IT Operations Management CISA Practice Questions (Page 8)

Questions 36–38

1. 36foundation · easy

   Which of the following is a key consideration when determining log retention periods?

   • AThe number of users in the organization
   • BThe color of the log files
   • CRegulatory and compliance requirements
   • DThe brand of the logging software
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A company's IT operations team is responsible for monitoring system logs. They currently collect logs from all servers and store them for 30 days. The security team has requested that logs be retained for one year to support forensic investigations. The operations team is concerned about the storage cost and the effort required to manage the additional data. Which approach BEST balances the need for forensic data with operational constraints?

   • AStore logs in a compressed format on the same servers to reduce cost.
   • BRetain all logs for one year in a low-cost storage tier, and implement automated analysis to identify security events.
   • CRetain only security-related logs for one year and delete all other logs after 30 days.
   • DKeep the current 30-day retention and rely on the security team to request logs before they are deleted.
   Reveal Solution Discussion Select an answer first
3. 38application · medium

   An organization's IT department has an SLA with the business that guarantees 99.9% availability for the customer relationship management (CRM) system. Over the past quarter, the system was unavailable for a total of 9 hours. The IS auditor is reviewing SLA performance. What should the auditor conclude?

   • AThe SLA was not met because 99.9% availability allows only about 1.3 hours of downtime per quarter.
   • BThe SLA was met because the system was available 99% of the time.
   • CThe SLA was met because 9 hours is within the allowed downtime for a quarter.
   • DThe SLA cannot be evaluated without knowing the number of users affected.
   Reveal Solution Discussion Select an answer first