1.

¿Qué pregunta se hace para decidir cómo se gestionará el rendimiento

del habilitador?

¿Se garantiza la seguridad?

Are operations efficient?

Is performance monitored?
Is lifecycle managed?
Explanation:

Ans. d) 'Is lifecycle managed?' is one of the four questions asked when establishing how
to manage enabler performance.

2. What type of process goal ensures the process remains confidential when
required, and known and accessible to those who need it?
Intrinsic
Business
Contextual
Accessibility and Security
Explanation:

Ans. d) The Accessibility and Security goals are meant to ensure the process remains
confidential when required, and is known and accessible to those who need it.

3. What is the activity in continual improvement phase in the implementation

lifecycle called where practical solutions are supported by justifiable business
cases?
Build Improvements
Define Roadmap
Plan Programme
Initiate Programme
Explanation:

Ans. a) Build Improvements is the activity in the continual improvement phase; the
phase where the question 'What needs to be done?' is addressed.

4. Which requirement was a major driver for developing the COBIT 5

framework?
To encourage a common language throughout the enterprise to allow better
understanding of IT by stakeholders
To be generic and useful for enterprises of all sizes, whether commercial, not-for-
profit or public sector
To get better control over increasing user-initiated and user-controlled IT solutions
 To enable enterprises to achieve operational excellence through the reliable and
efficient application of technology
Explanation:

Ans. c) To get better control over increasing user-initiated and user-controlled IT

solutions is one of the key drivers for developing the COBIT 5 framework.

5. What is a very important enterprise communication mechanism for corporate

values and desired behaviour?
Process outcomes
Principles and policies
Organisational structures
Rules and norms
Explanation:

Ans. b) Principles and policies form an important enterprise communication mechanism

for corporate values and desired behaviour.

6. Which requirement describes 'contextual quality' in the Goals Enabler

dimension?
Enablers are available when, and if, needed
Outcomes should be current and appropriate
Enablers provide accurate, objective and reputable results
Outcomes are secured
Explanation:

Ans. b) 'Outcomes should be current and appropriate' is a contextual quality goal.

7. Which architecture principle suggests the meeting of changing business needs in

an effective and efficient manner?
Agility
Simplicity
Openness
Reusability
Explanation:

Ans. a) Agility is an example of an architecture principle - The enterprise architecture

should incorporate speed and ease to meet changing business needs.

8. Which element is a key component of the COBIT 5 governance approach?

Stakeholder Transparency
Roles, Responsibilities and Activities
 Evaluate, Direct and Monitor
Plan, Build, Run and Monitor
Explanation:

Ans. b) 'Roles, Responsibilities and Activities' is one of the key components of the
COBIT 5 governance approach

9. What does span of control mean in the organisational structures enabler?

Publishing a schedule of Board meetings in advance
Issuing the boundaries of the organisational structure's decision rights
Defining the structure to delegate decision rights
Documenting the decisions which the structure is authorised to take
Explanation:

Ans. b) Issuing the boundaries of the organisational structure's decision rights refers to
the span of control.

10. What is a benefit of the Goals Cascade?

Consider the inputs and outputs of an IT process in the enterprise
Define relevant and tangible goals and objectives at various levels of responsibility
Define and implement the enterprise architecture
Support the definition of clear roles and responsibilities in an enterprise
Explanation:

Ans. b) Defining relevant and tangible goals and objectives at various levels of
responsibility is one of the benefits of Goals Cascade.

11. What is a good practice of the policies element within the Principles, policies
and frameworks model?
To be open and flexible
To specify consequences of failing to comply
To provide detailed guidance on how to put principles into practice
To express the core values of the enterprise
Explanation:

Ans. b) 'To specify consequences of failing to comply' is a good practice within a policy
framework.

12. Identify the missing word(s) in the following sentence. Process [?] is a process
attribute for an optimising process.
Innovation
Performance management
 Assessment
Measurement
Explanation:

Ans. a) Process Innovation is a process attribute for an optimising process

13. What do processes make or need to ensure consistent implementation and

execution?
RACI Charts
Cultural Aspects
Business Goals
Policies and Procedures
Explanation:

Ans. d) Processes make or need, policies and procedures to ensure consistent

implementation and execution

14. Which is the MOST suitable process design for skills such as Incident
Management?
Monitor, Evaluate and Assess (MEA)
Align, Plan and Organise (APO)
Build, Acquire and Implement (BAI)
Deliver, Service and Support (DSS)
Explanation:

Ans. d) Deliver, Service and Support (DSS) is the most suitable process design for skills
such as Incident Management.

15. Which enabler describes an organised set of practices and activities to achieve
certain objectives?
Culture, Ethics and Behaviour
Processes
Principles, Policies and Frameworks
People, Skills and Competencies
Explanation:

Ans. b) Processes describe an organised set of practices and activities to achieve certain
objectives and produce a set of outputs in support of overall IT-related goals.

16. Which option is a benefit to the enterprise of using the COBIT 5 framework?
COBIT 5 is first and foremost an 'IT framework'
COBIT 5 does not encourage a common language throughout the enterprise
 COBIT 5 enables IT to be managed in a holistic manner
COBIT 5 is a framework to be used mainly for IT Service Management
Explanation:

Ans. c) COBIT 5 enables IT to be managed in a holistic manner and is one of the key
benefits.

17. Which role is most senior in the enterprise and is accountable for the operation
of the enterprise?
Business Executive
Head of Architecture
Chief Information Officer (CIO)
Chief Operating Officer (COO)
Explanation:

Ans. d) Chief Operating Officer is the most senior officer of the enterprise who is
accountable for the operation of the enterprise.

18. Which driver influences stakeholder needs?

Good Practices
Contextual Quality
Lag Indicators
A Changing Business Environment
Explanation:

Ans. d) A changing business environment influences stakeholder needs.

19. Which is a vehicle to translate desired behaviour into practical guidance for
day-to-day management?
Organisational structures
Principles, policies and framework
Processes
Rules and norms
Explanation:

Ans. b) Principles, policies and frameworks are the vehicle to translate desired
behaviour into practical guidance for day-to-day management.

20. What role is responsible for setting direction through prioritisation and
decision making?
Governing Body
Operations
 Stakeholders
Management
Explanation:

Ans. a) The governing body (mostly board of directors under the leadership of the
Chairperson) is responsible for setting direction through prioritisation and decision
making

21. What term is used to describe a merger, acquisition or divestiture's impact on

the governance and management of IT?
Pain points
Trigger events
Enterprise change
IT risk
Explanation:

Ans. b) Merger, acquisition or divestiture are trigger events for focussing on the
governance and management of IT.

22. At what process capability level(s) is the Process Reference Model used?
All Levels
None of the Levels
Level 1 only
Level 2, 3, 4 and 5
Explanation:

Ans. c) The Process Reference Model is used at Process Capability Level 1 only.

23. In what sequence would the following occur in the COBIT 5 Process Reference
Model? 1. Run 2. Build 3. Direct
2,3,1
1,2,3
3,2,1
3,1,2
Explanation:

Ans. c) 3,2,1 - The PRM flow is Evaluate -> Direct -> Plan -> Build -> Run -> Monitor
(MEA) -> Monitor -> Evaluate

24. Identify the missing word(s) in the following sentence. Availability

Management is considered a skill category for the [?] Process Domain.
Evaluate, Direct and Monitor (EDM)
 Deliver, Service and Support (DSS)
Align, Plan and Organise (APO)
Build, Acquire and Implement (BAI)
Explanation:

Ans. d) Availability Management is a skill category for the BAI domain.

25. What capability level is an optimised process?

Level 1
Level 2
Level 3
Level 5
Explanation:

Ans. d) Level 5 is an optimised process.

26. Achieving IT-related goals requires the successful application and use of what?
Enablers
Enabler Goals
IT Balanced Scorecard
Processes
Explanation:

Ans. a) Achieving IT-related goals requires the successful application and use of a
number of enablers.

27. Which enabler can be structured or unstructured, formalised or informalised?

Process
Policies
Enablers
Information
Explanation:

Ans. d) Information can be structured or unstructured, formalised or informalised.

28. What information layer defines the rules and principles for constructing
sentences in natural or artificial languages?
Social world
Semantic
Physical World
Empiric
Explanation:

Ans. b) Semantic layer defines the rules and principles for constructing meaning out of
syntactic structures. Semantics refers to the meaning of information.

29. Which is one of the ways of meeting the Governance Objective of 'Value
Creation'?
By providing incentives
By optimising resources
By hiring SMEs
By providing free service
Explanation:

Ans. b) By realising benefits, optimising risks and optimising resources the governance
objective of 'Value Creation' is met.

30. When are policies said to be effective?

When they are limited in number
When they express the core values of the enterprise
When they achieve the stated purpose
When they provide a logical flow for staff who have to comply with them
Explanation:

Ans. c) Good policies are effective when they achieve the stated purpose.

31. What is the main purpose of performing a process capability assessment?

To define goals of the process
To hire people with correct skills and competencies for executing the process
To identify and be part of a process improvement initiative
To define the metrics of the process
Explanation:

Ans. c) One of the main purpose of process capability assessment is to identify and be
part of a process improvement initiative

32. What attribute describes information sufficiently up-to-date for the task at
hand?
Relevancy
Currency
Completeness
Ease of manipulation
Explanation:
Ans. b) Currency is the extent to which information is sufficiently up-to-date for the
task at hand.

33. What are enabler goals cascaded into?

IT-related goals
Enablers
Not cascaded but supported by processes
Risk optimisation goals
Explanation:

Ans. c) Enabler Goals are not cascaded but supported by processes; Processes are one of
the enablers

34. Which characteristic is necessary for a good policy?

Efficient
Expresses the core values of the enterprise
Intrusive
Limited in number
Explanation:

Ans. a) a good policy needs to be efficient.

35. What rating does a process attain when some aspects of the defined attribute's
achievement may be unpredictable in the assessed process?
F-Fully
P-Partially and or L-Largely
L-Largely and or F-Fully
P-Partially
Explanation:

Ans. d) P (Partially achieved) - There is some evidence of an approach to, and some
achievement of, the defined attribute in the assessed process. Some aspects of
achievement of the attribute may be unpredictable. (15 to 50 percent achievement).

36. Which action is NOT considered a good practice to encourage desired

behaviour in an enterprise?
Incentives to encourage and deterrents to enforce desired behaviour
Communication throughout the enterprise of desired behaviours and the underlying
corporate values
Appointing business champions
Publishing delegation of authority procedures
Explanation:
Ans. d) Publishing delegation of authority procedures is not one of the good practices to
help encourage desired behaviour but the other three are.

37. Which aspect relates to the COBIT 5 key principle of 'meeting stakeholder
needs'?
Aligns with the latest views on governance
Provides a simple architecture
Translates stakeholder needs into strategy
Defines the relationship between governance and management
Explanation:

Ans. c) Translating stakeholder needs into strategy is a key aspect of the Principle
'Meeting stakeholder Needs'

38. Who is an internal stakeholder?

A staff member
A shareholder
A business partner
A regulator
Explanation:

Ans. a) A staff member is an internal stakeholder, while the others are external
stakeholders

39. Generic resources are used in which levels of the Process Assessment Model
(PAM)?
Only at level 1
At all levels of the capability model
From levels 2 to 5
Only at level 5
Explanation:

Ans. c) Generic resources are used from levels 2 to 5 in the PAM.

40. When designing an implementation plan for IT governance and management,

what is an environmental factor to be considered?
Industry practices
Insufficient IT resources, staff with inadequate skills or staff burnout/dissatisfaction
Significant incidents related to IT risk
External audit or consultant assessments
Explanation:
Ans. a) Industry practices are one among many environment factors that are taken into
consideration while designing an implementation plan

41. Which attributes apply to a process activity?

Based on generally accepted standards and good practices
Considers the input and outputs of the process
Supports establishment of clear roles and responsibilities
All the above
Explanation:

Ans. d) All the mentioned attributes apply to a process activity.

42. Identify the missing word(s) in the following sentence. Governance ensures that
[?] are evaluated to determine balanced, agreed-on enterprise objectives to be
achieved.
Processes
Stakeholder needs
IT-Related goals
Enterprises
Explanation:

Ans. b) Governance ensures that stakeholder needs, conditions and options are
evaluated to determine balanced, agreed-on enterprise objectives to be achieved.

43. What is followed for creating, encouraging and maintaining desired behaviour
throughout the enterprise?
Lifecycle
Individual ethics
Organisational ethics
Good practices
Explanation:

Ans. d) Good practices are followed for creating, encouraging and maintaining desired
behaviour throughout the enterprise.

44. In which of the following will you find a description of how the investment and
value creation would be monitored throughout the economic lifecycle, and the
metrics to be used (based on goals and metrics)?
Business Objectives
Process Capability Model
Business Policies
Business Case
Explanation:

Ans. d) The business case should include 'how investment and value creation will be
monitored throughout the economic lifecycle, and the metrics to be used (based on
goals and metrics)?' as one of the minimum requirements.

45. The COBIT 5 framework delivers to its stakeholders the most complete and
up-to-date guidance on governance and management of enterprise IT by
_________________.
Keeping the other ISACA frameworks separate
Providing a sound and comprehensive reference of good practices
Providing a complex architecture
Mandatorily using other standards
Explanation:

Ans. b) Providing a sound and comprehensive reference of good practices is one of the
ways in which COBIT 5 framework delivers to its stakeholders the most complete and
up-to-date guidance on governance and management of enterprise IT.

46. Identify the missing word(s) in the following sentence. Business processes
generate and process [?], transforming them into information.
Value
Knowledge
Policies
Data
Explanation:

Ans. d) Business processes generate and process data, transforming them into
information and knowledge, and ultimately generating value for the enterprise.

47. Which COBIT 5 dimension(s) deals specifically with good practices?

The Capability Dimension
The Process Dimension
The Enabler Dimension
Both the Process and Capability Dimensions
Explanation:

Ans. c) The Enabler Dimension deals withstakeholders, goals, lifecycle and good
practices.

48. Which item provides the structure under which processes can operate?
Information
Values
 Frameworks
Rules and norms
Explanation:

Ans. c) Frameworks provide the structure within which processes operate.

49. What does a 'Lag Indicator' measure?

If the enabler lifecycle is managed
If stakeholders needs are addressed
If governance is managed
If good practices are applied
Explanation:

Ans. b) The question 'Are stakeholder needs addressed?' deals with the actual outcome
of the enabler and the metrics used are called 'Lag Indicators.

50. What is the information category called if it corresponds to the restricted

access information quality goal?
Compliant
Believability
Confidential
Effective
Explanation:

Ans. c) Confidentiality corresponds to the restricted access information quality goal.