IT Operations Management CISA Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company's IT service desk receives multiple reports of a specific application error after a recent change to the network configuration. The service desk has been resetting user sessions to temporarily resolve the issue, but the error keeps occurring. The IS auditor is reviewing the incident and problem management processes. What is the MOST appropriate action?

   • AOpen a problem record to investigate the root cause, linking it to the related incidents and the recent change.
   • BRoll back the network change immediately without further analysis.
   • CContinue resetting user sessions until the error stops occurring.
   • DClose the incidents as resolved because users are able to work after the reset.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is an example of a facility component in an organization's IT infrastructure?

   • AUninterruptible power supply (UPS)
   • BOperating system
   • CNetwork switch
   • DDatabase management system (DBMS)
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company's security operations center (SOC) reviews firewall logs weekly. During an audit, the IS auditor notes that a security incident was detected only after a customer complained about unauthorized access to their account. The SOC had not reviewed the logs from the relevant period. Which improvement should the auditor recommend?

   • AIncrease the log retention period to one year.
   • BReduce the number of logs collected to simplify review.
   • CImplement real-time log monitoring and alerting for critical security events.
   • DRequire the SOC to document all log reviews in a spreadsheet.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary difference between an incident and a problem?

   • AAn incident is a security breach, while a problem is a performance issue
   • BAn incident is always caused by a problem, and a problem is always caused by an incident
   • CAn incident is a planned change, while a problem is an unplanned change
   • DAn incident is an unplanned interruption, while a problem is the underlying cause of one or more incidents
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary objective of problem management?

   • ATo restore service as quickly as possible after an outage
   • BTo identify and eliminate the root cause of incidents to prevent recurrence
   • CTo approve all changes to the IT environment
   • DTo monitor system performance metrics
   Reveal Solution Discussion Select an answer first