Question 1

Control practices differ from control objectives, as __________.

Group of answer choices

control practices define what controls should be implemented, and objectives relate to the COBIT mission

control objectives define the COBIT mission, and control practices are best outcomes

control practices offer guidance on why controls are important, and control objectives organizes the process model into the four domains

control practices are best practices, and control objectives provide guidance on COBIT implementation

Question 2

A chief compliance officer (COO) __________.

Group of answer choices

is solely responsible for implementing COBIT

should report to the board of directors to enforce the company's ethical standards

should report to the CEO, just like all other people in C-Level positions

is responsible for ensuring regulatory compliance with GAAP

Question 3

(TCO C) Sarbanes-Oxley and HIPAA __________.

Group of answer choices

can be implemented in lieu of each other

address the full regulatory compliance required of public companies

are mutually exclusive and do not relate to each other in any meaningful way

require COBIT to achieve full regulatory compliance

Question 4

(TCO A) The components of COSOs Enterprise Risk Management include all of the following except

Group of answer choices

internal environment.

objective setting.

event identification.

risk control strategies.

Question 5

(TCO B) Which law requires organizations to keep physical control of paper documents and control of electronic documents?

Group of answer choices

Sarbanes-Oxley

HIPAA

The Federal Financial Management Improvement Act of 1986

SAS 70