Isaca NIST-COBIT-2019 Exam Questions Instant Access

Question 1

Which of the following is an important consideration when defining the roadmap in COBIT Implementation Phase 3 - Where Do We Want to Be?

AAgreed metrics for measuring outcomes

BReporting procedures and requirements

CChange-enablement implications

Answer : C

An important consideration when defining the roadmap in COBIT Implementation Phase 3 is the change-enablement implications, which refer to the potential impact of the proposed solutions on the people, culture, and behavior of the organization. This involves assessing the readiness and willingness of the stakeholders to adopt the changes, identifying the risks and barriers to change, and developing strategies to address them12.

Reference 7 Phases in COBIT Implementation | COBIT Certification - Simplilearn COBIT 2019 Design and Implementation COBIT Implementation, page 31.

Question 2

In which CSF step should an enterprise document its existing category and subcategory outcome achievements?

AStep 1: Prioritize and Scope

BStep 3: Create a Current Profile

CStep 4: Conduct a Risk Assessment

Answer : B

This CSF step involves documenting the existing category and subcategory outcome achievements, by using the implementation status to indicate the degree to which the cybersecurity outcomes defined by the CSF Subcategories are currently being achieved by the organization12. The Current Profile reflects the current cybersecurity posture of the organization, and helps to identify the gaps and opportunities for improvement3 .

Question 3

The CSF Implementation Tiers distinguish three fundamental dimensions of risk management to help enterprises evaluate which of the following?

ACybersecurity posture

BCybersecurity threats

CCybersecurity landscape

Answer : A

The CSF Implementation Tiers distinguish three fundamental dimensions of risk management to help enterprises evaluate their cybersecurity posture, which is the alignment of their cybersecurity activities and outcomes with their business objectives and risk appetite12. The Tiers range from Partial (Tier 1) to Adaptive (Tier 4) and describe the degree of rigor, integration, and collaboration of the organization's cybersecurity risk management practices12.

Question 4

Which of the following represents a best practice for completing CSF Step 3: Create a Current Profile?

AProcuring solutions that are cost-effective and fit the organization's technical architecture

BAssessing current availability, performance, and capacity to create a baseline

CEngaging in a dialogue and obtaining input to determine appropriate goals, tiers, and
Activities

Answer : C

This represents a best practice for completing CSF Step 3: Create a Current Profile, because it involves collaborating with relevant stakeholders to identify the current cybersecurity outcomes and implementation status of the organization12. Engaging in a dialogue and obtaining input can help to ensure that the Current Profile reflects the business drivers, mission, objectives, and risk appetite of the organization, as well as the scope and boundaries of the cybersecurity program34.

Question 5

Which of the following is associated with the "Detect" core function of the NIST Cybersecurity Framework?

AInformation Protection Processes and Procedures

BAnomalies and Events

CRisk Assessment

Answer : B

Anomalies and Events is one of the six categories within the Detect function of the NIST Cybersecurity Framework. The Anomalies and Events category aims to ensure that anomalous activity is detected in a timely manner and the potential impact of events is understood12.

Question 6

Which COBIT implementation phase directs the development of an action plan based on the outcomes described in the Target Profile?

APhase 3 -Where Do We Want to Be?

BPhase 5 -How Do We Get There?

CPhase 4 -What Needs to Be Done?

Answer : B

The COBIT implementation phase that directs the development of an action plan based on the outcomes described in the Target Profile is Phase 5 - How Do We Get There? This phase involves defining the detailed steps, resources, roles, and responsibilities for executing the implementation plan and achieving the desired outcomes12.

Reference 7 Phases in COBIT Implementation | COBIT Certification - Simplilearn COBIT 2019 Design and Implementation COBIT Implementation, page 31.

Question 7

Documenting opportunities for improvement occurs within which implementation phase?

APhase 4 - What Needs to Be Done?

BPhase 2 - Where Are We Now?

CPhase 3 - Where Do We Want to Be?

Answer : B

The objective of COBIT Implementation Phase 2 is to define the scope of the implementation using COBIT's mapping of enterprise goals to IT-related goals and the associated IT processes, and to consider how risk scenarios could also highlight key processes on which to focus. This phase also involves documenting the current capability and performance of the selected processes and identifying opportunities for improvement12.

Reference 7 Phases in COBIT Implementation | COBIT Certification - Simplilearn COBIT 2019 Design and Implementation COBIT Implementation, page 31.

Isaca Implementing the NIST Cybersecurity Framework using COBIT 2019 NIST-COBIT-2019 Exam Questions