Certified Information Systems Auditor CISA · Free Practice Question Easy
Question 74
You are auditing HDA Inc. as an information system auditor, and your task is to verify that an application's audit trail fulfills specific requirements. What should be your foremost consideration in this evaluation?
- A A. Captures all user activities in the application.
- B B. Retains audit logs for a specified period of time.
- C C. Provides real-time monitoring of security events.
- D D. Does not slow down operational processes.
Reveal correct answer
Correct answer: D
Explanation
Correct Answer: D. Does not slow down operational processes. Explanation: When evaluating an application's audit trail, an IS auditor should prioritize the requirement that it does not slow down operational processes. While capturing all user activities (Option A), retaining audit logs (Option B), and providing real-time monitoring of security events (Option C) are important considerations, they should not come at the expense of system performance and operational efficiency. An audit trail is a crucial component of an application's security controls, as it helps track and trace user activities and system events. However, it should be designed and implemented in a way that does not hinder the normal functioning of the application or introduce unnecessary delays or disruptions to operational processes. Slowing down operational processes can negatively impact user productivity, system availability, and overall business operations. Therefore, it is essential for the IS auditor to ensure that the application's audit trail is implemented in a manner that strikes a balance between effective monitoring and system performance, ensuring that operational processes can continue efficiently and without undue hindrance. Hence, the primary consideration for an IS auditor regarding an application's audit trail is that it does not slow down operational processes.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
