COBIT 2019 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
Which of the following MUST be done before an enterprise can determine performance measures for a process improvement initiative?

A.Perform a process risk assessment
B.Calculate return on investment (ROI)
C.Conduct a capabilities assessment

正解:
Explanation:
Conducting a capabilities assessment must be done before an enterprise can determine performance measures for a process improvement initiative. A capabilities assessment is a method of measuring and evaluating how well a process or activity is performed in terms of effectiveness, efficiency, completeness, reliability, etc. A capabilities assessment can be done using different models or frameworks, such as CMMI or ISO/IEC 15504. A capabilities assessment helps an enterprise to determine performance measures for a process improvement initiative by providing a baseline or benchmark for the current state of a process, as well as identifying its strengths, weaknesses, gaps, and improvement opportunities.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT Process Assessment Model (PAM): Using COBIT 5

Question No : 2
Which of the following is a PRIMARY objective of reviewing the effectiveness of a new IT governance system that has been operational for 6 months?

A.Obtaining executive management support for IT governance
B.Identifying further governance requirements
C.Evaluating business performance reports

正解:
Explanation:
The primary objective of reviewing the effectiveness of a new IT governance system that has been operational for 6 months is to identify further governance requirements. An IT governance system is a set of components that provide direction, oversight, evaluation, monitoring, assurance, etc., for an enterprise’s information and technology. The effectiveness of an IT governance system can be reviewed using different methods or tools, such as audits, assessments, surveys, feedbacks, etc. The primary objective of reviewing the effectiveness of a new IT governance system that has been operational for 6 months is to identify further governance requirements that may arise from changes in the internal or external environment, stakeholder needs, business objectives, etc.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019
Implementation Guide: Implementing an Information and Technology Governance Solution

Question No : 3
Which of the following is ESSENTIAL to help ensure that a project’s benefits are identified and continually monitored?

A.A well-developed business case
B.Earned value management reporting
C.Stage gate reviews by a governance team

正解:
Explanation:
A well-developed business case is essential to help ensure that a project’s benefits are identified and continually monitored. A business case is a document that provides the rationale and evidence for initiating, continuing, or terminating a project or program. A business case typically consists of several elements, such as problem statement, objectives, scope, benefits, costs, risks, assumptions, etc. A well-developed business case helps to ensure that a project’s benefits are identified and continually monitored by defining the expected outcomes or value that will be delivered by the project, as well as the metrics and indicators that will be used to measure and track them.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Implementation Guide: Implementing an Information and Technology Governance Solution

Question No : 4
What would be the PRIMARY reason for management to conduct a process capability assessment?

A.To better understand the current state as compared to the target
B.To better understand the cost of implementing the improved process
C.To better understand the current level of risk versus future risk

正解:
Explanation:
The primary reason for management to conduct a process capability assessment is to better understand the current state as compared to the target state. A process capability assessment is a method of measuring and evaluating how well a process or activity is performed in terms of effectiveness, efficiency, completeness, reliability, etc. A process capability assessment can be done using different models or frameworks, such as CMMI or ISO/IEC 15504. A process capability assessment helps management to better understand the current state of a process by identifying its strengths, weaknesses, gaps, and improvement opportunities. A process capability assessment also helps management to compare the current state with the target state, which is the desired level of performance or outcome for a process.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT Process Assessment Model (PAM): Using COBIT 5

Question No : 5
In the implementation model, when is IT governance implementation risk BEST managed?

A.Throughout the life cycle
B.During the planning phase
C.Just prior to operationalization

正解:
Explanation:
IT governance implementation risk is best managed throughout the life cycle of the implementation. IT governance implementation risk is the possibility of negative consequences or outcomes that may arise from the design, execution, evaluation, or improvement of the IT governance system. The life cycle of IT governance implementation is a continuous process that involves four phases: what are the drivers, where are we now, where do we want to be, and how do we get there. IT governance implementation risk should be managed throughout the life cycle by identifying, analyzing, evaluating, treating, monitoring, and communicating the risks that may affect the success of the implementation.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Implementation Guide: Implementing an Information and Technology Governance Solution

Question No : 6
One year after IT governance is implemented, what KEY question should be asked and evaluated?

A.Has the enterprise leveraged lessons learned?
B.Has the enterprise reduced its risk exposure?
C.Has the enterprise achieved expected benefits?

正解:
Explanation:
The key question that should be asked and evaluated one year after IT governance is implemented is whether the enterprise has achieved expected benefits. Benefits are the positive outcomes or value that are derived from a project or program. Benefits can be tangible (such as increased revenue, reduced costs, improved efficiency, etc.) or intangible (such as enhanced reputation, customer satisfaction, employee engagement, etc.). Benefits realization is the process of planning, managing, measuring, and reporting the benefits that are delivered by a project or program. Asking and evaluating whether the enterprise has achieved expected benefits one year after IT governance is implemented is important because it helps to determine whether the IT governance system is effective in creating value for the enterprise and its stakeholders.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Implementation Guide: Implementing an Information and Technology Governance Solution

Question No : 7
Once IT governance is implemented, what is the NEXT phase in the life cycle of governance?

A.Measuring objectives
B.Initiating improvements
C.Updating the program

正解:
Explanation:
Measuring objectives is the next phase in the life cycle of governance after IT governance is implemented. The life cycle of governance is a continuous process that involves designing, implementing, evaluating, and improving the IT governance system. Measuring objectives is the phase that involves assessing and monitoring the performance and outcomes of the IT governance system against predefined metrics and targets. Measuring objectives is the next phase after IT governance is implemented because it helps to determine whether the IT governance system is effective, efficient, and aligned with the enterprise goals.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Implementation Guide: Implementing an Information and Technology Governance Solution

Question No : 8
An enterprise’s business line managers have voiced concerns because the cost of governance-required improvements is perceived as too expensive.
How can the IT governance team BEST address this concern?

A.Improve the communication of business benefits.
B.Involve business line managers in the improvement planning process.
C.Share the return on investment (ROI) analysis.

正解:
Explanation:
Sharing the return on investment (ROI) analysis is the best way to address the concern of business line managers who perceive the cost of governance-required improvements as too expensive. ROI is a financial metric that measures the profitability or efficiency of an investment by comparing its benefits and costs. ROI analysis is a process of calculating and presenting the ROI of a project or program, as well as its assumptions, risks, and uncertainties. Sharing the ROI analysis with business line managers can help to address their concern by showing them how the governance-required improvements will generate value for the enterprise in terms of increased revenue, reduced costs, enhanced performance, improved quality, etc., as well as how they will outweigh their initial and ongoing costs.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Implementation Guide: Implementing an Information and Technology Governance Solution

Question No : 9
Which element of a business case BEST enables senior leadership to assess the future success of the IT governance program?

A.Quantified benefits
B.Qualitative perspective
C.Investment justification

正解:
Explanation:
The investment justification element of a business case best enables senior leadership to assess the future success of the IT governance program. A business case is a document that provides the rationale and evidence for initiating, continuing, or terminating a project or program. A business case typically consists of several elements, such as problem statement, objectives, scope, benefits, costs, risks, assumptions, etc. The investment justification element of a business case describes how the project or program aligns with the enterprise strategy and objectives, how it supports the value creation process, how it compares with alternative options, and how it provides a positive return on investment (ROI). The investment justification element enables senior leadership to assess the future success of the IT governance program by showing how it contributes to the enterprise goals and delivers value to the stakeholders.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Implementation Guide: Implementing an Information and Technology Governance Solution

Question No : 10
An enterprise that specializes in software development is designing a new IT governance system as part of a transition from traditional waterfall to a more agile approach.
Which step in the design phase would this transition impact the MOST?

A.Compliance requirements
B.Implementation method
C.Sourcing model

正解:
Explanation:
The transition from traditional waterfall to a more agile approach would impact the implementation method step in the design phase the most. The implementation method is the approach or strategy that is used to put the IT governance system into practice. The design phase is the stage in the IT governance life cycle that involves customizing and tailoring the IT governance system to the specific needs and context of the enterprise. The transition from traditional waterfall to a more agile approach would affect the implementation method step in the design phase because it would require a different way of planning, executing, monitoring, and controlling the IT governance system, as well as a different set of skills, tools, techniques, and practices.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution

Question No : 11
Which of the following is the FINAL action before completing the design of an IT governance system?

A.Resolving inherent priority conflicts
B.Determining a sourcing model
C.Selecting an implementation method

正解:
Explanation:
Selecting an implementation method is the final action before completing the design of an IT governance system. An IT governance system is a set of components that provide direction, oversight, evaluation, monitoring, assurance, etc., for an enterprise’s information and technology. The design of an IT governance system involves several steps or actions that help to customize and tailor the system to the specific needs and context of the enterprise. These steps or actions include defining design factors, defining focus areas, defining current state, defining target state, identifying gaps and improvement opportunities, defining roadmap and priorities, etc. Selecting an implementation method is the final action before completing the design of an IT governance system because it helps to determine how the system will be put into practice, what resources and activities are needed, what challenges and risks are expected, etc.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution

Question No : 12
Which of the following enterprise risk management concepts is MOST important to fully understand prior to finalizing the design of an IT governance system?

A.The enterprise’s risk tolerance
B.The enterprise’s risk profile
C.The enterprise’s risk appetite

正解:
Explanation:
The enterprise’s risk profile is the most important enterprise risk management concept to fully understand prior to finalizing the design of an IT governance system. Enterprise risk management is the process of identifying, analyzing, evaluating, treating, monitoring, and communicating risks that affect the achievement of enterprise objectives. Enterprise risk management concepts include risk appetite (the amount and type of risk that an enterprise is willing to accept), risk tolerance (the acceptable variation in outcomes related to specific performance measures), risk profile (the overall exposure or level of risk that an enterprise faces), etc. The enterprise’s risk profile is the most important concept to fully understand prior to finalizing the design of an IT governance system because it helps to determine the appropriate level of risk optimization for each governance objective.14
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System

Question No : 13
Which of the following is a CRITICAL requirement when the IT function is strategic and crucial to the success of the business?

A.Documented IT policies and procedures
B.High involvement of IT-related roles in organizational structures
C.Highly capable security-related processes and ensured risk optimization

正解:
Explanation:
The high involvement of IT-related roles in organizational structures is a critical requirement when the IT function is strategic and crucial to the success of the business. The IT function is the part of the enterprise that is responsible for planning, delivering, operating, and supporting information and technology services. The IT function can have different levels of strategic importance for the business, depending on the nature, scope, and objectives of the enterprise. When the IT function is strategic and crucial to the success of the business, it means that information and technology are essential for creating value, achieving competitive advantage, enabling innovation, etc. In this case, it is critical to have high involvement of IT-related roles in organizational structures, such as having IT representation at the board level, having clear IT leadership roles and responsibilities, having effective IT governance committees or forums, etc.13
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts

Question No : 14
The design factor associated with a highly regulated enterprise is likely to attribute MORE importance to which of the following?

A.Managed strategy and operations
B.Documented work products and policies
C.Understanding of the business by IT professionals

正解:
Explanation:
The design factor associated with a highly regulated enterprise is likely to attribute more importance to documented work products and policies. A design factor is a characteristic or aspect of an enterprise that influences the design and implementation of a governance system. They include factors such as enterprise size, industry sector, risk profile, regulatory environment, sourcing model, etc. A highly regulated enterprise is one that operates in an industry or market that is subject to strict laws, rules, standards, or guidelines that affect its business processes, products, services, etc. A highly regulated enterprise would need to ensure compliance with these requirements by documenting its work products and policies, as well as by providing evidence of their implementation and effectiveness.12
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution

Question No : 15
When assessing organizational structures, it is MOST helpful when subcriteria for each criterion are defined and linked to:

A.job descriptions.
B.capability levels.
C.performance metrics.

正解:
Explanation:
When assessing organizational structures, it is most helpful when subcriteria for each criterion are defined and linked to capability levels. Organizational structures are the arrangements of roles and responsibilities that enable the enterprise to achieve its objectives. Organizational structures can be assessed using six criteria: clarity, comprehensiveness, integration, alignment, authority, and accountability. Each criterion can be further divided into subcriteria that describe the specific aspects or attributes of the criterion. Capability levels are the measures of how well a process or activity is performed in terms of effectiveness, efficiency, completeness, reliability, etc. Capability levels can range from 0 (incomplete) to 5 (optimizing). Defining and linking subcriteria to capability levels helps to evaluate the current and desired state of organizational structures, as well as to identify gaps and improvement opportunities.123
Reference: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts

ISACA COBIT 2019 問題練習