MENU
Which of the following is an example of shadow IT?
Suggested Answer: C
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
CA
Caprice
10 months ago
Really? I thought shadow IT was only about unapproved software.
NA
Nakita
11 months ago
A is spot on, but D feels like a stretch.
DE
Dean
11 months ago
Wait, isn't B also a form of shadow IT?
NA
Nan
11 months ago
I think C is more of a problem, though.
EM
Emiko
11 months ago
Definitely A, that's classic shadow IT.
CA
Carey
12 months ago
I practiced a similar question, and I think A is definitely the best choice since it involves a cloud tool that IT doesn’t know about.
PA
Paola
12 months ago
I feel like C could be a good example too, but I’m not entirely sure if personal email counts as shadow IT.
SE
Sean
12 months ago
I remember discussing shadow IT in class, and I thought it was more about using unauthorized software, which makes me unsure about B and C.
TR
Trinidad
1 year ago
I think shadow IT is when employees use tools or services without IT's approval, so I’m leaning towards option A.
JE
Jessenia
1 year ago
I'm a little confused by the wording of these options. They all seem to involve some kind of unauthorized technology use, but I'm not sure which one specifically qualifies as shadow IT. I'll have to re-read the question and options more closely.
AL
Albina
1 year ago
Okay, I've got this. The correct answer is A - an employee using a cloud-based tool without IT approval. That's a classic example of shadow IT, where employees bypass official IT processes to use their own tools and services.
KE
Kenneth
1 year ago
Hmm, I'm a bit unsure about this one. I know shadow IT has to do with unauthorized use of technology, but I'm not totally clear on the specific criteria. I'll have to think this through carefully.
CH
Cherelle
1 year ago
This looks like a straightforward question about shadow IT. I think the key is to identify the examples that involve employees using unapproved IT resources or services without the knowledge or consent of the IT department.
CI
Ciara
1 year ago
Hmm, this seems like a pretty straightforward question. I'm pretty confident I can figure this out.
SI
Simona
1 year ago
Hmm, I'm a bit unsure about this one. I know other comprehensive income includes things like foreign currency translation differences and actuarial gains/losses, but I'm not totally sure about revaluation of non-current assets. I'll have to think this through carefully.
JO
Joanna
1 year ago
I think I saw a question like this before in practice—access points are definitely about connectivity, right?
RO
Rosio
1 year ago
Ha! Option D is my pick. Using the company tablet for social media? That's just asking for trouble. IT is going to have a field day with that one.
DE
Derrick
1 year ago
Yeah, any unauthorized use of technology can create problems for the company.
LA
Lai
1 year ago
I think option A is also a good example of shadow IT. Using unauthorized tools can cause security risks.
GL
Glen
1 year ago
I agree, using company devices for personal use is a big no-no.
KI
Kiley
1 year ago
That's definitely a risky move. IT is not going to be happy about that.
BR
Brittni
1 year ago
It's important to follow IT policies to protect company data.
LA
Lawrence
1 year ago
Definitely, it can open up security vulnerabilities.
RE
Reuben
1 year ago
I agree, using company resources for personal use is risky.
AN
Anglea
1 year ago
Definitely A. Using an unauthorized tool for business work is a big no-no. The IT department needs to know what's going on to keep things secure.
JO
Josphine
1 year ago
Shadow IT can create vulnerabilities that IT may not be able to protect against.
MI
Micaela
1 year ago
It's important for IT to be aware of all the tools being used in the company.
MA
Margart
1 year ago
I agree, using unauthorized tools can pose a security risk.
OL
Olene
1 year ago
I'm going with A as well. If IT doesn't know about the tool, it's definitely shadow IT. Trying to sneak around the system is a big no-no.
JU
Jutta
1 year ago
Shadow IT can cause security risks and compliance issues.
MA
Marylin
1 year ago
Definitely, it's important to follow company policies.
KA
Kaycee
1 year ago
I agree, using a tool without IT approval is risky.
RA
Rachael
1 year ago
Option A sounds like a clear case of shadow IT. Using an unapproved cloud tool for work without IT's knowledge is a textbook example.
ME
Mendy
2 years ago
I'm not sure, but I think C) An employee using personal email to communicate with clients without approval from IT could also be considered shadow IT.
LO
Lorrine
2 years ago
I agree with Nichelle, that definitely sounds like shadow IT.
NI
Nichelle
2 years ago
I think the answer is A) An employee using a cloud based order management tool without approval from IT.