Audit Paper 3

==

1. Which attribute is asscociated with an established process? a. Process definition b. Process measurement c. Process optimization d. Performance management 2. Which enabler describes an organized set of practices and activities a. Organisational structures b. Services, infrastrukture and application c. Principles, policies and frameworks d. Process 3. What component of the implementation life cycle refers to the behavioural and cultural aspects? a. Form implementation team b. Continual improvement life cycle c. Programme management d. Change enablement 4. What type of process goal is customized to an enterprise’s spesific situation? a. IT b. Accessibility and security c. Intrinsic d. Contextual 5. Which is not a benefit of using the COBIT 5 Process capability assessment instead of the COBIT 4.1.Maturity asssesment approach? a. Improved reliability of and repeatability of a process capability assessment b. Provides compliance with a generally accepted process capability standard c. Replaces the COBIT 4.1 Capability Maturity assessment approach d. Increased usability of process capability assessment result 6. Which driver influence stakeholder needs? a. New technologies b. Performance management of IT c. Business service continuity d. IT Agility 7. What practice within the organization structures enabler would describe the practical arrangements regarding how the organization will operate? a. Delegation of authority b. Operating principles c. Span of control d. Level of authority 8. Which element of COBIT 5 makes it an integrated framework?

a. It defines principles, policies and procedures which is process enabler b. It links governance with management c. It provides a simple architecture d. It connects stakeholder needs with enterprise goals 9. Why is a business case important to a programme initiative leveraging COBIT 5? a. Plans practical solutions by defining suitable projects b. Provides a view on the on-going viability of the programme c. Focuses on the sustainable operation of a new initiative d. Established appropriate structures for oversight and direction 10. What is an example of individual behavior that is relecant to the culture, ethics and behavior enabler? a. Communicating the enterprise’s code of conduct b. Approach towards following enterprise policy c. Communication of desired behavior by management d. Incentives to encourage desired behavior 11. Which management activity is defined in COBIT 5? a. ENSURING GOVERNANCE framework setting b. Ensuring stakeholder transparency c. Managing the IT management framework d. Ensuring resources optimization 12. Identify the missning word in the following sentences .IT and business process are primarily driven by the [?] THAT THEY create a. Data b. Value c. Information d. Knowledge 13. Which is a purpose of the process Reference model? a. To provide the basis for one or more process Assessment Models b. To gather all Generic practices and Word products c. To combine the process and the capability dimension d. To be used as template for the assessment report 14. Which stakeholder is considered external according to COBIT 5? a. Board b. Management c. Volunteers d. Business partner 15. How many processes are provided in domain Build, Acquire and Implement (BAI) in the Process Reference Model? a. 3 b. 6 c. 10 d. 13 16. In the PRM, what is the element that provides more detail of the practice referred to as? a. Inputs and outputs b. Process purpose c. Process activity d. Goals and metrics 17. Identify the missing words in the following sentence.In designing an implementation plan or road map for COBIT 5,environmental factors such as capabilities and [?] are important.

a. Gap analysis b. Process improvements c. Available resources d. Compliance with an accepted process assessment standard 18. Which process domain is the MOST suitable for the skills to assess a system’s usability and ergonomics? a. Monitor, Evaluate and assess (MEA) b. Deliver, Service and Support (DSS) c. Build, Acquire and Implement (BAI) d. Align, Plan and Organise (APO) 19. What rating level must a process attain in order to pass an assessment? a. P-Partial and L-Largely b. L-Largely or F-Fully c. F-Fully d. L-Largely 20. What do processes produce as a result of their operation? a. Organisational structures b. Behavioural aspects c. Service capabilities d. IT goals 21. Identify the missing words in the following sentence. Realising benefits at an optimal resource cost while optimising ? is a means of value creation. a. Security b. Risk c. Perfomance d. Compliance 22. What enabler is used to support the culture, ethics and behavior enabler when communicating corporate value and behaviour? a. Organisational structure b. People, skills, and competencies c. Principles, policies and frameworks d. Information 23. What service capability is leveraged through processess to deliver internal and external services? a. Compliance b. Information c. Efficiency d. Policies 24. Which requirement describe the enabler goal category ‘Intrinsic’ quality? a. Results are exact and objective b. Outcomes are accessible and secured c. Res d. ult are relevant and complete e. Outcomes are fit for purpose 25. Which information should a business case include? a. The proposed solutions and definitions of the initiative b. An improvement target for identifiable gaps and solutions c. The roles, responsibilities and accountabilities related to the intiative

d. An outline of the new operations created from the intiative programme 26. What is the purpose of the COBIT 5 integrator framework? a. Link COBIT 5 to other standarts and framework b. Link Govermance with management c. Link management processes of plan, build, run and monitor d. Link stakeholder needs with enterprise goals 27. What is the name given to the entity responsible for supporting programme and project managers? a. Enterprise Risk Committee b. Programme and Project Steering Committee c. Programme and Project Management Office d. Value Management Office 28. Identity the missing word in the following sentence. According to COBIT 5, a process is defined as a collection of ? influenced by the enterprise’s policies and procedures that takes inputs from a number of source, manipulates the inputs and produces outputs. a. Activities b. Goals c. Practices d. Principles 29. Identify the missing word in the following sentence. The Business Continuity Manager is the individual who oversees an enterpise’s business continuity capability, to ensure that the enterprise’s [X] functions continue to operate following disruptive events a. Critical b. Administration c. IT d. Security 30. Which dam does NOT describe a category of a COBIT 5 Enabler Goal? a. Accurate and objective results b. Fit for purpose c. Available when needed d. Good practices can be defined 31. What are the benefits of an effective Policy life cycle? a. To support the achievement of defined goals b. To define the Enterprise Architecture for the enterprise c. To express the cover values of the enterprise d. To translate stakeholder needs into actionable goals 32.What is the purpose of the COBIT self-assessment guide? a. To provide a description of the life cycle for governance and management of enterprise IT b. To provide in detail how to undertake a process assessment c. To provide a less rigorous approach for process assessment d. To combine COBIT 5 process with ISO 15504 for a robust assessment approach 33. Which process is included in the Deliver, service and support domain of the management of Enterprise IT? a. Manage Security b. Manage Assets c. Manage Suppliers d. Manage Continuity 34. In the implementation lifecycle, which phase would the implementation team be created

and the current state of the enterprise be assessed? a. Phase 1 b. Phase 2 c. Phase 3 d. Phase 6 35. Which activity is a good practice within the organisation structure enabler relating specifically to composition? a. Publishing a schedule of board meeting advance b. Identifying appropoate internal or external members c. Defining the structure to delegate decision rights d. Issuing the boundaries of the organizational structure decision rights 36. Identify the missing word in the following sentence. Governance airms to ensure that stakeholder seeds are evaluated to determine the agreed [?] objectives to be achieved. o Stakeholder o Enabler o It o Enterprise 37. What is the same of architectural principle that governs the use of IT – related resources for changing bussiness needs? o Agility o Openness o Reuse o Simplicity 38. Which requirement is related to the framework element within the principle , policies and framework enabling model ? o To express the core values of the enterprise o To describe the desired outcome of a process o To provide comprehensive coverage for an enterprise o To provide a logical flow for staff to comply the framework. 39. Which not a benefit of the COBIT capability assesment approach ?h o Provides the architecture describing relationship amogst the procesess o Confirms that the process is achieving its purpose o Complies with a generally accepted process assessment standard o Improves reliability of repeatability of process assessment 40. What is created by knowledge within the information cycle? o Information o Process o Data o Value 41. What items is NOT a governance enabler ? o Stakeholders o Frameworks o Principle o Structures 42. Which characteristic is nescessary a good policy ? o Flexible o Instrusive o Limited in number o Efficient 43. What do IT-Related goals cascade to ? o IT –balanced scorecard o Procesess o Enabler goals o Stakeholder needs

44. Which one of the service capabilities leveraged through procesess to deliver internal and external services? o Data o Information o IT goals o Policies 45. In what order does the management of Enterprise IT occur in the COBIT 5 process reference Model ? o Build, Run , Plan , Monitor o Evaluate , Direct , Monitor o Monitor , Evaluate , direct o Plan , Build , Run , Monitor 46. As a good practice which tam should be included in a policy framework? o Defined goals o Skill categories o Statements of actions o The consequence of falling to comply. 47. Which a governance of Enterprise IT process in the process reference model ? o Manage the IT Management Framework o Manage Strategy o Ensure Benefits Delivery o Monitor ,Evaluate and assess Performance and conformance 48. What terms is used to describe changes in the enterprise internal and external environtment ceased by a recent merger with another enterprise ? o Duplication of resource o IT Risk o Trigger event o Pain point 49. What does the resource optimization objective have a direct relationship with ? o Risk Optimisation o Defined goals o Enabler goals o Enterprise goals 50. When would secondary relationship for a CO6IT 5 IT –related process be identified in support of achieving IT-related goals ? o If a process supports another COBIT 5 IT-Related process o If a primary relationship can NOT be identified for a COBIT S IT- related process o If a process has a strong bat less important relationship that supports an IT-Related goal o It a process is a primary support for the achievement of an IT – related Goal