What is the primary purpose of patch management?

To monitor network bandwidth usage

To track hardware assets throughout their lifecycle

To apply updates to software to fix vulnerabilities and improve functionality

What is the primary purpose of an IT asset management process?

To schedule automated jobs and batch processes

To define service level agreements with customers

To monitor network traffic for security incidents

To track and manage IT assets from acquisition to disposal

During an audit, the IS auditor finds that a department is using an old server that is no longer supported by the vendor. The server is still in production and contains sensitive data. The department manager says the server is 'still working fine' and they don't want to replace it. What is the auditor's PRIMARY recommendation?

Move the sensitive data to a network share on another server.

Develop a decommissioning plan and migrate the sensitive data to a supported platform.

Continue using the server but increase monitoring.

Require the department to sign a risk acceptance form.

What is the purpose of a change advisory board (CAB) in change management?

To manage the IT asset inventory

To review and approve changes to ensure they are properly assessed and planned

To monitor system logs for security incidents

To resolve incidents as quickly as possible

What is the primary purpose of operational log management?

To collect, retain, and analyze logs for security and operational insights

To store user passwords securely

Certified Information Systems Auditor

Domain 4Objective 1

IT Operations Management CISA Practice Questions (Page 2)

Part of the Information Systems Operations and Business Resilience domain, which accounts for 26% of the CISA exam.

38questions here

8free pages

11concepts

26%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of patch management?
Select an answer first
7foundation · easy
What is the primary purpose of an IT asset management process?
Select an answer first
8application · medium
During an audit, the IS auditor finds that a department is using an old server that is no longer supported by the vendor. The server is still in production and contains sensitive data. The department manager says the server is 'still working fine' and they don't want to replace it. What is the auditor's PRIMARY recommendation?
Select an answer first
9foundation · easy
What is the purpose of a change advisory board (CAB) in change management?
Select an answer first
10foundation · easy
What is the primary purpose of operational log management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.