Free PECB ISO/IEC 38500 Foundation Practice Questions

Sample Practice Questions

Try these 10 sample questions from the PECB ISO/IEC 38500 Foundation practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1Which description gives the complete ISO/IEC 38500:2024 definition of governance of IT?

   1. A.The system governing current demand for IT
   2. B.The system governing future supply of IT
   3. C.The system governing current and future IT useCorrect answer: C
   4. D.The system governing current IT operations only

   Explanation: The standard defines governance of IT as the "system by which the current and future use of IT is governed". It therefore encompasses both time horizons.

   Reference: ISO/IEC 38500:2024, Information technology — Governance of IT for the organization — Clause 3.4

2. 2According to the 2024 model, where can governance of IT be exercised?

   1. A.Within external assurance alone
   2. B.Throughout the organizationCorrect answer: B
   3. C.Within the governing body alone
   4. D.Within IT operations alone

   Explanation: ISO says the 2024 guidance stresses that "Governance is exercised throughout the organization". Management operates within the framework defined by the governing body.

   Reference: White Paper on the differences between ISO/IEC 38500:2015 and ISO/IEC 38500:2024 — Model for the Governance of IT

3. 3How does ISO/IEC 38500:2024 relate governance of IT to governance of organizations?

   1. A.IT governance replaces organizational governance for digital activities.
   2. B.IT governance forms one domain of organizational governance.Correct answer: B
   3. C.IT governance operates independently of organizational governance.
   4. D.Organizational governance forms one domain of IT governance.

   Explanation: Clause 3.4 states that "Governance of IT is a component or a domain of governance of organizations." IT governance is thus situated within organizational governance.

   Reference: ISO/IEC 38500:2024, Information technology — Governance of IT for the organization — Clause 3.4, Note 1 to entry

4. 4In the ISO committee's description, what is the relationship between management and the governing body's framework?

   1. A.The governing body operates within a framework defined by management.
   2. B.Management operates within a framework defined by the governing body.Correct answer: B
   3. C.Management and the governing body use unrelated frameworks.
   4. D.The governing body delegates its framework-setting role to all suppliers.

   Explanation: ISO describes "management operating within the framework defined by the governing body". The framework sets the context for management rather than being replaced by it.

   Reference: White Paper on the differences between ISO/IEC 38500:2015 and ISO/IEC 38500:2024 — Model for the Governance of IT

5. 5Which description matches the standard's definition of information technology?

   1. A.Resources used to define risks, tolerances and compliance duties
   2. B.Resources used to review progress, outcomes and accountability
   3. C.Resources used to acquire, process, store and disseminate dataCorrect answer: C
   4. D.Resources used to determine objectives, policies and authority

   Explanation: Clause 3.5 defines IT as "resources used to acquire, process, store and disseminate information or data". The answer reflects those information-handling functions.

   Reference: ISO/IEC 38500:2024, Information technology — Governance of IT for the organization — Clause 3.5

6. 6What does evaluation mean within the ISO/IEC 38500 governance model?

   1. A.Communicate desired purposes and outcomes
   2. B.Consider circumstances and make informed judgmentsCorrect answer: B
   3. C.Assign authority and responsibility to others
   4. D.Review progress as a basis for adjustments

   Explanation: The standard defines evaluate as "consider and make informed judgements". Its note relates these judgments to circumstances and opportunities concerning current and future IT use.

   Reference: ISO/IEC 38500:2024, Information technology — Governance of IT for the organization — Clause 3.2

7. 7In ISO/IEC 38500:2024, what distinguishes a digital capability?

   1. A.A performance measure that records progress against a plan
   2. B.A governance structure that assigns responsibility for IT decisions
   3. C.IT that enables or supports an organizational product, service or processCorrect answer: C
   4. D.A governance policy that communicates organizational objectives

   Explanation: The standard defines digital capability as "IT to enable or support a service, product or process of the organization". The definition links IT to an organizational service, product or process.

   Reference: ISO/IEC 38500:2024, Information technology — Governance of IT for the organization — Clause 3.10

8. 8How does the governance model define the action of directing?

   1. A.Assign authority and responsibility to another party
   2. B.Communicate desired purposes and outcomesCorrect answer: B
   3. C.Review progress to support decisions and adjustments
   4. D.Consider circumstances and make informed judgments

   Explanation: The standard defines direct as "communicate desired purposes and outcomes". Its note explains that directing includes setting objectives, strategies and policies for IT use.

   Reference: ISO/IEC 38500:2024, Information technology — Governance of IT for the organization — Clause 3.1

9. 9Which statement best captures the standard's definition of investment?

   1. A.Assignment of authority to make and implement decisions
   2. B.Evaluation of progress against objectives and intended benefits
   3. C.Allocation of resources to achieve objectives and other benefitsCorrect answer: C
   4. D.Use of resources to acquire, store and disseminate information

   Explanation: Clause 3.6 defines investment as the "allocation of resources to achieve defined objectives and other benefits". Investment is therefore defined by the allocation and its intended results.

   Reference: ISO/IEC 38500:2024, Information technology — Governance of IT for the organization — Clause 3.6

10. 10What is monitoring intended to provide in the governance of IT?

    1. A.A basis for defining the organization's reason to exist
    2. B.A basis for decisions and adjustments through reviewCorrect answer: B
    3. C.A basis for communicating desired purposes and outcomes
    4. D.A basis for allocating authority and responsibility

    Explanation: ISO defines monitor as "review as a basis for appropriate decisions and adjustments". Monitoring informs decisions and changes when appropriate.

    Reference: ISO/IEC 38500:2024, Information technology — Governance of IT for the organization — Clause 3.8