ISACA COBIT 2019 Practice Exams
Last updated on Oct 22,2026- Exam Code: COBIT 2019
- Exam Name: COBIT 2019 Foundation
- Certification Provider: ISACA
- Latest update: Oct 22,2026
Question #61
Which of the following COBIT components includes a list of artifacts with links to relevant governance and management practices?
- A . Information flow and items
- B . Organizational structures
- C . Policies and procedures
Correct Answer: A
A
Explanation:
The information flow and items component of COBIT includes a list of artifacts with links to relevant governance and management practices. An artifact is a tangible or intangible object that is produced, modified, or used by a process or activity. An artifact can be a document, a report, a record, a plan, a policy, a procedure, a service, a product, etc. The information flow and items component of COBIT provides a comprehensive list of artifacts that are relevant for each governance and management objective, as well as links to the practices that produce, modify, or use them.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
A
Explanation:
The information flow and items component of COBIT includes a list of artifacts with links to relevant governance and management practices. An artifact is a tangible or intangible object that is produced, modified, or used by a process or activity. An artifact can be a document, a report, a record, a plan, a policy, a procedure, a service, a product, etc. The information flow and items component of COBIT provides a comprehensive list of artifacts that are relevant for each governance and management objective, as well as links to the practices that produce, modify, or use them.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
Question #62
While value delivery focuses on the creation of value, risk management focuses on which of the following?
- A . Achievement of value
- B . Preservation of value
- C . Optimization of value
Correct Answer: B
B
Explanation:
Risk management focuses on the preservation of value, while value delivery focuses on the creation of value. Value is the benefit that an enterprise derives from using information and technology. Value can be measured in terms of effectiveness, efficiency, quality, innovation, etc. Value delivery is the process of ensuring that information and technology investments and services contribute to the achievement of enterprise goals and objectives. Value delivery focuses on the creation of value by aligning I&T with business requirements, optimizing costs and resources, enhancing performance and outcomes, etc. Risk management is the process of identifying, analyzing, evaluating, treating, monitoring, and communicating risks that affect the achievement of enterprise objectives. Risk management focuses on the preservation of value by ensuring that risks are within acceptable levels, that opportunities are exploited, that uncertainties are reduced, etc.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
B
Explanation:
Risk management focuses on the preservation of value, while value delivery focuses on the creation of value. Value is the benefit that an enterprise derives from using information and technology. Value can be measured in terms of effectiveness, efficiency, quality, innovation, etc. Value delivery is the process of ensuring that information and technology investments and services contribute to the achievement of enterprise goals and objectives. Value delivery focuses on the creation of value by aligning I&T with business requirements, optimizing costs and resources, enhancing performance and outcomes, etc. Risk management is the process of identifying, analyzing, evaluating, treating, monitoring, and communicating risks that affect the achievement of enterprise objectives. Risk management focuses on the preservation of value by ensuring that risks are within acceptable levels, that opportunities are exploited, that uncertainties are reduced, etc.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
Question #63
Which of the following BEST enables an enterprise to show and prove the benefits realized from the implementation of an EGIT program plan?
- A . Adopting performance metrics that are easy to achieve
- B . Tracking expected benefits and targets until program implementation
- C . Delivering a solution from a long-term and complex project
- D . Communicating the results and benefits in business impact terms
Correct Answer: D
D
Explanation:
The best way to enable an enterprise to show and prove the benefits realized from the implementation of an EGIT program plan is to communicate the results and benefits in business impact terms. The EGIT program plan is a document that describes the rationale, objectives, scope, approach, benefits, costs, risks, and timeline of the EGIT implementation program. The EGIT implementation program is a program that involves designing and implementing a governance system for an enterprise using COBIT 2019. Communicating the results and benefits in business impact terms means using appropriate tools, methods, formats, frequencies, etc., to report on the progress and outcomes of the EGIT implementation program to relevant stakeholders such as the board, executives, business managers, IT managers, etc., using language and metrics that demonstrate how the program has contributed to achieving the enterprise’s strategy, objectives, performance, value, etc. By communicating the results and benefits in business impact terms, an enterprise can ensure that it has a clear and compelling evidence of the value and benefits delivered by the EGIT implementation program, that it has met stakeholder requirements and expectations, that it has obtained stakeholder feedback and recognition, that it has enhanced stakeholder trust and confidence, etc12
Reference: 1: COBIT 2019 Implementation Guide: page 51-52 2: COBIT 2019 Framework: Governance and Management Objectives: page 19-20
D
Explanation:
The best way to enable an enterprise to show and prove the benefits realized from the implementation of an EGIT program plan is to communicate the results and benefits in business impact terms. The EGIT program plan is a document that describes the rationale, objectives, scope, approach, benefits, costs, risks, and timeline of the EGIT implementation program. The EGIT implementation program is a program that involves designing and implementing a governance system for an enterprise using COBIT 2019. Communicating the results and benefits in business impact terms means using appropriate tools, methods, formats, frequencies, etc., to report on the progress and outcomes of the EGIT implementation program to relevant stakeholders such as the board, executives, business managers, IT managers, etc., using language and metrics that demonstrate how the program has contributed to achieving the enterprise’s strategy, objectives, performance, value, etc. By communicating the results and benefits in business impact terms, an enterprise can ensure that it has a clear and compelling evidence of the value and benefits delivered by the EGIT implementation program, that it has met stakeholder requirements and expectations, that it has obtained stakeholder feedback and recognition, that it has enhanced stakeholder trust and confidence, etc12
Reference: 1: COBIT 2019 Implementation Guide: page 51-52 2: COBIT 2019 Framework: Governance and Management Objectives: page 19-20
Question #64
Which of the following is an IT implementation method design factor that focuses on software building, deployment and operations?
- A . Traditional
- B . Agile
- C . DevOps
Correct Answer: C
C
Explanation:
An IT implementation method design factor is a characteristic that influences how an enterprise
implements IT solutions and services. DevOps is an IT implementation method that focuses on software building, deployment and operations, by integrating development and operations teams to improve collaboration and productivity1, p. 31.
Reference: 1: COBIT 2019 Framework: Introduction and Methodology
C
Explanation:
An IT implementation method design factor is a characteristic that influences how an enterprise
implements IT solutions and services. DevOps is an IT implementation method that focuses on software building, deployment and operations, by integrating development and operations teams to improve collaboration and productivity1, p. 31.
Reference: 1: COBIT 2019 Framework: Introduction and Methodology
Question #65
An enterprise will often fail to realize implementation commitments during the execution of an EGIT implementation program plan if it:
- A . leverages existing mechanisms and ways of working.
- B . simplifies the implementation process.
- C . reduces projects into smaller executable pieces.
- D . focuses on enabling IT value over business value.
Correct Answer: D
D
Explanation:
An enterprise will often fail to realize implementation commitments during the execution of an EGIT implementation program plan if it focuses on enabling IT value over business value. IT value is the contribution of IT to achieving enterprise objectives, while business value is the overall benefit that the enterprise derives from its use of information and technology. Focusing on IT value over business value may result in a disconnect between IT and business stakeholders, a lack of alignment between IT goals and business strategy, or a failure to deliver expected benefits or outcomes. Therefore, it is important to balance both IT value and business value when implementing a governance system. The answer is based on the COBIT 2019 Implementation Guide3, page 38.
Reference: 3: COBIT 2019 Implementation Guide | Digital | English
D
Explanation:
An enterprise will often fail to realize implementation commitments during the execution of an EGIT implementation program plan if it focuses on enabling IT value over business value. IT value is the contribution of IT to achieving enterprise objectives, while business value is the overall benefit that the enterprise derives from its use of information and technology. Focusing on IT value over business value may result in a disconnect between IT and business stakeholders, a lack of alignment between IT goals and business strategy, or a failure to deliver expected benefits or outcomes. Therefore, it is important to balance both IT value and business value when implementing a governance system. The answer is based on the COBIT 2019 Implementation Guide3, page 38.
Reference: 3: COBIT 2019 Implementation Guide | Digital | English
Question #66
When designing an IT governance system, the NEXT step after considering the enterprise’s strategic business objectives is to assess:
- A . the enterprise’s risk profile.
- B . the IT implementation method.
- C . the role of IT within the enterprise.
Correct Answer: A
A
Explanation:
According to the COBIT 2019 Design Guide, when designing an IT governance system, the next step after considering the enterprise’s strategic business objectives is to assess the enterprise’s risk profile. The enterprise’s risk profile reflects the level of risk exposure and appetite that the organization is willing to accept in pursuit of its objectives. The risk profile also influences the selection of governance objectives, components and practices that are appropriate for managing IT-related risks.1, p. 18-19
Reference: 1: COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution
A
Explanation:
According to the COBIT 2019 Design Guide, when designing an IT governance system, the next step after considering the enterprise’s strategic business objectives is to assess the enterprise’s risk profile. The enterprise’s risk profile reflects the level of risk exposure and appetite that the organization is willing to accept in pursuit of its objectives. The risk profile also influences the selection of governance objectives, components and practices that are appropriate for managing IT-related risks.1, p. 18-19
Reference: 1: COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution
Question #67
Which of the following management objectives would be given HIGHER priority in an enterprise’s governance system when the enterprise is very risk-averse?
- A . Managed operations
- B . Managed security
- C . Managed portfolio
Correct Answer: C
C
Explanation:
The management objective that would be given higher priority in an enterprise’s governance system when the enterprise is very risk-averse is managed portfolio. This objective relates to ensuring that IT-enabled investments are aligned with the enterprise’s risk appetite and tolerance levels, and that they deliver optimal value and benefits. This objective also involves managing the portfolio of IT-enabled investments throughout their life cycle, from initiation to retirement. The objective is based on the COBIT 2019 Design Guide3, page 71.
Reference: 3: COBIT 2019 Design Guide | Digital | English
C
Explanation:
The management objective that would be given higher priority in an enterprise’s governance system when the enterprise is very risk-averse is managed portfolio. This objective relates to ensuring that IT-enabled investments are aligned with the enterprise’s risk appetite and tolerance levels, and that they deliver optimal value and benefits. This objective also involves managing the portfolio of IT-enabled investments throughout their life cycle, from initiation to retirement. The objective is based on the COBIT 2019 Design Guide3, page 71.
Reference: 3: COBIT 2019 Design Guide | Digital | English
Question #68
Which of the following components of the governance system are the KEY decision-making entities in an enterprise?
- A . Organizational structures
- B . People, skills and competencies
- C . Principles, policies and frameworks
Correct Answer: A
A
Explanation:
The organizational structures component of the governance system are the key decision-making entities in an enterprise. Organizational structures are the arrangements of roles and responsibilities that enable the enterprise to achieve its objectives. Organizational structures can be formal or informal, hierarchical or flat, centralized or decentralized, etc. Organizational structures can include entities such as board, executive management, committees, forums, teams, units, etc. The organizational structures component of the governance system are the key decision-making entities in an enterprise by providing authority, accountability, direction, oversight, evaluation, etc., for information and technology.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts
A
Explanation:
The organizational structures component of the governance system are the key decision-making entities in an enterprise. Organizational structures are the arrangements of roles and responsibilities that enable the enterprise to achieve its objectives. Organizational structures can be formal or informal, hierarchical or flat, centralized or decentralized, etc. Organizational structures can include entities such as board, executive management, committees, forums, teams, units, etc. The organizational structures component of the governance system are the key decision-making entities in an enterprise by providing authority, accountability, direction, oversight, evaluation, etc., for information and technology.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts
Question #69
Which governance component identifies the human resource needs that must be met to achieve governance and management objectives?
- A . Culture, ethics and behavior
- B . People, skills and competencies
- C . Information flow and items
Correct Answer: B
B
Explanation:
The people, skills and competencies component of governance identifies the human resource needs that must be met to achieve governance and management objectives. People are the individuals or groups who perform or are accountable for the governance activities and tasks. Skills and competencies are the abilities and knowledge that people need to perform their roles and responsibilities. The people, skills and competencies component of governance defines the required roles and organizational structures for each governance and management objective, as well as the skills and competencies that are needed for each role.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts
B
Explanation:
The people, skills and competencies component of governance identifies the human resource needs that must be met to achieve governance and management objectives. People are the individuals or groups who perform or are accountable for the governance activities and tasks. Skills and competencies are the abilities and knowledge that people need to perform their roles and responsibilities. The people, skills and competencies component of governance defines the required roles and organizational structures for each governance and management objective, as well as the skills and competencies that are needed for each role.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts
Question #70
Which of the following components of the governance system are required for successful completion of all activities?
- A . People, skills and competencies
- B . Processes
- C . Principles, policies and frameworks
Correct Answer: A
A
Explanation:
People, skills and competencies are required for successful completion of all activities within a governance system. People are the individuals or groups who perform or are accountable for the governance activities and tasks. Skills and competencies are the abilities and knowledge that people need to perform their roles and responsibilities. People, skills and competencies are one of the seven enablers of a governance system, as defined by COBIT.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System
A
Explanation:
People, skills and competencies are required for successful completion of all activities within a governance system. People are the individuals or groups who perform or are accountable for the governance activities and tasks. Skills and competencies are the abilities and knowledge that people need to perform their roles and responsibilities. People, skills and competencies are one of the seven enablers of a governance system, as defined by COBIT.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System