ISACA COBIT 2019 Practice Exams
Last updated on Oct 22,2026- Exam Code: COBIT 2019
- Exam Name: COBIT 2019 Foundation
- Certification Provider: ISACA
- Latest update: Oct 22,2026
Question #51
Which of the following is the MOST essential attribute of the highest process capability level (Level 5)?
- A . Pursuit of continuous improvement
- B . Full achievement of the process’s purpose
- C . Quantitative performance measures
Correct Answer: A
A
Explanation:
The pursuit of continuous improvement is the most essential attribute of the highest process capability level (Level 5). A process capability level is a measure of how well a process or activity is performed in terms of effectiveness, efficiency, completeness, reliability, etc. A process capability level can range from 0 (incomplete) to 5 (optimizing). Level 5 (optimizing) means that the process continuously improves its performance through both incremental and innovative improvements. The pursuit of continuous improvement is the most essential attribute of Level 5, as it implies that the process is constantly monitored, evaluated, learned from, and enhanced.14
Reference: CMMI for Development, Version 1.3, CMMI Institute – Capability Maturity Model Integration
A
Explanation:
The pursuit of continuous improvement is the most essential attribute of the highest process capability level (Level 5). A process capability level is a measure of how well a process or activity is performed in terms of effectiveness, efficiency, completeness, reliability, etc. A process capability level can range from 0 (incomplete) to 5 (optimizing). Level 5 (optimizing) means that the process continuously improves its performance through both incremental and innovative improvements. The pursuit of continuous improvement is the most essential attribute of Level 5, as it implies that the process is constantly monitored, evaluated, learned from, and enhanced.14
Reference: CMMI for Development, Version 1.3, CMMI Institute – Capability Maturity Model Integration
Question #52
When tailoring the COBIT organization structure to organizational context and priorities, which of the following should be done NEXT after mapping organizational structures with specific responsibility or accountability?
- A . Adapt the COBIT roles and organizational structures.
- B . Revise the organizational hierarchy with job descriptions.
- C . Add two levels of involvement for consulted and informed.
Correct Answer: C
C
Explanation:
When tailoring the COBIT organization structure to organizational context and priorities, the next step after mapping organizational structures with specific responsibility or accountability is to add two levels of involvement for consulted and informed. This step helps to identify the stakeholders who need to be involved in the decision-making process, either by providing input or feedback (consulted), or by being notified of the outcomes or actions (informed). This step is based on the COBIT 2019 Implementation Guide2, page 46.
Reference: 2: COBIT 2019 Implementation Guide | Digital | English
C
Explanation:
When tailoring the COBIT organization structure to organizational context and priorities, the next step after mapping organizational structures with specific responsibility or accountability is to add two levels of involvement for consulted and informed. This step helps to identify the stakeholders who need to be involved in the decision-making process, either by providing input or feedback (consulted), or by being notified of the outcomes or actions (informed). This step is based on the COBIT 2019 Implementation Guide2, page 46.
Reference: 2: COBIT 2019 Implementation Guide | Digital | English
Question #53
IT governance has been operating for three years and is satisfactorily achieving desired outcomes.
What would be the PRIMARY purpose of reexamining the IT strategic plan?
- A . To lower service delivery costs
- B . To identify newly emerging risks
- C . To assess improvement opportunities
Correct Answer: C
C
Explanation:
The primary purpose of reexamining the IT strategic plan after IT governance has been operating for three years and is satisfactorily achieving desired outcomes is to assess improvement opportunities. The IT strategic plan is a document that defines the vision, mission, goals, objectives, strategies, and tactics for IT governance and management, as well as the alignment with the enterprise’s business strategy. By reexamining the plan periodically, the enterprise can identify any changes in the internal or external environment that may affect IT governance, as well as any areas for enhancement or optimization. The purpose is based on the COBIT 2019 Implementation Guide3, page 26.
Reference: 3: COBIT 2019 Implementation Guide | Digital | English
C
Explanation:
The primary purpose of reexamining the IT strategic plan after IT governance has been operating for three years and is satisfactorily achieving desired outcomes is to assess improvement opportunities. The IT strategic plan is a document that defines the vision, mission, goals, objectives, strategies, and tactics for IT governance and management, as well as the alignment with the enterprise’s business strategy. By reexamining the plan periodically, the enterprise can identify any changes in the internal or external environment that may affect IT governance, as well as any areas for enhancement or optimization. The purpose is based on the COBIT 2019 Implementation Guide3, page 26.
Reference: 3: COBIT 2019 Implementation Guide | Digital | English
Question #54
Which of the following is the PRIMARY purpose of implementing an enterprise governance of information and technology (EGIT) system?
- A . To document I&T business objectives and processes
- B . To deliver stakeholder value from I&T-enabled investments
- C . To comply with I&T regulatory requirements
Correct Answer: B
B
Explanation:
The primary purpose of implementing an enterprise governance of information and technology (EGIT) system is to deliver stakeholder value from I&T-enabled investments. An EGIT system is a set of components that provide direction, oversight, evaluation, monitoring, assurance, etc., for an enterprise’s information and technology. An I&T-enabled investment is any initiative or project that involves the use of information and technology to create value for the enterprise. A stakeholder is a person or group that has an interest or concern in an enterprise’s activities or outcomes. The primary purpose of implementing an EGIT system is to deliver stakeholder value from I&T-enabled investments by ensuring that they align with the enterprise strategy and objectives, optimize risks and resources, achieve expected benefits and outcomes, etc.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
B
Explanation:
The primary purpose of implementing an enterprise governance of information and technology (EGIT) system is to deliver stakeholder value from I&T-enabled investments. An EGIT system is a set of components that provide direction, oversight, evaluation, monitoring, assurance, etc., for an enterprise’s information and technology. An I&T-enabled investment is any initiative or project that involves the use of information and technology to create value for the enterprise. A stakeholder is a person or group that has an interest or concern in an enterprise’s activities or outcomes. The primary purpose of implementing an EGIT system is to deliver stakeholder value from I&T-enabled investments by ensuring that they align with the enterprise strategy and objectives, optimize risks and resources, achieve expected benefits and outcomes, etc.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
Question #55
Which of the following is an enterprise goal that would MOST likely be evaluated by using a metric "percent of services that meet or exceed targets in revenues and market share"?
- A . Optimization of business process costs
- B . Customer-oriented service culture
- C . Portfolio of competitive services
Correct Answer: C
C
Explanation:
An enterprise goal is a high-level statement of what the enterprise wants to achieve, aligned with the mission, vision and values of the enterprise. Portfolio of competitive services is an enterprise goal that would most likely be evaluated by using a metric “percent of services that meet or exceed targets in revenues and market share”, as it reflects the need to offer products and services that are attractive to customers and differentiate the enterprise from its competitors2, p. 17.
Reference: 2: COBIT 2019 Framework: Governance and Management Objectives
C
Explanation:
An enterprise goal is a high-level statement of what the enterprise wants to achieve, aligned with the mission, vision and values of the enterprise. Portfolio of competitive services is an enterprise goal that would most likely be evaluated by using a metric “percent of services that meet or exceed targets in revenues and market share”, as it reflects the need to offer products and services that are attractive to customers and differentiate the enterprise from its competitors2, p. 17.
Reference: 2: COBIT 2019 Framework: Governance and Management Objectives
Question #56
l&T-related issues should be considered as part of the design factors for a governance system in order to manage:
- A . risks that have a high probability.
- B . risks that could materialize.
- C . risks that have a high impact.
- D . risks that have already materialized.
Correct Answer: C
C
Explanation:
IT-related issues should be considered as part of the design factors for a governance system in order
to manage risks that have a high impact. Design factors are the characteristics of the enterprise that
influence the design and operation of a governance system, such as size, industry, culture, strategy, etc. IT-related issues are one of the 11 design factors defined in COBIT 2019, and they refer to the specific challenges or opportunities that arise from the use of information and technology in the enterprise, such as cybersecurity, digital transformation, innovation, etc. These issues may pose significant risks to the enterprise’s objectives, performance, or reputation, and therefore need to be addressed by the governance system. The answer is based on the COBIT 2019 Design Guide1, page 15.
Reference: 1: COBIT 2019 Design Guide | Digital | English.
C
Explanation:
IT-related issues should be considered as part of the design factors for a governance system in order
to manage risks that have a high impact. Design factors are the characteristics of the enterprise that
influence the design and operation of a governance system, such as size, industry, culture, strategy, etc. IT-related issues are one of the 11 design factors defined in COBIT 2019, and they refer to the specific challenges or opportunities that arise from the use of information and technology in the enterprise, such as cybersecurity, digital transformation, innovation, etc. These issues may pose significant risks to the enterprise’s objectives, performance, or reputation, and therefore need to be addressed by the governance system. The answer is based on the COBIT 2019 Design Guide1, page 15.
Reference: 1: COBIT 2019 Design Guide | Digital | English.
Question #57
Which of the following stakeholders ensures the business case and program plan are realistic and achievable?
- A . IT process owners
- B . Business process owners
- C . Chief information officer (CIO)
- D . Implementation team
Correct Answer: C
C
Explanation:
The business case and program plan are essential documents that describe the rationale, objectives, scope, approach, benefits, costs, risks, and timeline of the EGIT implementation program. The business case and program plan provide the basis for obtaining approval, funding, resources, and support for the program from the stakeholders. Therefore, it is important that these documents are realistic and achievable, reflecting the current state and target state of information and technology governance in the enterprise. One of the roles that ensures the business case and program plan are realistic and achievable is the chief information officer (CIO), who is the senior executive responsible for leading and managing the information and technology function in the enterprise. The CIO has a role in developing, reviewing, validating, and approving the business case and program plan, ensuring that they are aligned with the enterprise’s strategy, objectives, needs, and expectations. The CIO also has a role in communicating and presenting the business case and program plan to other stakeholders such as the board, executives, business managers, IT managers, etc., and obtaining their buy-in and commitment for the program34
Reference: 3: COBIT 2019 Implementation Guide, page 39-40 4: COBIT 2019 Framework: Governance and Management Objectives, page 20-21
C
Explanation:
The business case and program plan are essential documents that describe the rationale, objectives, scope, approach, benefits, costs, risks, and timeline of the EGIT implementation program. The business case and program plan provide the basis for obtaining approval, funding, resources, and support for the program from the stakeholders. Therefore, it is important that these documents are realistic and achievable, reflecting the current state and target state of information and technology governance in the enterprise. One of the roles that ensures the business case and program plan are realistic and achievable is the chief information officer (CIO), who is the senior executive responsible for leading and managing the information and technology function in the enterprise. The CIO has a role in developing, reviewing, validating, and approving the business case and program plan, ensuring that they are aligned with the enterprise’s strategy, objectives, needs, and expectations. The CIO also has a role in communicating and presenting the business case and program plan to other stakeholders such as the board, executives, business managers, IT managers, etc., and obtaining their buy-in and commitment for the program34
Reference: 3: COBIT 2019 Implementation Guide, page 39-40 4: COBIT 2019 Framework: Governance and Management Objectives, page 20-21
Question #58
When assessing organizational structures, it is MOST helpful when subcriteria for each criterion are defined and linked to:
- A . job descriptions.
- B . capability levels.
- C . performance metrics.
Correct Answer: B
B
Explanation:
When assessing organizational structures, it is most helpful when subcriteria for each criterion are defined and linked to capability levels. Organizational structures are the arrangements of roles and responsibilities that enable the enterprise to achieve its objectives. Organizational structures can be assessed using six criteria: clarity, comprehensiveness, integration, alignment, authority, and accountability. Each criterion can be further divided into subcriteria that describe the specific aspects or attributes of the criterion. Capability levels are the measures of how well a process or activity is performed in terms of effectiveness, efficiency, completeness, reliability, etc. Capability levels can range from 0 (incomplete) to 5 (optimizing). Defining and linking subcriteria to capability levels helps to evaluate the current and desired state of organizational structures, as well as to identify gaps and improvement opportunities.123
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts
B
Explanation:
When assessing organizational structures, it is most helpful when subcriteria for each criterion are defined and linked to capability levels. Organizational structures are the arrangements of roles and responsibilities that enable the enterprise to achieve its objectives. Organizational structures can be assessed using six criteria: clarity, comprehensiveness, integration, alignment, authority, and accountability. Each criterion can be further divided into subcriteria that describe the specific aspects or attributes of the criterion. Capability levels are the measures of how well a process or activity is performed in terms of effectiveness, efficiency, completeness, reliability, etc. Capability levels can range from 0 (incomplete) to 5 (optimizing). Defining and linking subcriteria to capability levels helps to evaluate the current and desired state of organizational structures, as well as to identify gaps and improvement opportunities.123
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts
Question #59
Which of the following is a common characteristic of process capability levels 2 to 5?
- A . The process’s performance is monitored.
- B . The process’s purpose is achieved.
- C . The process’s description is well defined.
Correct Answer: C
C
Explanation:
According to the COBIT 2019 Process Assessment Model, a common characteristic of process capability levels 2 to 5 is that the process’s description is well-defined. This means that the process has a clear purpose, scope, inputs, outputs, activities, roles, responsibilities, interfaces, controls, measures, practices and procedures that are documented and maintained. A well-defined process enables consistent execution and improvement across the enterprise.2, p. 16
Reference: 2: COBIT 2019 Process Assessment Model: Using COBIT 2019
C
Explanation:
According to the COBIT 2019 Process Assessment Model, a common characteristic of process capability levels 2 to 5 is that the process’s description is well-defined. This means that the process has a clear purpose, scope, inputs, outputs, activities, roles, responsibilities, interfaces, controls, measures, practices and procedures that are documented and maintained. A well-defined process enables consistent execution and improvement across the enterprise.2, p. 16
Reference: 2: COBIT 2019 Process Assessment Model: Using COBIT 2019
Question #60
Which of the following is based on generic components of a governance system but are tailored for a specific purpose or context within a focus area?
- A . Guiding principles
- B . Variant components
- C . Design factors
Correct Answer: C
C
Explanation:
Design factors are based on generic components of a governance system but are tailored for a specific purpose or context within a focus area. Design factors are the characteristics or aspects of an enterprise that influence the design and implementation of a governance system. They include factors such as enterprise size, industry sector, risk profile, regulatory environment, sourcing model, etc. Focus areas are topics or issues that can be addressed by governance objectives, such as digital transformation, cybersecurity, privacy, etc. COBIT provides guidance on how to use design factors and focus areas to customize a governance system.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution
C
Explanation:
Design factors are based on generic components of a governance system but are tailored for a specific purpose or context within a focus area. Design factors are the characteristics or aspects of an enterprise that influence the design and implementation of a governance system. They include factors such as enterprise size, industry sector, risk profile, regulatory environment, sourcing model, etc. Focus areas are topics or issues that can be addressed by governance objectives, such as digital transformation, cybersecurity, privacy, etc. COBIT provides guidance on how to use design factors and focus areas to customize a governance system.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution