Exam Questions and CORRECT Answers
Key assets that need to be governed (6) - CORRECT ANSWER Human assets
Financial assets
Physical assets
Intellectual property (IP) assets
Information and IT assets
Relationship assets
COBIT 5 Enablers (7) - CORRECT ANSWER Principles, policies, and frameworks
Processes
Organizational structures
Culture, ethics, and behavior
Information
Services, infrastructure, and applications
People, skills, and competencies
Layers of Enterprise Architecture (5) - CORRECT ANSWER Business unit architecture
Information architecture
Information systems architecture (applications)
Data architecture
Delivery system architecture (technology architecture)
Organizational structure specifics (4) - CORRECT ANSWER Stakeholders - includes
members of the structure, other structures, organizational entities, clients, suppliers, and
regulators
Goals - includes having a proper mandate, well-defined operating principles and application of
other good practices
,Life cycle - includes inception (with a defined mandate), existence/adjustment, and dissolution
Good practices - includes operating principles (practical arrangements of how the structure will
operate), composition, span of control, level of authority / decision rights, delegation of
authority, and escalation procedures
IT performance measurement approaches (4 levels) - CORRECT ANSWER Payback period,
ROI, IRR, NPV (tangible)
Cost/benefit analysis
Information economics
IT Balanced Scorecard (intangible)
Business value hierarchy (4 levels) - CORRECT ANSWER Firm wide IT infrastructure
(infrastructure availability, cost per transaction, cost per workstation)
Business unit IT application (new application implementation time and cost)
Business unit operational (time to bring a new product to market, sales from new product,
product or service quality)
Business unit financial (revenue growth, return on assets, revenue per employee)
Generic IT Balanced Scorecard (4 perspectives) - CORRECT ANSWER Business
contribution - obtain a reasonable business contribution from IT investments
User orientation - be the preferred supplier of information systems
Operational excellence - deliver effective and efficient IT applications and services
Future orientation - develop opportunities to address future challenges
Influencing style characterization examples (4) - CORRECT ANSWER Asserting (push)
Persuading
Bridging
Attracting (pull)
, Assurance components - CORRECT ANSWER Three party relationship: assurance
professional, accountable party, user
Subject matter over which the assurance is to be provided
Suitable criteria against which the subject matter will be assessed
Process to execute: determine scope of initiative, understand the subject matter, set suitable
assessment criteria, assess, communicate
Conclusion issued by the assurance professional
Assurance engagement types (3) - CORRECT ANSWER Self-assessment (lowest reliability)
Internal audit/compliance review medium reliability)
External audit (maximal reliability)
Continuous improvement cycle components (3-4) - CORRECT ANSWER Create the
appropriate environment (depicted but not counted)
Program management
Change enablement
Continuous improvement lifecycle
Strategic alignment model perspectives (4) - CORRECT ANSWER Strategic execution
perspective (business strategy -> organizational infrastructure -> IT infrastructure) - business
strategy drives org design and IT infrastructure design
Technology transformation perspective (business strategy -> IT strategy -> IT infrastructure) -
business strategy drives IT strategy and articulates required IT infrastructure and processes
Competitive potential perspective (IT strategy -> business strategy -> organizational
infrastructure) - adapting the business strategy through emerging IT capabilities
Service level perspective (IT strategy -> IT infrastructure -> organizational infrastructure) -
focuses on building a world-class IT services organization
COBIT 5 goals cascade (5 levels) - CORRECT ANSWER Stakeholder drivers (strategy
changes, environment changes, new technologies, etc)
Stakeholder needs (benefit realization, risk optimization, resource optimization)