Isaca Exam CISA Topic 6 Question 86 Discussion

Actual exam question for Isaca's CISA exam

Question #: 86
Topic #: 6

[All CISA Questions]

Which of the following is the MOST efficient control to reduce the risk associated with a systems administrator having network administrator responsibilities?

AThe administrator must obtain temporary access to make critical changes.

BThe administrator will need to request additional approval for critical changes.

CThe administrator must sign a due diligence agreement.

DThe administrator will be subject to unannounced audits.

Show Suggested Answer

Suggested Answer: A

Outsourcing the development of an e-banking solution when in-house technical expertise is not available can significantly reduce start-up costs.This is because the organization can avoid the expenses associated with hiring and training a full-time development team, purchasing necessary hardware and software, and maintaining the system1.While outsourcing can also potentially reduce the risk of system downtime, increase the ability to adapt the system, and provide direct oversight of risks, these benefits are not as immediate or guaranteed as the cost savings123.

by Samira at Sep 16, 2024, 07:10 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rebbecca

2 months ago

Definitely going with B. I don't want to have to beg for permission every time I need to reboot the server, but a little extra approval wouldn't hurt.

upvoted 0 times

Ozell

19 days ago

I see your point, but I still think B is the best option for balancing efficiency and risk management.

upvoted 0 times

...

Marget

23 days ago

I think D could also be useful to keep the administrator in check.

upvoted 0 times

...

Alecia

1 months ago

I agree, B seems like a good balance between efficiency and control.

upvoted 0 times

...

Margarita

2 months ago

Option C, the due diligence agreement, seems like a good compromise. It holds the administrator responsible without being too disruptive to their daily work.

upvoted 0 times

Jesusita

12 days ago

Maybe, but it would definitely ensure accountability.

upvoted 0 times

...

Isaiah

13 days ago

But wouldn't option D be too intrusive and disruptive?

upvoted 0 times

...

Hyman

15 days ago

I think option D, unannounced audits, would be the most efficient control.

upvoted 0 times

...

Rasheeda

24 days ago

I agree, option C does seem like a good compromise.

upvoted 0 times

...

Graham

2 months ago

Hmm, I'm not sure. Option D seems a bit too intrusive. I'd hate to have the IT team looking over my shoulder all the time. Maybe they could just install a hidden camera instead?

upvoted 0 times

...

Josefa

2 months ago

I think option B is the most efficient control. Requiring additional approval for critical changes creates a necessary layer of oversight and accountability.

upvoted 0 times

...