ISACA · COBIT-Foundation
Validates foundational knowledge of the COBIT 2019 framework, covering framework components, governance and management principles, performance management, governance objectives, tailored system design, and alignment of IT goals with strategic business objectives.
Practice Questions
600
≈ 4 practice exams
Duration
120 minutes
Passing Score
65%
Difficulty
FoundationalLast Updated
Sep 2026
ISACA is retiring the exam behind this practice bank sooner than most candidates realize. The COBIT 2019 Foundations Certificate program is being replaced by a new COBIT 7 Foundations Certificate on October 27, 2026, and ISACA has set October 26, 2026 as the last day to purchase the current COBIT 2019 exam or exam prep materials. The COBIT 2019 program itself sunsets on April 26, 2027, after which the version tested today will no longer be offered. If you already hold a COBIT 5 or COBIT 2019 credential, ISACA's own transition history is reassuring: when COBIT 2019 replaced COBIT 5 in 2019, ISACA explicitly said COBIT 5 certifications remained valid and valuable, and COBIT 5 training continued rather than being invalidated. There is no indication COBIT 7 will work differently for existing COBIT 2019 holders. Practically, this means anyone planning to sit the Foundation exam has a real, dated window: study and test on the current, well-documented COBIT 2019 blueprint now, or wait roughly 13 months for COBIT 7 materials, training, and third-party prep content to mature. This 600-question bank is built to the COBIT 2019 blueprint that is live today, not a speculative COBIT 7 outline, so it is accurate for anyone testing before the cutover.
COBIT Foundation is not primarily a solo self-study credential the way some vendor badges are. A large share of candidates earn it through accredited 2- to 3-day training bootcamps, run by ISACA-licensed providers, that bundle official courseware with the exam voucher, so many test-takers walk in having already sat structured, instructor-led sessions rather than working from a bank alone. Because there are no prerequisites, the other common path is IT auditors, GRC and risk managers, and consultants who need a fast, credible governance credential to sit alongside CISA, CISM, or CRISC, plus program managers picking up governance literacy for a specific initiative. The certificate is also the mandatory entry point to ISACA's COBIT Design and Implementation Certificate, and it is a common on-ramp toward CGEIT, the executive-level governance certification. That pathway matters more than it might look: in ISACA's own 2026 market analysis, CGEIT and CISA posted cash pay premium growth of 11% to 20% over the second half of 2025, well above the 6.5% average across all IT certifications, driven by governance being elevated to a board-level priority and rising demand for AI-era governance skills. Foundation is the cheap, fast first step onto that specific track.
On test day, expect 75 multiple-choice questions in 120 minutes, delivered exclusively through ISACA's remote proctoring platform; there is no physical test-center option for this exam. A detail worth knowing before you sit down: prep guides and past candidates consistently report each question offers only three answer choices instead of the usual four, which shifts baseline guessing odds from 25% to roughly 33% per question. Passing requires 65%, or 49 of 75 correct, and the flat $175 fee applies to members and non-members alike, since this is one of the few ISACA credentials without a member discount. Registration eligibility runs 6 months, and rescheduling is free up to 48 hours before your appointment. The exam still weights Governance System and Components heaviest at 30%, followed by Governance and Management Objectives at 23%, so more than half your score rides on two domains. Work through this 600-question bank with that weighting in mind, and do it before the October 26, 2026 purchase cutoff if you want to test on the current, thoroughly documented COBIT 2019 version rather than wait for COBIT 7.
The COBIT Foundation Certificate validates foundational knowledge of COBIT 2019, ISACA's framework for enterprise IT governance and management. But candidates researching it in late 2026 need one fact the framework's marketing pages don't lead with: ISACA is retiring this exact program. The COBIT 2019 Foundations Certificate is being replaced by a new COBIT 7 Foundations Certificate on October 27, 2026, the last day to purchase the current COBIT 2019 exam is October 26, 2026, and the COBIT 2019 program fully sunsets April 26, 2027. Anyone comparing COBIT Foundation to other ISACA credentials should factor in this timeline before deciding when to study.
Until the cutover, the exam content is unchanged: it tests COBIT's governance system components, how governance and management objectives are organized across domains, and how organizations design tailored governance systems for their own context. COBIT 2019 itself was a substantial revision of COBIT 5, introducing a principles-based design toolkit and a more flexible, component-based governance model, and that is still the material this exam covers today.
COBIT Foundation candidates split roughly into two groups, and the split matters for how you should prepare. A large share earn the credential through accredited 2- to 3-day training bootcamps run by ISACA-licensed providers, which bundle official courseware with the exam voucher; these candidates walk into the exam having already sat structured, instructor-led sessions. The rest are self-study candidates, since there are no prerequisites: IT auditors, risk and GRC managers, consultants who advise on governance, and program managers picking up governance literacy for a specific initiative, often alongside or after CISA or CISM.
Students and career-changers also use it as a low-cost, no-prerequisite entry point into the ISACA credential ecosystem. Whichever path you take, the certificate functions as a gateway: it is the mandatory prerequisite for ISACA's COBIT Design and Implementation Certificate, and a common early step for professionals aiming at CGEIT, ISACA's executive-level governance credential, later in their career.
There are no formal prerequisites to register for the COBIT Foundation exam. Candidates can register at any time, exam eligibility runs 6 months from registration, and testing appointments can be scheduled as early as 48 hours after payment and up to 90 days in advance.
One timing detail is specific to right now: ISACA's cutoff to purchase the current COBIT 2019 exam or prep materials is October 26, 2026. If you register close to that date, your 6-month eligibility window lines up almost exactly with the program's April 26, 2027 sunset, so there is little slack for delaying your test date once you buy in late 2026.
The exam is a computer-based, remotely proctored assessment of 75 multiple-choice questions, with 120 minutes to complete it. It is delivered exclusively online through ISACA's proctoring platform; there is no in-person test-center option for this exam. Passing requires 65%, or at least 49 of 75 questions correct, and the fee is US $175 for members and non-members alike, one of the few ISACA exams without a member discount.
One format detail candidates consistently flag in prep material: each question offers three answer options rather than the standard four, which shifts baseline random-guess odds from 25% to roughly 33% per question. ISACA does not publish whether any questions are unscored, so treat all 75 as counting. You can reschedule without penalty up to 48 hours before your appointment.
COBIT Foundation itself is an entry-level credential, but it sits at the base of a governance track that ISACA's own 2026 market data shows performing well above the broader certification market: CGEIT and CISA, the credentials most directly downstream of a COBIT foundation, posted 11% to 20% cash pay premium growth in the second half of 2025, versus a 6.5% average across all IT certifications, driven by governance moving from a compliance function to a board-level priority and rising demand for AI-era governance oversight. IT auditors, GRC and risk managers, and governance consultants are the roles most commonly built on this credential.
The more direct next step is ISACA's COBIT Design and Implementation Certificate, for which COBIT Foundation is a mandatory prerequisite; from there, CGEIT is the recognized executive-level, vendor-neutral IT governance certification aimed at CISO, CTO, and board-advisory roles. Because COBIT is framework-agnostic and used internationally, the Foundation credential travels across financial services, healthcare, government, and consulting, and pairs naturally with CISA or CISM for professionals building an audit-plus-governance profile.
5 sample questions with answers and explanations. The full bank has 600 questions, enough for 4 full-length practice exams.
Preview — answers shown1. A consulting firm is implementing Phase 2 of the COBIT 2019 implementation roadmap. Which key question does Phase 2 answer? (Select one!)
Explanation
Phase 2 of the COBIT 2019 seven-phase implementation roadmap addresses the question Where are we now? This phase involves assessing the current state of governance and management, identifying existing problems, and understanding baseline capability and maturity levels. Phase 1 asks What are the drivers to identify pain points and trigger events. Phase 3 asks Where do we want to be to define target state and objectives. Phase 4 asks What needs to be done to build the improvement plan. The seven-phase roadmap provides a structured continual improvement lifecycle for governance implementation.
2. A hospitality company is implementing Enterprise Goal EG09 Optimization of Business Process Costs. Which Balanced Scorecard dimension does this enterprise goal align to? (Select one!)
Explanation
Enterprise Goal EG09 Optimization of Business Process Costs aligns to the Internal Balanced Scorecard dimension, not the Financial dimension. This is a common exam trap in COBIT 2019. While cost optimization appears financial in nature, EG09 specifically focuses on internal business process efficiency and effectiveness rather than financial reporting or investment returns. The Internal dimension addresses operational excellence, process improvement, and internal efficiency. Financial dimension goals focus on portfolio competitiveness, managed business risk, regulatory compliance, and financial information quality. Customer dimension addresses service culture and continuity. Learning and Growth dimension covers innovation and staff capabilities. Understanding this mapping is critical for correctly applying the goals cascade.
3. An insurance company is evaluating Enterprise Goal EG03 Compliance with external laws and regulations. Which Balanced Scorecard dimension does this enterprise goal map to? (Select one!)
Explanation
Enterprise Goal EG03 Compliance with external laws and regulations maps to the Financial dimension of the Balanced Scorecard. In COBIT 2019, compliance and risk-related goals are categorized under Financial because they directly impact financial performance, reputation, and regulatory standing. Customer dimension focuses on service delivery and customer orientation. Internal dimension addresses process optimization. Learning and Growth covers innovation and workforce capabilities.
4. A government agency is implementing APO10 Managed Vendors. The procurement director notes that COBIT 5 used different terminology. What term did COBIT 5 use that COBIT 2019 replaced with vendor? (Select one!)
Explanation
COBIT 5 used the term supplier in its equivalent process, which COBIT 2019 changed to vendor in APO10 Managed Vendors. This terminology change reflects more common business language. Partner, contractor, and provider were not the original COBIT 5 terms for this concept. The change from supplier to vendor is one of several terminology updates between COBIT 5 and COBIT 2019, including the shift from enablers to components and from verb-based to adjective-based process naming.
5. A retail company is evaluating Alignment Goal AG06 Agility to turn business requirements into operational solutions. Which Balanced Scorecard dimension does this alignment goal map to? (Select one!)
Explanation
Alignment Goal AG06 Agility to turn business requirements into operational solutions maps to the Customer dimension of the Balanced Scorecard. This alignment goal focuses on the ability to quickly respond to customer and business needs by rapidly converting requirements into working solutions. Financial dimension includes goals related to compliance, risk, and financial information quality. Internal dimension covers process optimization and program delivery. Learning and Growth covers competencies and innovation capabilities.
Still COBIT 2019, as of today. ISACA is replacing this program with a new COBIT 7 Foundations Certificate on October 27, 2026. Until then, this exam and its content outline remain unchanged.
ISACA has set October 26, 2026 as the last day to purchase the current COBIT 2019 exam or exam prep. Registration gives you a 6-month eligibility window to test, which lines up closely with the program's April 26, 2027 sunset date.
ISACA has not indicated it will revoke previously earned credentials when a framework version changes. When COBIT 2019 replaced COBIT 5 in 2019, ISACA explicitly said COBIT 5 certifications remained valid and valuable, and COBIT 5 training continued. Nothing published for the COBIT 7 transition suggests different treatment for COBIT 2019 holders.
75 multiple-choice questions in 120 minutes, delivered only through ISACA's remote proctoring platform (there is no test-center option). Prep guides and past candidates note each question offers three answer options rather than the usual four.
65%, meaning at least 49 of the 75 questions must be correct. Results are provided after the remotely proctored session.
US $175 for members and non-members alike, one of the few ISACA credentials without a member discount, and there are no prerequisites. Exam eligibility lasts 6 months from registration.
Both are common, but a large share go through accredited 2- to 3-day bootcamps from ISACA-licensed training providers, which bundle official courseware with the exam voucher. Since there are no prerequisites, self-study candidates (often IT auditors, risk, and GRC professionals) are just as viable.
It's the mandatory entry point to ISACA's COBIT Design and Implementation Certificate, and a common on-ramp toward CGEIT, ISACA's executive-level governance certification. In ISACA's own 2026 market data, CGEIT and CISA posted 11-20% cash pay premium growth in late 2025, well above the 6.5% average across all IT certifications.
Eight domains: Governance System and Components (30%), Governance and Management Objectives (23%), Principles (13%), Framework Introduction (12%), Implementation (8%), Designing a Tailored Governance System (7%), Performance Management (4%), and Business Case (3%).
Certified Information Systems Auditor (CISA)
CISA · 895 questions
Cloud Fundamentals Certificate
Cloud-Fund · 600 questions
COBIT Design & Implementation Certificate Program
COBIT-Design · 599 questions
Cybersecurity Audit Certificate
CyberSec-Audit · 597 questions
Cybersecurity Fundamentals Certificate
CyberSec-Fund · 596 questions
Data Science Fundamentals Certificate
DataSci-Fund · 591 questions
$17.99
One-time access to this exam