Exam CISA topic 1 question 706 discussion

Actual exam question from Isaca's CISA

Question #: 706
Topic #: 1

An externally facing system containing sensitive data is configured such that users have either read-only or administrator rights. Most users of the system have administrator access. Which of the following is the GREATEST risk associated with this situation?

A. Users can make unauthorized changes.
B. Users can export application logs.
C. Users can install open-licensed software.
D. Users can view sensitive data.

Show Suggested Answer

Suggested Answer: A 🗳️

by Vima234 at Sept. 2, 2024, 9:23 p.m.

Comments

Submit Cancel

9967be3

3 months, 3 weeks ago

Selected Answer: A

Unauthorized changes pose the greatest risk. Administrator rights allow users to modify configurations, access controls, and data.

upvoted 1 times

...

PurpleParrot

10 months, 2 weeks ago

Selected Answer: A

As per the question users have read only or admin access. so confidentiality is not a concern. option A is the correct answer.

upvoted 1 times

...

Vima234

11 months, 2 weeks ago

Selected Answer: D

When most users have administrator access, the risk of unauthorized access to sensitive data is heightened. This could lead to data breaches, privacy violations, and potential non-compliance with regulations, which could have severe legal and financial consequences for the organization. While unauthorized changes (Option A) are a significant risk, the focus on "sensitive data" in the question indicates that the exposure or unauthorized viewing of this data is the most critical concern.

upvoted 1 times

...