Isaca Exam CISA Topic 1 Question 78 Discussion

Actual exam question for Isaca's CISA exam

Question #: 78
Topic #: 1

[All CISA Questions]

Which of the following is an example of shadow IT?

AAn employee using a cloud based order management tool without approval from IT

BAn employee using a company provided laptop to access personal banking information

CAn employee using personal email to communicate with clients without approval from IT

DAn employee using a company-provided tablet to access social media during work hours

Show Suggested Answer

Suggested Answer: C

by Alberto at May 29, 2024, 09:03 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rosio

1 months ago

Ha! Option D is my pick. Using the company tablet for social media? That's just asking for trouble. IT is going to have a field day with that one.

upvoted 0 times

Kiley

4 days ago

That's definitely a risky move. IT is not going to be happy about that.

upvoted 0 times

...

Brittni

7 days ago

It's important to follow IT policies to protect company data.

upvoted 0 times

...

Lawrence

9 days ago

Definitely, it can open up security vulnerabilities.

upvoted 0 times

...

Reuben

14 days ago

I agree, using company resources for personal use is risky.

upvoted 0 times

...

Anglea

2 months ago

Definitely A. Using an unauthorized tool for business work is a big no-no. The IT department needs to know what's going on to keep things secure.

upvoted 0 times

Josphine

5 days ago

Shadow IT can create vulnerabilities that IT may not be able to protect against.

upvoted 0 times

...

Micaela

18 days ago

It's important for IT to be aware of all the tools being used in the company.

upvoted 0 times

...

Margart

22 days ago

I agree, using unauthorized tools can pose a security risk.

upvoted 0 times

...

Olene

2 months ago

I'm going with A as well. If IT doesn't know about the tool, it's definitely shadow IT. Trying to sneak around the system is a big no-no.

upvoted 0 times

Jutta

12 days ago

Shadow IT can cause security risks and compliance issues.

upvoted 0 times

...

Marylin

17 days ago

Definitely, it's important to follow company policies.

upvoted 0 times

...

Kaycee

1 months ago

I agree, using a tool without IT approval is risky.

upvoted 0 times

...

Rachael

2 months ago

Option A sounds like a clear case of shadow IT. Using an unapproved cloud tool for work without IT's knowledge is a textbook example.

upvoted 0 times

...

Mendy

3 months ago

I'm not sure, but I think C) An employee using personal email to communicate with clients without approval from IT could also be considered shadow IT.

upvoted 0 times

...

Lorrine

3 months ago

I agree with Nichelle, that definitely sounds like shadow IT.

upvoted 0 times

...

Nichelle

3 months ago

I think the answer is A) An employee using a cloud based order management tool without approval from IT.

upvoted 0 times

...