ISACA COBIT 2019 Practice Exams
Last updated on Oct 21,2026- Exam Code: COBIT 2019
- Exam Name: COBIT 2019 Foundation
- Certification Provider: ISACA
- Latest update: Oct 21,2026
Question #41
Which of the following roles should be involved when nominating key program roles to create the appropriate governance environment?
- A . IT management
- B . Business management
- C . Human resources
- D . Board and executives
Correct Answer: D
D
Explanation:
The key program roles are the roles that are responsible for leading, directing, managing, supporting, and executing the EGIT implementation program. The nomination of these roles is a critical step in creating the appropriate governance environment for the program. One of the roles that should be involved in this nomination process is the board and executives, who are the highest-level governance body and decision makers in an enterprise. The board and executives provide strategic direction, oversight, guidance, and approval for the EGIT implementation program. They also ensure that the program is aligned with the enterprise’s vision, mission, values, strategy, goals, and objectives. The board and executives also appoint or endorse other key program roles such as the program sponsor, program manager, program steering committee, change champion network, etc.
Reference: COBIT 2019 Implementation Guide, page 37-38: COBIT 2019 Framework: Governance and Management Objectives, page 19-20
D
Explanation:
The key program roles are the roles that are responsible for leading, directing, managing, supporting, and executing the EGIT implementation program. The nomination of these roles is a critical step in creating the appropriate governance environment for the program. One of the roles that should be involved in this nomination process is the board and executives, who are the highest-level governance body and decision makers in an enterprise. The board and executives provide strategic direction, oversight, guidance, and approval for the EGIT implementation program. They also ensure that the program is aligned with the enterprise’s vision, mission, values, strategy, goals, and objectives. The board and executives also appoint or endorse other key program roles such as the program sponsor, program manager, program steering committee, change champion network, etc.
Reference: COBIT 2019 Implementation Guide, page 37-38: COBIT 2019 Framework: Governance and Management Objectives, page 19-20
Question #42
Which of the following inputs MUST be defined before the planning for a new governance framework can be finalized?
- A . Performance management
- B . Enterprise goals
- C . Risk frameworks
- D . Implementation costs
Correct Answer: B
B
Explanation:
The planning for a new governance framework requires defining the inputs that will guide the design and implementation of the framework. One of the most important inputs is the enterprise goals, which are the high-level statements of what the enterprise wants to achieve in terms of its mission, vision, values, and strategy. The enterprise goals provide the direction and purpose for the governance framework, and help to align the governance objectives, enablers, principles, and practices with the enterprise’s needs and expectations. The enterprise goals also help to identify the relevant stakeholders, their roles and responsibilities, and their requirements and expectations from the governance framework34
Reference: 3: COBIT 2019 Framework: Introduction and Methodology, page 25-26 4: COBIT 2019 Design Guide, page 23-24
B
Explanation:
The planning for a new governance framework requires defining the inputs that will guide the design and implementation of the framework. One of the most important inputs is the enterprise goals, which are the high-level statements of what the enterprise wants to achieve in terms of its mission, vision, values, and strategy. The enterprise goals provide the direction and purpose for the governance framework, and help to align the governance objectives, enablers, principles, and practices with the enterprise’s needs and expectations. The enterprise goals also help to identify the relevant stakeholders, their roles and responsibilities, and their requirements and expectations from the governance framework34
Reference: 3: COBIT 2019 Framework: Introduction and Methodology, page 25-26 4: COBIT 2019 Design Guide, page 23-24
Question #43
One year after IT governance is implemented, what KEY question should be asked and evaluated?
- A . Has the enterprise leveraged lessons learned?
- B . Has the enterprise reduced its risk exposure?
- C . Has the enterprise achieved expected benefits?
Correct Answer: C
C
Explanation:
The key question that should be asked and evaluated one year after IT governance is implemented is whether the enterprise has achieved expected benefits. Benefits are the positive outcomes or value that are derived from a project or program. Benefits can be tangible (such as increased revenue, reduced costs, improved efficiency, etc.) or intangible (such as enhanced reputation, customer satisfaction, employee engagement, etc.). Benefits realization is the process of planning, managing, measuring, and reporting the benefits that are delivered by a project or program. Asking and evaluating whether the enterprise has achieved expected benefits one year after IT governance is implemented is important because it helps to determine whether the IT governance system is effective in creating value for the enterprise and its stakeholders.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Implementation Guide: Implementing an Information and Technology Governance Solution
C
Explanation:
The key question that should be asked and evaluated one year after IT governance is implemented is whether the enterprise has achieved expected benefits. Benefits are the positive outcomes or value that are derived from a project or program. Benefits can be tangible (such as increased revenue, reduced costs, improved efficiency, etc.) or intangible (such as enhanced reputation, customer satisfaction, employee engagement, etc.). Benefits realization is the process of planning, managing, measuring, and reporting the benefits that are delivered by a project or program. Asking and evaluating whether the enterprise has achieved expected benefits one year after IT governance is implemented is important because it helps to determine whether the IT governance system is effective in creating value for the enterprise and its stakeholders.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Implementation Guide: Implementing an Information and Technology Governance Solution
Question #44
Which COBIT domain of management objectives incorporates managed risk?
- A . Build, acquire and implement (BAI)
- B . Align, plan and organize (APO)
- C . Deliver, service and support (DSS)
Correct Answer: B
B
Explanation:
The Align, Plan and Organize (APO) domain incorporates managed risk as one of its management objectives. The APO domain covers the activities related to aligning IT strategy with business strategy, planning IT resources and capabilities, organizing IT governance structures and processes, managing IT performance, innovation, risk, quality, human resources, security, information, services, etc. The APO domain consists of 13 management objectives that describe the desired outcomes of these activities.14
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance and Management Objectives
B
Explanation:
The Align, Plan and Organize (APO) domain incorporates managed risk as one of its management objectives. The APO domain covers the activities related to aligning IT strategy with business strategy, planning IT resources and capabilities, organizing IT governance structures and processes, managing IT performance, innovation, risk, quality, human resources, security, information, services, etc. The APO domain consists of 13 management objectives that describe the desired outcomes of these activities.14
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance and Management Objectives
Question #45
The level achieved when all processes of a focus area achieve a particular capability level is referred to as:
- A . the rating level.
- B . the maturity level.
- C . the performance level.
Correct Answer: B
B
Explanation:
The level achieved when all processes of a focus area achieve a particular capability level is referred to as the maturity level. A focus area is a topic or issue that can be addressed by governance objectives, such as digital transformation, cybersecurity, privacy, etc. A focus area consists of a set of processes that are relevant and applicable for the topic or issue. A capability level is a measure of how well a process or activity is performed in terms of effectiveness, efficiency, completeness, reliability, etc. A capability level can range from 0 (incomplete) to 5 (optimizing). A maturity level is the level achieved when all processes of a focus area achieve a particular capability level. A maturity level can range from 0 (non-existent) to 5 (optimized).12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
B
Explanation:
The level achieved when all processes of a focus area achieve a particular capability level is referred to as the maturity level. A focus area is a topic or issue that can be addressed by governance objectives, such as digital transformation, cybersecurity, privacy, etc. A focus area consists of a set of processes that are relevant and applicable for the topic or issue. A capability level is a measure of how well a process or activity is performed in terms of effectiveness, efficiency, completeness, reliability, etc. A capability level can range from 0 (incomplete) to 5 (optimizing). A maturity level is the level achieved when all processes of a focus area achieve a particular capability level. A maturity level can range from 0 (non-existent) to 5 (optimized).12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
Question #46
Which of the following describes the COBIT performance model?
- A . The COBIT performance model is a stand-alone model that can be used in conjunction with the COBIT core model.
- B . The COBIT performance model is integrated into the COBIT core model.
- C . The COBIT performance model is unique and not aligned with existing maturity and capability models.
Correct Answer: B
B
Explanation:
The COBIT performance model is integrated into the COBIT core model. The COBIT core model consists of two main elements: the governance and management objectives (which define what needs to be achieved) and the performance model (which defines how well it needs to be achieved). The performance model is based on existing maturity and capability models (such as ISO/IEC 15504) and provides a common language to measure and communicate performance. The performance model consists of six levels (from 0 to 5) that describe the increasing degree of capability for each governance or management objective.15
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
B
Explanation:
The COBIT performance model is integrated into the COBIT core model. The COBIT core model consists of two main elements: the governance and management objectives (which define what needs to be achieved) and the performance model (which defines how well it needs to be achieved). The performance model is based on existing maturity and capability models (such as ISO/IEC 15504) and provides a common language to measure and communicate performance. The performance model consists of six levels (from 0 to 5) that describe the increasing degree of capability for each governance or management objective.15
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
Question #47
What is the KEY benefit of considering the size of the enterprise when designing governance?
- A . Identifying the implementation effort needed to finalize the design phase
- B . Determining whether COBIT or SME focus area guidance should be used
- C . Assigning priorities to governance and management objectives
- D . Targeting capability levels of governance and management objectives
Correct Answer: D
D
Explanation:
The size of the enterprise is a design factor that describes the scale or magnitude of an enterprise’s information and technology activities in terms of aspects such as number of employees, customers, locations, products, services, processes, systems, data, etc. The size of the enterprise influences the governance and management of information and technology in terms of the level of complexity, diversity, variability, standardization, centralization, decentralization, etc., that are required for its information and technology activities. The key benefit of considering the size of the enterprise when designing governance is targeting capability levels of governance and management objectives. The capability levels are a measure of how well an enterprise performs its information and technology governance and management processes in terms of process attributes such as process performance, process definition, process deployment, process measurement, process control, process optimization, etc. The capability levels range from 0 (incomplete) to 5 (optimizing), indicating the degree of maturity and effectiveness of an enterprise’s information and technology governance and management processes. The governance and management objectives are the statements of what an enterprise wants to achieve in terms of its information and technology governance. The governance and management objectives are derived from the enterprise goals, which are the high-level statements of what an enterprise wants to achieve in terms of its mission, vision, values, strategy, etc. By considering the size of the enterprise when designing governance, an enterprise can target capability levels of governance and management objectives that are appropriate for its scale and magnitude of information and technology activities. This will also help to optimize its information and technology performance and value delivery12
Reference: 1: COBIT 2019 Design Guide: page 47-48 2: COBIT 2019 Process Assessment Model: page 11-13
D
Explanation:
The size of the enterprise is a design factor that describes the scale or magnitude of an enterprise’s information and technology activities in terms of aspects such as number of employees, customers, locations, products, services, processes, systems, data, etc. The size of the enterprise influences the governance and management of information and technology in terms of the level of complexity, diversity, variability, standardization, centralization, decentralization, etc., that are required for its information and technology activities. The key benefit of considering the size of the enterprise when designing governance is targeting capability levels of governance and management objectives. The capability levels are a measure of how well an enterprise performs its information and technology governance and management processes in terms of process attributes such as process performance, process definition, process deployment, process measurement, process control, process optimization, etc. The capability levels range from 0 (incomplete) to 5 (optimizing), indicating the degree of maturity and effectiveness of an enterprise’s information and technology governance and management processes. The governance and management objectives are the statements of what an enterprise wants to achieve in terms of its information and technology governance. The governance and management objectives are derived from the enterprise goals, which are the high-level statements of what an enterprise wants to achieve in terms of its mission, vision, values, strategy, etc. By considering the size of the enterprise when designing governance, an enterprise can target capability levels of governance and management objectives that are appropriate for its scale and magnitude of information and technology activities. This will also help to optimize its information and technology performance and value delivery12
Reference: 1: COBIT 2019 Design Guide: page 47-48 2: COBIT 2019 Process Assessment Model: page 11-13
Question #48
COBIT defines stakeholder value creation as which of the following?
- A . Realization of benefits at a controlled resource cost while controlling risk
- B . Realization of benefits at an optimal resource cost while optimizing risk
- C . Realization of benefits at a reduced resource cost while mitigating risk
Correct Answer: B
B
Explanation:
COBIT defines stakeholder value creation as the realization of benefits at an optimal resource cost while optimizing risk. This is based on the principle of balance, which states that “governance of enterprise I&T should ensure that stakeholder needs, conditions and options are evaluated to determine balanced, agreed-on enterprise objectives to be achieved; setting direction through prioritization and decision making; and monitoring performance and compliance against agreed-on direction and objectives” . Value creation is not only about reducing costs or mitigating risks, but also about optimizing them in relation to the expected benefits.
B
Explanation:
COBIT defines stakeholder value creation as the realization of benefits at an optimal resource cost while optimizing risk. This is based on the principle of balance, which states that “governance of enterprise I&T should ensure that stakeholder needs, conditions and options are evaluated to determine balanced, agreed-on enterprise objectives to be achieved; setting direction through prioritization and decision making; and monitoring performance and compliance against agreed-on direction and objectives” . Value creation is not only about reducing costs or mitigating risks, but also about optimizing them in relation to the expected benefits.
Question #49
Which of the following is an example of a focus area within COBIT?
- A . Robotic process automation
- B . Internet of Things
- C . Digital transformation
Correct Answer: C
C
Explanation:
A focus area within COBIT is a topic that is relevant to governance and management of enterprise information and technology, and that requires additional guidance to address specific challenges or priorities. Digital transformation is one of the focus areas that COBIT provides guidance on, as it involves the use of technology to create new or modify existing business processes, culture, and customer experiences to meet changing business and market requirements1, p. 23.
Reference: 1: COBIT 2019 Framework: Introduction and Methodology
C
Explanation:
A focus area within COBIT is a topic that is relevant to governance and management of enterprise information and technology, and that requires additional guidance to address specific challenges or priorities. Digital transformation is one of the focus areas that COBIT provides guidance on, as it involves the use of technology to create new or modify existing business processes, culture, and customer experiences to meet changing business and market requirements1, p. 23.
Reference: 1: COBIT 2019 Framework: Introduction and Methodology
Question #50
Which of the following is an important desired outcome to be achieved from the execution of an EGIT implementation program plan?
- A . Completion of EGIT project implementation regardless of the amount of time required
- B . Transition of EGIT projects into the enterprise’s normal development life cycle
- C . Development of a record of unapproved EGIT projects
- D . Mitigation of all risks associated with the implementation of EGIT projects
Correct Answer: B
B
Explanation:
The desired outcome of an EGIT implementation program plan is to ensure that the EGIT projects are aligned with the enterprise’s strategy, objectives, and stakeholder needs, and that they deliver value and benefits to the enterprise. One of the key steps in achieving this outcome is to transition the EGIT projects into the enterprise’s normal development life cycle, which involves ensuring that the projects are integrated with the existing processes, systems, and governance structures, and that they are monitored and controlled for quality, performance, and risk. This will also facilitate the continuous improvement and adaptation of the EGIT projects to changing business needs and environment12
Reference: 1: COBIT 2019 Implementation Guide, page 49-50 2: COBIT 2019 Design Guide, page 67-68
B
Explanation:
The desired outcome of an EGIT implementation program plan is to ensure that the EGIT projects are aligned with the enterprise’s strategy, objectives, and stakeholder needs, and that they deliver value and benefits to the enterprise. One of the key steps in achieving this outcome is to transition the EGIT projects into the enterprise’s normal development life cycle, which involves ensuring that the projects are integrated with the existing processes, systems, and governance structures, and that they are monitored and controlled for quality, performance, and risk. This will also facilitate the continuous improvement and adaptation of the EGIT projects to changing business needs and environment12
Reference: 1: COBIT 2019 Implementation Guide, page 49-50 2: COBIT 2019 Design Guide, page 67-68