Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CISA Exam - Topic 6 Question 86 Discussion

Which of the following is the MOST efficient control to reduce the risk associated with a systems administrator having network administrator responsibilities?
A) The administrator must obtain temporary access to make critical changes.
B) The administrator will need to request additional approval for critical changes.
C) The administrator must sign a due diligence agreement.
D) The administrator will be subject to unannounced audits.

Isaca CISA Exam - Topic 6 Question 86 Discussion

Actual exam question for Isaca's CISA exam
Question #: 86
Topic #: 6
[All CISA Questions]

Which of the following is the MOST efficient control to reduce the risk associated with a systems administrator having network administrator responsibilities?

Show Suggested Answer Hide Answer
Suggested Answer: A

Outsourcing the development of an e-banking solution when in-house technical expertise is not available can significantly reduce start-up costs.This is because the organization can avoid the expenses associated with hiring and training a full-time development team, purchasing necessary hardware and software, and maintaining the system1.While outsourcing can also potentially reduce the risk of system downtime, increase the ability to adapt the system, and provide direct oversight of risks, these benefits are not as immediate or guaranteed as the cost savings123.


by Samira at Sep 16, 2024, 07:10 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Hannah
7 months ago
I disagree, temporary access (A) could lead to mistakes under pressure.
upvoted 0 times
...
Tasia
8 months ago
I’m surprised they didn’t mention regular training for admins!
upvoted 0 times
...
Sheridan
8 months ago
A due diligence agreement (C) is just paperwork, not really effective.
upvoted 0 times
...
Candida
8 months ago
Unannounced audits (D) sound intense, but they could work!
upvoted 0 times
...
Harley
8 months ago
I think option B is the best choice. Extra approval is key.
upvoted 0 times
...
Odelia
9 months ago
Temporary access sounds risky to me; it could lead to mistakes. I think I might go with the unannounced audits, but I’m not completely confident.
upvoted 0 times
...
Mike
9 months ago
I feel like the due diligence agreement could help, but it seems more like a formality than a real control. I’m leaning towards the audits being more effective.
upvoted 0 times
...
Samira
9 months ago
I think requesting additional approval for critical changes might slow things down, but it could also add a layer of oversight. I’ve seen similar questions where approval processes were emphasized.
upvoted 0 times
...
France
9 months ago
I remember discussing how unannounced audits can be a strong deterrent for misuse of privileges, but I'm not entirely sure if that's the most efficient control.
upvoted 0 times
...
Denny
9 months ago
Ah, this is a good one. I'll need to weigh the pros and cons of each control to determine the most efficient approach.
upvoted 0 times
...
Fausto
9 months ago
Okay, let me consider the options. Temporary access, additional approval, due diligence, or unannounced audits. Gotta pick the most efficient one.
upvoted 0 times
...
Joanne
9 months ago
I've seen questions like this before. I think the key is to identify the most efficient control to mitigate the risk.
upvoted 0 times
...
Loren
9 months ago
Hmm, I'm a bit unsure about this. I'll need to review the concepts around separation of duties and access controls.
upvoted 0 times
...
Oren
9 months ago
This seems like a tricky one. I'll need to think through the different control options carefully.
upvoted 0 times
...
Ty
9 months ago
I practiced a similar question last week, and it was definitely about healthcare services, which points to A as the answer.
upvoted 0 times
...
Rebbecca
1 year ago
Definitely going with B. I don't want to have to beg for permission every time I need to reboot the server, but a little extra approval wouldn't hurt.
upvoted 0 times
Ozell
1 year ago
I see your point, but I still think B is the best option for balancing efficiency and risk management.
upvoted 0 times
...
Marget
1 year ago
I think D could also be useful to keep the administrator in check.
upvoted 0 times
...
Alecia
1 year ago
I agree, B seems like a good balance between efficiency and control.
upvoted 0 times
...
...
Margarita
1 year ago
Option C, the due diligence agreement, seems like a good compromise. It holds the administrator responsible without being too disruptive to their daily work.
upvoted 0 times
Jesusita
1 year ago
Maybe, but it would definitely ensure accountability.
upvoted 0 times
...
Isaiah
1 year ago
But wouldn't option D be too intrusive and disruptive?
upvoted 0 times
...
Hyman
1 year ago
I think option D, unannounced audits, would be the most efficient control.
upvoted 0 times
...
Rasheeda
1 year ago
I agree, option C does seem like a good compromise.
upvoted 0 times
...
...
Graham
1 year ago
Hmm, I'm not sure. Option D seems a bit too intrusive. I'd hate to have the IT team looking over my shoulder all the time. Maybe they could just install a hidden camera instead?
upvoted 0 times
...
Josefa
1 year ago
I think option B is the most efficient control. Requiring additional approval for critical changes creates a necessary layer of oversight and accountability.
upvoted 0 times
...
Lavelle
1 year ago
Why do you think option D is better?
upvoted 0 times
...
Katheryn
1 year ago
I disagree, I believe option D is the best choice.
upvoted 0 times
...
Lavelle
1 year ago
I think the most efficient control is option B.
upvoted 0 times
...

Save Cancel