COBIT-FOUNDATION认证考试真题.doc

1. The CobiT framework focuses on providing the information required to supportA. Systems developmentB. Project managementC. Service deliveryD. Business objectives and requirements2. Which of the IT processes satisfies the business requirement for IT of transparent and service levels?A. DS3 manage performance and capacityB. DS2 manage third-party servicesC. PO5 manage the IT investmentD. ME1 manage and evaluate IT performance3. Which of the following is a key feature of resource optimization?A. Ensuring that sufficient capability exists for business-critical activitiesB. Utilizing requirement as much as possibleC. Choosing a number of key product suppliesD. Making sure that the lowest-cost workforce has been 4. Where within COBIT will a user find resource to help assess the capacity of IT PROCESSES?A. Control ObjectivesB. Management GuidelinesC. IT Governance Implementation GuideD. Framework5. COBIT contributes to the use of multiple standards and best practices within organization because itA. helps integrate together specific technical practicesB. includes all the details of existing best practicesC. can be used as a system development life cycleD. helps enhance accounting procedures6. Which of the following it Processes addresses a structured approach to user and operation procedure?A. D57 educate and train usersB. A14 enable operation and useC. A15 install and accredit systemsD. DS8 manage service desk and incidents7. A primary advantage of adopting the COBIT framework is that itA. focuses on securityB. it based on accounting controlsC. focuses on operationsD. is compatible with other frameworks8. Which COBIT product provides the most up-to-date COBIT information?A. IT governance implementation guideB. COBIT frameworkC. COBIT control objectivesD. COBIT online9. Which of the following is a component of the management guidance?A. control objectivesB. information activitiesC. assurance levelsD. process and activity goals10. In DS2 practices are dependent on the knowledge of the individual and supplier indicates which level maturity? A. level 4-managedB. level 3-definedC. level 1-initialD. level 2-repeatable11. Scoping, planning, execution is the correct sequence for the assurance roadmap “true or false”A. true B. false 12. The information criteria concerned with the “accuracy and completeness of information isA. reliabilityB. ConfidentialityC. integrityD. compliance13. The COBIT framework states that to satisfy business objectives information needs to conform to specific information criteria including:A. deliveryB. continuityC. efficiencyD. security14. COBIT security baseline is cross referenced toA. ITILB. COSOC. ISO 17799D. CMM15. Which of the following is a characteristic of a control framework?A. process orientation B. exception reportsC. audit trailsD. mandatory limits16. Which of the following is the best way to manage what constitutes “good service”?A. measure the maturity of service-related processesB. create contractually defined service levelsC. assess controls in service deliveryD. perform audits of service contracts17. A primary objective of COBIT quick-start is to A. perform a quick maturity assessmentB. perform audits quicklyC. focus on technical areasD. gain benefits quickly18. Which of the following COBIT IT processes will be most useful when managing service providers?A. DS1 define and manage service levelsB. PO4 define the IT processes, organization and relationshipsC. DS2 manage third-party servicesD. DS8 manage service desk and incidents19. Which of the following is the most probable reason why IT projects exceed budget expectations or deadlines?A. technical problemsB. high cost of IT expertsC. inadequate business casesD. poor development methodologies 20. Which of the following is a stage in the assurance roadmap defined in the Assurance Guide?l Defining Approachesl Executingl Identifying Usersl Measuring performance21. The Community feature in CobiT Online enables users to:A. Benchmark and compare their organization to othersB. Meet, pose questions, reply to questions and exchange experiencesC. Assess maturity and learn from other organizations capacitiesD. Measure controls and compare to industry norms22. Val IT principles includes the statement the IT-enabled investments:A. Will be continually monitored, evaluated, and improved.B. Will be focused on IT activitiesC. Will be managed through the definition and monitoring of key metricsD. Are managed through their full economic life cycle.23. Which COBIT IT resource can be defined as being “hardware, operating systems, database management system, networking, multimedia and environment?”A. TechnologyB. SoftwareC. SystemsD. Infrastructure24. Which of the following is a benefit or strategic alignment?A. Optimizing the use of resourcesB. Maintaining skilled resourcesC. Meeting project deadlinesD. Producing high-quality software25. The Management Guidelines provide tools to set measurable objectives for each:A. ResourceB. Information CriterionC. ProcessD. domain26. To satisfy business objectives, information needs to conform to specific criteria, which COBIT refers as:A. Control ObjectivesB. Outcome MeasuresC. Information CriteriaD. Control Practices27.”You need to tailor COBIT for your own organization and define how to improve processes “true or false?A. FalseB. True28. Which execution roadmap stage of the Assurance Guide focuses on effectiveness of the control?A. Testing control outcomeB. Documenting impactC. Communicate resultsD. Testing control design29. Which of the following is the best way for an organization to ensure third-party regulatory compliance?A. Ensuring that compliance requirements are included in legal and contractual agreements with service.B. Asking the third-partys compliance function to review all regulatory mattersC. Discussing with regulators any previous problems with the third partyD. Performing due diligence reviews of the third-partys control environment30. Which of the following is a key benefit of IT governance?A. Increased IT investmentB. Responsiveness of IT to the businessC. Ability to be an IT leaderD. Greater awareness of available technical solutions31. Which level of maturity in the COBIT IT processes is usually associated with a process being “communicated”?A. Level 3 DefinedB. Level 2 RepeatableC. Level 4 ManagedD. Level 1 Initial32. Which one of the following is one of the four Rs of Val IT?A. Are we involving the night stakeholders?B. Are we doing them well?C. Are we selecting the right projects?D. Are we on track?33. In PO10, a lack of commitment to project ownership and management indicates which level of maturity?A. Level 2 RepeatableB. Level 1 InitialC. Level 3 DefinedD. Level 4 Managed34. COBIT is a:A. Best practice for service managementB. Methodology for developing high-quality IT systemsC. Standard for security managementD. Framework of IT processes and their management35. RACI charts help identify:A. who is responsible, acceptable, consulted or interestedB. who is replaced, appointed, confirmed or informedC. what are the result, actions, charts, and interestD. who is responsible, accountable, consulted or informed36. ISO/IEC 17799 provides the detailed”how to do it” for:A. Strategic PlanningB. Service deliveryC. Information security managementD. Project management37. Risk can be m