Discuss Isaca CISA Exam Topic 6 Question 86

Which of the following is the MOST efficient control to reduce the risk associated with a systems administrator having network administrator responsibilities?

AThe administrator must obtain temporary access to make critical changes.

BThe administrator will need to request additional approval for critical changes.

CThe administrator must sign a due diligence agreement.

DThe administrator will be subject to unannounced audits.

Suggested Answer: A

Outsourcing the development of an e-banking solution when in-house technical expertise is not available can significantly reduce start-up costs.This is because the organization can avoid the expenses associated with hiring and training a full-time development team, purchasing necessary hardware and software, and maintaining the system1.While outsourcing can also potentially reduce the risk of system downtime, increase the ability to adapt the system, and provide direct oversight of risks, these benefits are not as immediate or guaranteed as the cost savings123.

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

29 comments · newest first

Hannah 10 months ago

I disagree, temporary access (A) could lead to mistakes under pressure.

Tasia 11 months ago

I’m surprised they didn’t mention regular training for admins!

Sheridan 11 months ago

A due diligence agreement (C) is just paperwork, not really effective.

Candida 11 months ago

Unannounced audits (D) sound intense, but they could work!

Harley 11 months ago

I think option B is the best choice. Extra approval is key.

Odelia 12 months ago

Temporary access sounds risky to me; it could lead to mistakes. I think I might go with the unannounced audits, but I’m not completely confident.

Mike 12 months ago

I feel like the due diligence agreement could help, but it seems more like a formality than a real control. I’m leaning towards the audits being more effective.

Samira 12 months ago

I think requesting additional approval for critical changes might slow things down, but it could also add a layer of oversight. I’ve seen similar questions where approval processes were emphasized.

France 1 year ago

I remember discussing how unannounced audits can be a strong deterrent for misuse of privileges, but I'm not entirely sure if that's the most efficient control.

Denny 1 year ago

Ah, this is a good one. I'll need to weigh the pros and cons of each control to determine the most efficient approach.

Fausto 1 year ago

Okay, let me consider the options. Temporary access, additional approval, due diligence, or unannounced audits. Gotta pick the most efficient one.

Joanne 1 year ago

I've seen questions like this before. I think the key is to identify the most efficient control to mitigate the risk.

Loren 1 year ago

Hmm, I'm a bit unsure about this. I'll need to review the concepts around separation of duties and access controls.

Oren 1 year ago

This seems like a tricky one. I'll need to think through the different control options carefully.

Ty 1 year ago

I practiced a similar question last week, and it was definitely about healthcare services, which points to A as the answer.

Rebbecca 1 year ago

Definitely going with B. I don't want to have to beg for permission every time I need to reboot the server, but a little extra approval wouldn't hurt.

Ozell 1 year ago

↳ replying to Rebbecca

I see your point, but I still think B is the best option for balancing efficiency and risk management.

Marget 1 year ago

↳ replying to Rebbecca

I think D could also be useful to keep the administrator in check.

Alecia 1 year ago

↳ replying to Rebbecca

I agree, B seems like a good balance between efficiency and control.

Margarita 1 year ago

Option C, the due diligence agreement, seems like a good compromise. It holds the administrator responsible without being too disruptive to their daily work.

Jesusita 1 year ago

↳ replying to Margarita

Maybe, but it would definitely ensure accountability.

Isaiah 1 year ago

↳ replying to Margarita

But wouldn't option D be too intrusive and disruptive?

Hyman 1 year ago

↳ replying to Margarita

I think option D, unannounced audits, would be the most efficient control.

Rasheeda 1 year ago

↳ replying to Margarita

I agree, option C does seem like a good compromise.

Graham 1 year ago

Hmm, I'm not sure. Option D seems a bit too intrusive. I'd hate to have the IT team looking over my shoulder all the time. Maybe they could just install a hidden camera instead?

Josefa 1 year ago

I think option B is the most efficient control. Requiring additional approval for critical changes creates a necessary layer of oversight and accountability.

Lavelle 1 year ago

Why do you think option D is better?

Katheryn 2 years ago

I disagree, I believe option D is the best choice.

Lavelle 2 years ago

I think the most efficient control is option B.

Isaca CISA Exam - Topic 6 Question 86 Discussion