A company has a strict change management policy that requires all changes to be approved by a change advisory board (CAB) before implementation. During a critical security incident, the IT team applied an emergency patch to a production server without CAB approval to stop an active attack. The patch resolved the incident but was not documented. What is the BEST course of action for the IS auditor to recommend?

Discipline the IT team for violating the change management policy.

Roll back the patch to comply with the change management policy.

Retroactively document the emergency change and review it in the next CAB meeting.

Require all future changes to be approved by the CAB even during emergencies.

Which of the following is a key activity in service level management?

Installing operating systems on servers

Monitoring service performance against SLA targets

Which of the following is a key activity in availability management?

Assigning IP addresses to devices

Deleting old logs to save storage

Monitoring system uptime and planning for redundancy

What is the primary purpose of job scheduling in IT operations?

To manage user access to production systems

To track software licenses and compliance

To ensure automated processes run at the correct times and in the correct order

To monitor hardware performance metrics

Which of the following is a primary risk associated with shadow IT?

Improved change management compliance

Enhanced centralized monitoring

Lack of security controls and oversight

Certified Information Systems Auditor

Domain 4Objective 1

IT Operations Management CISA Practice Questions (Page 3)

Part of the Information Systems Operations and Business Resilience domain, which accounts for 26% of the CISA exam.

38questions here

8free pages

11concepts

26%of the exam

Questions 11–15

11expert · hard
A company has a strict change management policy that requires all changes to be approved by a change advisory board (CAB) before implementation. During a critical security incident, the IT team applied an emergency patch to a production server without CAB approval to stop an active attack. The patch resolved the incident but was not documented. What is the BEST course of action for the IS auditor to recommend?
Select an answer first
12foundation · easy
Which of the following is a key activity in service level management?
Select an answer first
13foundation · easy
Which of the following is a key activity in availability management?
Select an answer first
14foundation · easy
What is the primary purpose of job scheduling in IT operations?
Select an answer first
15foundation · easy
Which of the following is a primary risk associated with shadow IT?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.