Isaca CISA Exam - Topic 6 Question 86 Discussion

Actual exam question for Isaca's CISA exam

Question #: 86
Topic #: 6

[All CISA Questions]

Which of the following is the MOST efficient control to reduce the risk associated with a systems administrator having network administrator responsibilities?

AThe administrator must obtain temporary access to make critical changes.

BThe administrator will need to request additional approval for critical changes.

CThe administrator must sign a due diligence agreement.

DThe administrator will be subject to unannounced audits.

Show Suggested Answer

Suggested Answer: A

Outsourcing the development of an e-banking solution when in-house technical expertise is not available can significantly reduce start-up costs.This is because the organization can avoid the expenses associated with hiring and training a full-time development team, purchasing necessary hardware and software, and maintaining the system1.While outsourcing can also potentially reduce the risk of system downtime, increase the ability to adapt the system, and provide direct oversight of risks, these benefits are not as immediate or guaranteed as the cost savings123.

by Samira at Sep 16, 2024, 07:10 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hannah

4 months ago

I disagree, temporary access (A) could lead to mistakes under pressure.

upvoted 0 times

...

Tasia

5 months ago

I’m surprised they didn’t mention regular training for admins!

upvoted 0 times

...

Sheridan

5 months ago

A due diligence agreement (C) is just paperwork, not really effective.

upvoted 0 times

...

Candida

5 months ago

Unannounced audits (D) sound intense, but they could work!

upvoted 0 times

...

Harley

5 months ago

I think option B is the best choice. Extra approval is key.

upvoted 0 times

...

Odelia

6 months ago

Temporary access sounds risky to me; it could lead to mistakes. I think I might go with the unannounced audits, but I’m not completely confident.

upvoted 0 times

...

Mike

6 months ago

I feel like the due diligence agreement could help, but it seems more like a formality than a real control. I’m leaning towards the audits being more effective.

upvoted 0 times

...

Samira

6 months ago

I think requesting additional approval for critical changes might slow things down, but it could also add a layer of oversight. I’ve seen similar questions where approval processes were emphasized.

upvoted 0 times

...

France

6 months ago

I remember discussing how unannounced audits can be a strong deterrent for misuse of privileges, but I'm not entirely sure if that's the most efficient control.

upvoted 0 times

...

Denny

6 months ago

Ah, this is a good one. I'll need to weigh the pros and cons of each control to determine the most efficient approach.

upvoted 0 times

...

Fausto

6 months ago

Okay, let me consider the options. Temporary access, additional approval, due diligence, or unannounced audits. Gotta pick the most efficient one.

upvoted 0 times

...

Joanne

6 months ago

I've seen questions like this before. I think the key is to identify the most efficient control to mitigate the risk.

upvoted 0 times

...

Loren

6 months ago

Hmm, I'm a bit unsure about this. I'll need to review the concepts around separation of duties and access controls.

upvoted 0 times

...

Oren

6 months ago

This seems like a tricky one. I'll need to think through the different control options carefully.

upvoted 0 times

...

Ty

6 months ago

I practiced a similar question last week, and it was definitely about healthcare services, which points to A as the answer.

upvoted 0 times

...

Rebbecca

11 months ago

Definitely going with B. I don't want to have to beg for permission every time I need to reboot the server, but a little extra approval wouldn't hurt.

upvoted 0 times

Ozell

10 months ago

I see your point, but I still think B is the best option for balancing efficiency and risk management.

upvoted 0 times

...

Marget

11 months ago

I think D could also be useful to keep the administrator in check.

upvoted 0 times

...

Alecia

11 months ago

I agree, B seems like a good balance between efficiency and control.

upvoted 0 times

...

Margarita

12 months ago

Option C, the due diligence agreement, seems like a good compromise. It holds the administrator responsible without being too disruptive to their daily work.

upvoted 0 times

Jesusita

10 months ago

Maybe, but it would definitely ensure accountability.

upvoted 0 times

...

Isaiah

10 months ago

But wouldn't option D be too intrusive and disruptive?

upvoted 0 times

...

Hyman

10 months ago

I think option D, unannounced audits, would be the most efficient control.

upvoted 0 times

...

Rasheeda

11 months ago

I agree, option C does seem like a good compromise.

upvoted 0 times

...

Graham

12 months ago

Hmm, I'm not sure. Option D seems a bit too intrusive. I'd hate to have the IT team looking over my shoulder all the time. Maybe they could just install a hidden camera instead?

upvoted 0 times

...

Josefa

12 months ago

I think option B is the most efficient control. Requiring additional approval for critical changes creates a necessary layer of oversight and accountability.

upvoted 0 times

...