Most Recent Isaca NIST-COBIT-2019 Exam Questions & Answers

Prepare for the Isaca ISACA Implementing the NIST Cybersecurity Framework using COBIT 2019 exam with our extensive collection of questions and answers. These practice Q&A are updated according to the latest syllabus, providing you with the tools needed to review and test your knowledge.

QA4Exam focus on the latest syllabus and exam objectives, our practice Q&A are designed to help you identify key topics and solidify your understanding. By focusing on the core curriculum, These Questions & Answers helps you cover all the essential topics, ensuring you're well-prepared for every section of the exam. Each question comes with a detailed explanation, offering valuable insights and helping you to learn from your mistakes. Whether you're looking to assess your progress or dive deeper into complex topics, our updated Q&A will provide the support you need to confidently approach the Isaca NIST-COBIT-2019 exam and achieve success.

The questions for NIST-COBIT-2019 were last updated on Jan 17, 2025.

Viewing page 1 out of 10 pages.
Viewing questions 1-5 out of 50 questions

Get All 50 Questions & Answers

Question No. 1

The goals cascade supports prioritization of management objectives based on:

Athe prioritization of enterprise goals.

Bthe prioritization of business objectives.

Cthe prioritization of stakeholder needs.

Show Answer

Correct Answer: C

The goals cascade is a mechanism that translates the stakeholder needs into specific, actionable, and customized goals at different levels of the enterprise12. The stakeholder needs are the drivers of the governance system and reflect the expectations and requirements of the internal and external parties that have an interest or influence on the enterprise34. The goals cascade supports the prioritization of management objectives based on the stakeholder needs, as well as the alignment of the enterprise goals, the alignment goals, and the governance and management objectives12.

Question No. 2

During Step 3: Create a Current Profile, an enterprise outcome has reached a 95% subcategory maturity level. How would this level of achievement be

described in the COBIT Performance Management Rating Scale?

ALargely Achieved

BPartially Achieved

CFully Achieved

Show Answer

Correct Answer: C

According to the COBIT Performance Management Rating Scale, a subcategory maturity level of 95% corresponds to the rating of Fully Achieved, which means that the outcome is achieved above 85%12. This indicates that the enterprise has a high degree of capability and maturity in the subcategory, and that the practices and activities are performed consistently and effectively34.

Question No. 3

Which of the following functions provides foundational activities for the effective use of the Cybersecurity Framework?

AProtect

BIdentify

CDetect

Show Answer

Correct Answer: B

The Identify function provides foundational activities for the effective use of the Cybersecurity Framework, because it assists in developing an organizational understanding of managing cybersecurity risk to systems, people, assets, data, and capabilities12. This understanding enables an organization to focus and prioritize its efforts, consistent with its risk management strategy and business needs12. The Identify function includes outcome categories such as Asset Management, Business Environment, Governance, Risk Assessment, Risk Management Strategy, and Supply Chain Risk Management12.

Question No. 4

Within the CSF Core structure, which type of capability can be implemented to help practitioners recognize potential or realized risk to enterprise assets?

AProtection capability

BResponse capability

CDetection capability

Show Answer

Correct Answer: C

The Detection capability is the type of capability within the CSF Core structure that can help practitioners recognize potential or realized risk to enterprise assets. The Detection capability consists of six categories that enable timely discovery of cybersecurity events, such as Anomalies and Events, Security Continuous Monitoring, and Detection Processes12.

Question No. 5

Which of the following COBIT and NIST implementation steps may be reversed depending on the culture of the organization?

AStep 4: Conduct a Risk Assessment and Step 6: Determine, Analyze, and Prioritize Gaps

BStep 3: Create a Current Profile and Step 5: Create a Target Profile

CStep 1: Prioritize and Scope and Step 2: Orient

Show Answer