Question 1

According to COBIT 5, an organization's information technology governance and management should meet stakeholder needs.Which of the following best pairs a stakeholder with an information need?
A)vice president of finance, interest rates on newly acquired debt
B)human resources manager, cost of conducting a new employee search
C)Both vice president of finance, interest rates on newly acquired debt and human resources manager, cost of conducting a new employee search
D)Neither vice president of finance, interest rates on newly acquired debt nor human resources manager, cost of conducting a new employee search

Accepted Answer

COBIT 5 emphasizes the importance of meeting stakeholder needs. In this case, the vice president of finance would likely be interested in the interest rates on newly acquired debt in order to assess the financial impact on the organization. The human resources manager would likely be interested in the cost of conducting a new employee search in order to manage expenses and plan budgets. Therefore, both stakeholders have information needs that the organization should meet.

Question 2

According to ISACA, which COBIT enabler provides the vehicle for translating desired behavior into practical guidance for day-to-day management?
A)principles, policies and frameworks
B)culture, ethics and behavior
C)services, infrastructure and applications
D)people, skills and competencies

Accepted Answer

Principles, policies and frameworks provide the guidance needed to translate desired behavior into day-to-day management. They serve as a vehicle to ensure consistency and alignment with organizational objectives.

Question 3

Consider the following short case as you respond to the question: Melissa is an internal auditor for the County of Bufflufia.Her job responsibilities include providing training on information systems security and checking the work of data entry clerks.Melissa is also part of a team that responds to denial-of-service attacks on the county's information system.Her co-worker, Eugene, ensures that all the county's computers have the most up-to-date antivirus software; he also enforces the county's policy of backing up sensitive data, such as employee social security numbers and other payroll information, at least once a day.The back-ups are dated and stored in a locked filing cabinet.Melissa's responsibilities relate to which elements of the CIA triad?
A)Confidentiality and availability
B)Confidentiality and data integrity
C)Availability and data integrity
D)None of these

Accepted Answer

Melissa's responsibilities relate to the availability of the county's information system, while Eugene's responsibilities contribute to data integrity by enforcing the policy of backing up sensitive data. Therefore, their responsibilities relate to the availability and data integrity elements of the CIA triad. Confidentiality is not explicitly mentioned in their job responsibilities.

Question 4

Consider the following short case as you respond to the question: Melissa is an internal auditor for the County of Bufflufia.Her job responsibilities include providing training on information systems security and checking the work of data entry clerks.Melissa is also part of a team that responds to denial-of-service attacks on the county's information system.Her co-worker, Eugene, ensures that all the county's computers have the most up-to-date antivirus software; he also enforces the county's policy of backing up sensitive data, such as employee social security numbers and other payroll information, at least once a day.The back-ups are dated and stored in a locked filing cabinet.Which employee has responsibilities related to technical security controls?
A)Melissa only
B)Eugene only
C)Both Melissa and Eugene
D)Neither Melissa nor Eugene

Accepted Answer

Both Melissa and Eugene have responsibilities related to technical security controls. Melissa provides training on information systems security and is part of the team that responds to denial-of-service attacks, while Eugene ensures that all computers have up-to-date antivirus software and enforces the backup policy for sensitive data. These are all technical security control measures aimed at protecting the county's information systems from threats and breaches.

Question 5

According to COBIT 5, an organization's information technology governance and management should apply a single integrated framework for managing information.Which of the following best pairs an established framework with an element of the framework?
A)FASB Conceptual Framework of Accounting, qualitative characteristics of internal control
B)FASB Conceptual Framework of Accounting, elements of financial statements
C)Both FASB Conceptual Framework of Accounting, qualitative characteristics of internal control and FASB Conceptual Framework of Accounting, elements of financial statements
D)Neither FASB Conceptual Framework of Accounting, qualitative characteristics of internal control nor FASB Conceptual Framework of Accounting, elements of financial statements

Accepted Answer

The FASB Conceptual Framework of Accounting is paired with the elements of financial statements, which include assets, liabilities, equity, income, and expenses. This framework is used as a basis for financial reporting standards in the United States. However, it is not directly related to COBIT 5 and its integrated framework for managing information technology governance and management. The other answer choices are irrelevant to the question.

Question 6

According to ISACA, which COBIT enabler focuses on an often underestimated success factor in governance and management activities?
A)principles, policies and frameworks
B)culture, ethics and behavior
C)services, infrastructure and applications
D)people, skills and competencies

Accepted Answer

The COBIT enabler that focuses on an often underestimated success factor in governance and management activities is culture, ethics and behavior. This enabler helps organizations establish a positive culture that values ethics and encourages appropriate behavior. It is often neglected, but is crucial for the success of governance and management activities.

Question 7

At HCK Corporation, only employees in the information systems department can install new software on a computer.Which type of security control best describes that practice?
A)Physical
B)Technical
C)Administrative
D)Practice

Accepted Answer

This practice describes an administrative security control, as it pertains to the policies and procedures that govern the installation of software by employees in a particular department.

Question 8

Which COBIT enabler focuses on things like product demand, employee satisfaction and vendor reliability?
A)organizational structures
B)information
C)separating governance from management
D)meeting stakeholder needs

Accepted Answer

The answer of Which COBIT enabler focuses on things like...

Question 9

According to COBIT 5, an organization's information technology governance and management should separate governance from management.In that context, examples of governance include:
A)developing a comprehensive organizational budget.
B)deciding the dollar amount of an upcoming dividend.
C)Both developing a comprehensive organizational budget and deciding the dollar amount of an upcoming dividend.
D)Neither developing a comprehensive organizational budget nor deciding the dollar amount of an upcoming dividend.

Accepted Answer

The answer of According to COBIT 5, an organization's information...

Question 10

A firewall is an example of which type of control?
A)Physical security
B)Technical security
C)Administrative security
D)Enterprise security

Accepted Answer

A firewall is a technical security control, as it is a software or hardware-based tool that is used to monitor and control network traffic. Technical security controls are designed to protect against a range of threats by controlling access to networks, systems, and data.

Question 11

Consider the following short case as you respond to the question: Melissa is an internal auditor for the County of Bufflufia.Her job responsibilities include providing training on information systems security and checking the work of data entry clerks.Melissa is also part of a team that responds to denial-of-service attacks on the county's information system.Her co-worker, Eugene, ensures that all the county's computers have the most up-to-date antivirus software; he also enforces the county's policy of backing up sensitive data, such as employee social security numbers and other payroll information, at least once a day.The back-ups are dated and stored in a locked filing cabinet.Which of the following statements is most true?
A)Eugene's responsibilities span both physical and technical controls.
B)Melissa's responsibilities are related to at least one element of the CIA triad.
C)Both Eugene's responsibilities span both physical and technical controls and Melissa's responsibilities are related to at least one element of the CIA triad are true.
D)Neither Eugene's responsibilities span both physical and technical controls nor Melissa's responsibilities are related to at least one element of the CIA triad is true.

Accepted Answer

Eugene's responsibilities span both physical and technical controls because he ensures that all computers have up-to-date antivirus software (technical control) and enforces the county's policy of backing up sensitive data and storing the back-ups in a locked filing cabinet (physical control). Melissa's responsibilities are related to at least one element of the CIA triad as she is responsible for checking the work of data entry clerks (integrity) and responding to denial-of-service attacks (availability).

Question 12

All of the following are elements of the CIA triad except:
A)Clarity
B)Confidentiality
C)Availability
D)Data integrity

Accepted Answer

The CIA triad stands for confidentiality, integrity, and availability. Clarity is not an element of the CIA triad.

Question 13

COBIT comprises ___ principles and ___ enablers.
A)five; seven
B)seven; five
C)five; five
D)seven; seven

Accepted Answer

COBIT comprises five principles and seven enablers.

Question 14

According to COBIT's principles, information technology governance and management should enable a ___ approach.
A)stakeholder
B)framework
C)behavioral
D)holistic

Accepted Answer

COBIT's principles emphasize a holistic approach to IT governance and management, meaning that all aspects of technology, processes, people and culture need to be considered in order to achieve desired outcomes. A holistic approach helps to ensure that IT activities are aligned with business objectives and that all stakeholders are taken into account.

Question 15

According to COBIT 5, an organization's information technology governance and management should cover the enterprise end-to-end.Which of the following parts of an organization would likely need information on inventory levels?
A)production and operations
B)marketing
C)accounting
D)all of these

Accepted Answer

All parts of an organization, including production and operations, marketing, and accounting, may need information on inventory levels to make informed decisions and ensure efficient operations.

Question 16

Consider the following short case as you respond to the question: Melissa is an internal auditor for the County of Bufflufia.Her job responsibilities include providing training on information systems security and checking the work of data entry clerks.Melissa is also part of a team that responds to denial-of-service attacks on the county's information system.Her co-worker, Eugene, ensures that all the county's computers have the most up-to-date antivirus software; he also enforces the county's policy of backing up sensitive data, such as employee social security numbers and other payroll information, at least once a day.The back-ups are dated and stored in a locked filing cabinet.Which employee has responsibilities related to all three elements of the CIA triad?
A)Melissa only
B)Eugene only
C)Both Melissa and Eugene
D)Neither Melissa nor Eugene

Accepted Answer

Both Melissa and Eugene have responsibilities related to all three elements of the CIA triad. Melissa's responsibility in responding to denial-of-service attacks involves ensuring the availability of the system. Her training on information systems security and checking the work of data entry clerks ensure the confidentiality and integrity of the data. Eugene's responsibility in ensuring all computers have up-to-date antivirus software and enforcing the policy of backing up sensitive data daily ensures the confidentiality and availability of the data. The dated and locked storage of the back-ups ensures the integrity of the data. Therefore, both Melissa and Eugene have responsibilities related to all three elements of the CIA triad.

Question 17

WER Corporation forces its employees to change their system password every six months.Which type of security control best describes the company's policy?
A)Physical
B)Technical
C)Administrative
D)Hacking

Accepted Answer

The company's policy of requiring employees to change their system password every six months is an administrative security control. This control is intended to ensure that passwords remain secure over time by requiring users to periodically change them. Physical security controls are related to physical access to a system, while technical security controls involve hardware and software measures to protect against threats. Hacking is not a type of security control, but rather a type of unauthorized access to a system.

Question 18

According to COBIT's principles, information technology governance and management should:
A)focus on the four purposes of internal control.
B)address systems risk only.
C)apply a single integrated framework.
D)apply an end-to-end framework.

Accepted Answer

COBIT's principles emphasize the application of a single integrated framework for IT governance and management, ensuring consistency and alignment with enterprise goals.

Question 19

According to COBIT 5, an organization's information technology governance and management should apply a single integrated framework for managing information.Which of the following best pairs an established framework with an element of the framework?
A)COSO enterprise risk management, cost of managing risk
B)COSO internal control, risk/control matrix
C)Both COSO enterprise risk management, cost of managing risk and COSO internal control, risk/control matrix
D)Neither COSO enterprise risk management, cost of managing risk nor COSO internal control, risk/control matrix

Accepted Answer

The answer of According to COBIT 5, an organization's information...

Question 20

According to COBIT 5, an organization's information technology governance and management should enable a holistic approach.Which of the following frameworks provides the most holistic view of an organization?
A)FASB Conceptual Framework
B)AICPA Core Competencies Framework
C)Brown's risk taxonomy
D)Vroom's expectancy theory

Accepted Answer

Brown's risk taxonomy provides a comprehensive view of an organization's risks, which aligns with COBIT 5's holistic approach to IT governance and management.

Quiz 10: Computer Crime and Information Technology Security

According to COBIT 5, an organization's information technology governance and management should meet stakeholder needs.Which of the following best pairs a stakeholder with an information need?

According to ISACA, which COBIT enabler provides the vehicle for translating desired behavior into practical guidance for day-to-day management?

According to COBIT 5, an organization's information technology governance and management should apply a single integrated framework for managing information.Which of the following best pairs an established framework with an element of the framework?

According to ISACA, which COBIT enabler focuses on an often underestimated success factor in governance and management activities?

At HCK Corporation, only employees in the information systems department can install new software on a computer.Which type of security control best describes that practice?

Which COBIT enabler focuses on things like product demand, employee satisfaction and vendor reliability?

According to COBIT 5, an organization's information technology governance and management should separate governance from management.In that context, examples of governance include:

A firewall is an example of which type of control?

All of the following are elements of the CIA triad except:

COBIT comprises _ principles and _ enablers.

According to COBIT's principles, information technology governance and management should enable a ___ approach.

According to COBIT 5, an organization's information technology governance and management should cover the enterprise end-to-end.Which of the following parts of an organization would likely need information on inventory levels?

WER Corporation forces its employees to change their system password every six months.Which type of security control best describes the company's policy?

According to COBIT's principles, information technology governance and management should:

According to COBIT 5, an organization's information technology governance and management should apply a single integrated framework for managing information.Which of the following best pairs an established framework with an element of the framework?

According to COBIT 5, an organization's information technology governance and management should enable a holistic approach.Which of the following frameworks provides the most holistic view of an organization?