Isaca NIST-COBIT-2019 Exam Practice Test Instant Access

Question 1

Which of the following is an objective of COBIT Implementation Phase 3 - Where Do We Want to Be?

ADetermine the current capability of selected processes.

BIdentify critical processes or other components addressed in the improvement plan.

CCreate a detailed business case and high-level program plan.

Answer : C

The objective of COBIT Implementation Phase 3 is to set an improvement target and identify gaps and potential solutions using COBIT's guidance. This involves creating a detailed business case and a high-level program plan for the implementation.

Reference COBIT 2019 Design and Implementation COBIT Implementation, page 31. 7 Phases in COBIT Implementation | COBIT Certification - Simplilearn

Question 2

Which of the following is an objective of Implementation Phase 3 - Where Do We Want to Be?

AIntegrate the improvement projects into the overall program plan.

BMonitor, measure, and report on project progress.

CCreate a detailed business case and high-level program plan from gathered information.

Answer : C

This is an objective of Implementation Phase 3: Where Do We Want to Be?, because it involves defining the desired state of the enterprise's governance and management system, based on the stakeholder needs, drivers, and scope12. This objective also includes developing a business case that provides the rationale and justification for the improvement program, and a high-level program plan that outlines the scope, objectives, approach, and resources of the program3 .

Question 3

Which of the following is an objective of COBIT Implementation Phase 3-Where Do We Want to Be?

AIdentify critical processes or other components addressed in the improvement plan.

BDetermine the target capability for processes within governance and management

Cobjectives.

DIntegrate the metrics for project performance and benefits realization.

Answer : B

This is an objective of COBIT Implementation Phase 3: Where Do We Want to Be?, because it involves defining the desired state of the enterprise's governance and management system, based on the stakeholder needs, drivers, and scope12. This objective also includes using the COBIT Performance Management system to assess the current and target capability levels of the processes that support the governance and management objectives34.

Question 4

Which of the following is a KEY activity of COBIT Implementation Phase 2: Where Are We Now?

AIdentification of applicable compliance requirements

BIdentification of challenges and success factors

CIdentification and definition of improvement targets

Answer : A

This is a key activity of COBIT Implementation Phase 2: Where Are We Now?, because it involves assessing the current state of the enterprise's governance and management system, as well as its strengths, weaknesses, opportunities, and threats12. This activity also includes identifying the relevant stakeholders, drivers, and scope of the implementation program. Therefore, this activity requires a thorough understanding of the external laws, regulations, and contractual obligations that apply to the enterprise and its I&T activities34.

Question 5

Which of the following is a PRIMARY input into Steps 2 and 3: Orient and Create a Current Profile?

AEvaluating business cases

BUpdating business cases

CDefining business cases

Answer : C

Defining business cases is a primary input into Steps 2 and 3: Orient and Create a Current Profile, because it involves identifying the business drivers, mission, objectives, and risk appetite of the organization, as well as the scope and boundaries of the cybersecurity program12. A business case is a document that provides the rationale and justification for initiating a cybersecurity project or program, and describes the expected benefits, costs, risks, and alternatives34.

Question 6

Which role will benefit MOST from a better understanding of the current cybersecurity posture by applying the CSF?

AExecutives

BAcquisition specialists

CLegal experts

Answer : A

Executives are the role that will benefit most from a better understanding of the current cybersecurity posture by applying the CSF. This is because executives are responsible for setting the strategic direction, objectives, and priorities for the organization, as well as overseeing the allocation of resources and the management of risks1. By applying the CSF, executives can gain a comprehensive and consistent view of the cybersecurity risks and capabilities of the organization, and align them with the business goals and requirements2. The CSF can also help executives communicate and collaborate with other stakeholders, such as regulators, customers, suppliers, and partners, on cybersecurity issues3.

Question 7

Which of the following is a framework principle established by NIST as an initial framework consideration?

AAvoiding business risks

BImpact on global operations

CEnsuring regulatory compliance

Answer : C

One of the framework principles established by NIST is to ensure that the framework is consistent and aligned with existing regulatory and legal requirements that are relevant to cybersecurity12.

Isaca NIST-COBIT-2019 ISACA Implementing the NIST Cybersecurity Framework using COBIT 2019 Exam Practice Test