for the most critical objectives. The governance system design is the process of designing and implementing a governance system for an enterprise using COBIT 2019. The governance system design involves tailoring the COBIT 2019 components such as principles, enablers, goals, processes, practices, roles, structures, metrics, etc., according to the enterprise’s context and needs. The governance system design also involves considering various design factors such as enterprise strategy archetype; enterprise goals; IT-related goals; risk profile; IT deployment; threat landscape; compliance requirement; operating environment; size of enterprise; culture; stakeholders; etc., that influence how an enterprise designs and implements its governance system using COBIT 2019. The final step in governance system design is to define target capability levels for the most critical objectives. The capability levels are a measure of how well an enterprise performs its information and technology governance and management processes in terms of process attributes such as process performance, process definition, process deployment, process measurement, process control, process optimization, etc. The capability levels range from 0 (incomplete) to 5 (optimizing), indicating the degree of maturity and effectiveness of an enterprise’s information and technology governance and management processes. The critical objectives are the governance and management objectives that have been prioritized based on the design factors and the stakeholder needs. The governance and management objectives are the statements of what an enterprise wants to achieve in terms of its information and technology governance. The governance and management objectives are derived from the enterprise goals, which are the high-level statements of what an enterprise wants to achieve in terms of its mission, vision, values, strategy, etc. By defining target capability levels for the most critical objectives as the final step in governance system design, an enterprise can ensure that it has set realistic and achievable goals for its information and technology governance and management processes that support its strategy and objectives. This will also help to identify the gaps or issues that need to be addressed to enhance the capability levels of the selected processes.
Reference: COBIT 2019 Design Guide: page 53-54: COBIT 2019 Process Assessment Model: page 11-13
Question #24
Using the COBIT 2019 Governance System Design Workflow allows enterprises to:
- A . design a governance system that focuses primarily on compliance requirements,
- B . ensure each of the stages and steps in the design process are closely adhered to.
- C . implement a governance framework that is strictly aligned to industry standards.
- D . realize a governance system that is tailored to their needs.
Correct Answer: D
D
Explanation:
Using the COBIT 2019 Governance System Design Workflow allows enterprises to realize a governance system that is tailored to their needs. The COBIT 2019 Governance System Design Workflow is a set of steps that guide enterprises in designing a customized governance system based on their specific context, goals, issues, and priorities. The workflow helps enterprises to identify their current state, desired state, gaps, improvement opportunities, design factors, governance components, roles, responsibilities, practices, activities, inputs, outputs, goals, metrics, and road map for implementing their governance system. The workflow also helps enterprises to balance competing requirements and resolve conflicts among stakeholders. By following the workflow, enterprises can design a governance system that fits their unique needs and delivers value to their business.
Reference: COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 29 2: COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 31
D
Explanation:
Using the COBIT 2019 Governance System Design Workflow allows enterprises to realize a governance system that is tailored to their needs. The COBIT 2019 Governance System Design Workflow is a set of steps that guide enterprises in designing a customized governance system based on their specific context, goals, issues, and priorities. The workflow helps enterprises to identify their current state, desired state, gaps, improvement opportunities, design factors, governance components, roles, responsibilities, practices, activities, inputs, outputs, goals, metrics, and road map for implementing their governance system. The workflow also helps enterprises to balance competing requirements and resolve conflicts among stakeholders. By following the workflow, enterprises can design a governance system that fits their unique needs and delivers value to their business.
Reference: COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 29 2: COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 31
Question #25
DevOps is an example of which of the following?
- A . A process and service
- B . A design factor and hybrid method
- C . A component variant and focus area
Correct Answer: B
B
Explanation:
In COBIT 2019, DevOps is classified as a design factor and a hybrid method. Design factors influence the tailoring of a governance system. As a hybrid method, DevOps combines development and operations practices, emphasizing continuous delivery and integration. This concept aligns with COBIT’s adaptable framework, which accommodates various focus areas and methodologies to enhance agility and responsiveness in IT processes.
B
Explanation:
In COBIT 2019, DevOps is classified as a design factor and a hybrid method. Design factors influence the tailoring of a governance system. As a hybrid method, DevOps combines development and operations practices, emphasizing continuous delivery and integration. This concept aligns with COBIT’s adaptable framework, which accommodates various focus areas and methodologies to enhance agility and responsiveness in IT processes.
Question #26
An enterprise plans to outsource all of its noncore IT operations but wants to ensure the proper level of governance, risk and compliance (GRC) controls.
Which of the following governance and management objectives would provide the MOST relevant management practices for the enterprise?
- A . AP012 Managed Risk
- B . APO10 Managed Vendors
- C . AP013 Managed Security
- D . APO09 Managed Service Agreements
Correct Answer: D
D
Explanation:
The management objective APO09 Managed Service Agreements involves ensuring that IT services are delivered in accordance with agreed-upon service levels and costs. This management objective covers the activities of defining, negotiating, establishing, monitoring, reporting, and reviewing service agreements between service providers and service consumers. This management objective is most relevant for an enterprise that plans to outsource all of its noncore IT operations but wants to ensure the proper level of governance, risk and compliance (GRC) controls. By applying this management objective, the enterprise can improve its service governance and management capabilities, ensure alignment of IT services with business strategy and objectives, enhance service performance and outcomes, and increase service consumer satisfaction and value realization. This management objective also involves ensuring that the outsourced IT services comply with the applicable laws, regulations, standards, guidelines, contracts, or agreements that govern the information and technology activities of the enterprise, as well as with the enterprise’s policies, procedures, processes, practices, etc. This management objective also involves managing the risks associated with outsourcing IT services such as loss of control, vendor lock-in, quality issues, security breaches, etc.
Reference: COBIT 2019 Process Reference Guide: Governance and Management Objectives: page
63-65: COBIT 2019 Implementation Guide: page 49-50
D
Explanation:
The management objective APO09 Managed Service Agreements involves ensuring that IT services are delivered in accordance with agreed-upon service levels and costs. This management objective covers the activities of defining, negotiating, establishing, monitoring, reporting, and reviewing service agreements between service providers and service consumers. This management objective is most relevant for an enterprise that plans to outsource all of its noncore IT operations but wants to ensure the proper level of governance, risk and compliance (GRC) controls. By applying this management objective, the enterprise can improve its service governance and management capabilities, ensure alignment of IT services with business strategy and objectives, enhance service performance and outcomes, and increase service consumer satisfaction and value realization. This management objective also involves ensuring that the outsourced IT services comply with the applicable laws, regulations, standards, guidelines, contracts, or agreements that govern the information and technology activities of the enterprise, as well as with the enterprise’s policies, procedures, processes, practices, etc. This management objective also involves managing the risks associated with outsourcing IT services such as loss of control, vendor lock-in, quality issues, security breaches, etc.
Reference: COBIT 2019 Process Reference Guide: Governance and Management Objectives: page
63-65: COBIT 2019 Implementation Guide: page 49-50
Question #27
Which of the following is the FINAL action before completing the design of an IT governance system?
- A . Resolving inherent priority conflicts
- B . Determining a sourcing model
- C . Selecting an implementation method
Correct Answer: C
C
Explanation:
Selecting an implementation method is the final action before completing the design of an IT governance system. An IT governance system is a set of components that provide direction, oversight, evaluation, monitoring, assurance, etc., for an enterprise’s information and technology. The design of an IT governance system involves several steps or actions that help to customize and tailor the system to the specific needs and context of the enterprise. These steps or actions include defining design factors, defining focus areas, defining current state, defining target state, identifying gaps and improvement opportunities, defining roadmap and priorities, etc. Selecting an implementation method is the final action before completing the design of an IT governance system because it helps to determine how the system will be put into practice, what resources and activities are needed, what challenges and risks are expected, etc.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution
C
Explanation:
Selecting an implementation method is the final action before completing the design of an IT governance system. An IT governance system is a set of components that provide direction, oversight, evaluation, monitoring, assurance, etc., for an enterprise’s information and technology. The design of an IT governance system involves several steps or actions that help to customize and tailor the system to the specific needs and context of the enterprise. These steps or actions include defining design factors, defining focus areas, defining current state, defining target state, identifying gaps and improvement opportunities, defining roadmap and priorities, etc. Selecting an implementation method is the final action before completing the design of an IT governance system because it helps to determine how the system will be put into practice, what resources and activities are needed, what challenges and risks are expected, etc.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution
Question #28
Which of the following BEST enables an enterprise to maximize value from the use of I&T?
- A . A clearly defined I&T management structure
- B . An actionable strategy and governance system
- C . Well-documented and monitored business processes
Correct Answer: B
B
Explanation:
An actionable strategy and governance system enables an enterprise to maximize value from the use of I&T by providing direction, alignment, oversight, and performance measurement. A strategy defines the enterprise’s vision, mission, goals, and objectives, and how I&T can support them. A governance system ensures that the strategy is implemented effectively and efficiently, and that the outcomes are monitored and evaluated. COBIT provides a comprehensive governance system for enterprise I&T that covers all aspects of governance, management, and enablers.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019
Framework: Governance and Management Objectives
B
Explanation:
An actionable strategy and governance system enables an enterprise to maximize value from the use of I&T by providing direction, alignment, oversight, and performance measurement. A strategy defines the enterprise’s vision, mission, goals, and objectives, and how I&T can support them. A governance system ensures that the strategy is implemented effectively and efficiently, and that the outcomes are monitored and evaluated. COBIT provides a comprehensive governance system for enterprise I&T that covers all aspects of governance, management, and enablers.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019
Framework: Governance and Management Objectives
Question #29
Which of the following is a guiding principle in the development of COBIT?
- A . COBIT aligns with other related and relevant I&T standards, frameworks and regulations
- B . COBIT includes relevant content from other related I&T standards, frameworks and regulations.
- C . COBIT serves as a comprehensive standalone framework that covers all relevant I&T-related activities.
Correct Answer: A
A
Explanation:
A guiding principle in the development of COBIT is that COBIT aligns with other related and relevant I&T standards, frameworks and regulations. This is based on the principle of integration, which states that “governance of enterprise I&T should ensure integration into enterprise governance; alignment with other related standards, frameworks and regulations; and provision of a common language for all stakeholders” . COBIT does not include or replace other standards, frameworks or regulations, but rather complements them by providing a holistic and comprehensive approach to governance of enterprise I&T.
A
Explanation:
A guiding principle in the development of COBIT is that COBIT aligns with other related and relevant I&T standards, frameworks and regulations. This is based on the principle of integration, which states that “governance of enterprise I&T should ensure integration into enterprise governance; alignment with other related standards, frameworks and regulations; and provision of a common language for all stakeholders” . COBIT does not include or replace other standards, frameworks or regulations, but rather complements them by providing a holistic and comprehensive approach to governance of enterprise I&T.
Question #30
To gain the GREATEST benefit from the COBIT framework, a stakeholder should have a certain level of experience and a thorough understanding of:
- A . the regulatory compliance function.
- B . the entire enterprise.
- C . the IT function.
Correct Answer: B
B
Explanation:
To gain the greatest benefit from the COBIT framework, a stakeholder should have a certain level of experience and a thorough understanding of the entire enterprise. A stakeholder is a person or group that has an interest or concern in an enterprise’s activities or outcomes. Examples of stakeholders are board members, executives, managers, employees, customers, suppliers, regulators, etc. To gain the greatest benefit from the COBIT framework, a stakeholder should have a certain level of experience in I&T governance or management practices, as well as a thorough understanding of the entire enterprise’s vision, mission, values, goals, objectives, strategies, processes, culture, etc. This would help them to apply the COBIT framework effectively and efficiently to their specific context and needs.1
Reference: COBIT 2019 Framework: Introduction and Methodology, [COBIT 2019 Framework: Stakeholder Needs]
B
Explanation:
To gain the greatest benefit from the COBIT framework, a stakeholder should have a certain level of experience and a thorough understanding of the entire enterprise. A stakeholder is a person or group that has an interest or concern in an enterprise’s activities or outcomes. Examples of stakeholders are board members, executives, managers, employees, customers, suppliers, regulators, etc. To gain the greatest benefit from the COBIT framework, a stakeholder should have a certain level of experience in I&T governance or management practices, as well as a thorough understanding of the entire enterprise’s vision, mission, values, goals, objectives, strategies, processes, culture, etc. This would help them to apply the COBIT framework effectively and efficiently to their specific context and needs.1
Reference: COBIT 2019 Framework: Introduction and Methodology, [COBIT 2019 Framework: Stakeholder Needs]