Discuss Isaca CISA Exam Topic 3 Question 25

An organization processing high volumes of financial transactions has implemented log file analysis on a central log server to continuously monitor compliance with its fraud policy. Which of the following poses the GREATEST risk to this control?

AIT operations staff have the right to restart the log server.

BData entry staff have privileged access to the log server.

CIT operations staff are able to stop the payment processing system.

DSoftware developers have read access to the log server.

Suggested Answer: B

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Eve 11 months ago

Not sure about this. Aren't all options risky in their own way?

Lisbeth 12 months ago

I think B is the worst too. Data entry staff shouldn't have that kind of access.

Hoa 12 months ago

A little surprised that D isn't seen as a bigger threat. Developers can mess things up!

Rhea 12 months ago

I disagree, C seems riskier. Stopping payments could cause major issues.

Theola 1 year ago

B is definitely the biggest risk. Privileged access is no joke.

Jennifer 1 year ago

This question reminds me of a practice one where we talked about access controls. I think stopping the payment system could be a big issue, so maybe C is the answer?

Christiane 1 year ago

I'm not entirely sure, but I feel like allowing IT operations to restart the log server might create vulnerabilities too.

Valentin 1 year ago

I remember we discussed how privileged access can lead to manipulation of logs, so I think option B could be a major risk.

Kimbery 1 year ago

I thought developers having read access was a concern, but I can't recall if it was the greatest risk. I guess it could be D, but I'm not confident.

Carlee 1 year ago

Hmm, I'm a bit unsure about this. I'll need to review my notes on agile approaches and how they differ from traditional project management.

Fredric 1 year ago

This looks like a classic OSPF adjacency question. I'll carefully review the packet exchange and OSPF states to determine the current adjacency state.

Ollie 1 year ago

This seems like a straightforward question. I think option B is the way to go - writing the file to the /workspace directory and reading it back in the subsequent build step.

Remona 1 year ago

I'm pretty sure this is about the financial aspects of self-funded healthcare plans. Option C looks promising - without an insurer, they'd avoid paying those extra risk charges.

Isaca CISA Exam - Topic 3 Question 25 Discussion