CertsPoint
Sign In Get Started
See all results for ""
Exams About Us
Sign In Get Started
Exam Overview
Exam Code NIST-COBIT-2019
Exam Name ISACA Implementing the NIST Cybersecurity Framework using COBIT 2019
Vendor ISACA
Total Questions 50
Last Updated 26-Oct, 2026
Free NIST-COBIT-2019 Questions Get Premium Access
Why CertsPoint?
  • Latest & Verified Questions
  • Detailed Explanations
  • Regular Updates
  • Full-Length Practice Tests
  • Boost Your Exam Confidence

PDF Study Materials

Downloadable guides and resources

Practice Tests

Full-length tests with real exam experience

Progress Tracking

Monitor your performance and improvement

Study Anywhere

Access on desktop, tablet, and mobile

Excellent
4.6 (398 Up Votes)
Secure Payment Privacy Protected Money Back Guarantee

Free NIST-COBIT-2019 Practice Questions

Explore 6 free practice questions for the ISACA NIST-COBIT-2019 exam and review the answers and explanations to support your preparation.

  1. Question 1

    Single answer

    Which of the following is a framework principle established by NIST as an initial framework consideration?

    • Option A:
      Avoiding business risks
      Correct
    • Option B:
      Impact on global operations
      Correct
    • Option C:
      Ensuring regulatory compliance
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

    Explanation

    One of the framework principles established by NIST is to ensure that the framework is consistent and aligned with existing regulatory and legal requirements that are relevant to cybersecurity12. Reference: 1: Cybersecurity Framework | NIST 2: Framework Documents | NIST

  2. Question 2

    Single answer

    Which of the following functions provides foundational activities for the effective use of the Cybersecurity Framework? 

    • Option A:
      Protect
      Correct
    • Option B:
      Identify
      Correct
    • Option C:
      Detect
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B

    Explanation

    The Identify function provides foundational activities for the effective use of the Cybersecurity Framework, because it assists in developing an organizational understanding of managing cybersecurity risk to systems, people, assets, data, and capabilities12. This understanding enables an organization to focus and prioritize its efforts, consistent with its risk management strategy and business needs12. The Identify function includes outcome categories such as Asset Management, Business Environment, Governance, Risk Assessment, Risk Management Strategy, and Supply Chain Risk Management12. Reference: 1: The Five Functions | NIST 2: Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide

  3. Question 3

    Single answer

    Which of the following is an input to COBIT Implementation Phase 1: What Are the Drivers?

    • Option A:
      Risk response document
      Correct
    • Option B:
      Current capability rating for selected processes
      Correct
    • Option C:
      Program wake-up call
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

    Explanation

    A program wake-up call is an input to COBIT Implementation Phase 1: What Are the Drivers, because it is a trigger event that creates a sense of urgency and a need for change in the organization’s governance and management of enterprise I & T 1 2 . A program wake-up call can be internal or external, positive or negative, such as a major incident, a new regulation, a strategic initiative, or a stakeholder feedback 3 4 .
    References: 1 : COBIT 2019 Implementation Guide 2 : COBIT 2019 Implementation - ISACA 3 : Tips for Implementing COBIT in a Continuously Changing Environment - ISACA 4 : 7 Phases of COBIT Implementation:

  4. Question 4

    Single answer

    When aligning to the NIST Cybersecurity Framework, what should occur after tier levels and framework core outcomes are determined?

    • Option A:
      Report discovered issues to senior management.
      Correct
    • Option B:
      Assign mitigating control development.
      Correct
    • Option C:
      Compare current and target profiles.
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

    Explanation

    According to the NIST Cybersecurity Framework, after determining the tier levels and framework core outcomes, the next step is to compare the current and target profiles, which describe the organization’s current and desired cybersecurity posture based on the framework core functions, categories, and subcategories 1 . This comparison helps to identify the gaps and prioritize the actions for improvement 2 .
    References Cybersecurity Framework Components | NIST What is the NIST Cybersecurity Framework? | IBM

  5. Question 5

    Single answer

    Analysis is one of the categories within which of the following Core Functions?

    • Option A:
      Detect
      Correct
    • Option B:
      Respond
      Correct
    • Option C:
      Recover
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B

    Explanation

    Anomalies and Events is one of the six categories within the Detect function of the NIST Cybersecurity Framework. The Anomalies and Events category aims to ensure that anomalous activity is detected in a timely manner and the potential impact of events is understood 1 2 .
    References: 1 : The Five Functions | NIST 2 : Detect | NIST

  6. Question 6

    Single answer

    During CSF implementation, when is an information security manager MOST likely to identify key enterprise and supporting alignment goals as
    previously understood?

    • Option A:
      CSF Steps 5: Create a Target Profile and 6: Determine, Analyze, and Prioritize Gaps
      Correct
    • Option B:
      CSF Step 1: Prioritize and Scope
      Correct
    • Option C:
      CSF Steps 2: Orient and 3: Create a Current Profile
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B

    Explanation

    This CSF step corresponds to the COBIT objective of knowledge and understanding of enterprise goals, because it involves identifying the business drivers, mission, objectives, and risk appetite of the organization, as well as the scope and boundaries of the cybersecurity program 1 2 . This step helps to ensure that the cybersecurity activities and outcomes are aligned with the enterprise goals and strategy 3 4 .
    References: 1 : Cybersecurity Framework Components | NIST 2 : Implementing the NIST Cybersecurity Framework Using COBIT 2019 | ISACA 3 : COBIT 2019 Design and Implementation COBIT Implementation 4 : COBIT® 2019 Foundation | Skillsoft Global Knowledge