Isaca Updated CISA Exam Questions and Answers by reeva

The primary concern is lack of problem management. Recurring processing errors indicate that incidents may be getting handled repeatedly without identifying and eliminating the underlying root cause. ISACA guidance ties problem management to root cause analysis and distinguishes it from incident management, which is primarily focused on restoring service quickly.

Option B is correct because repeated errors usually mean the organization is not effectively analyzing and resolving the underlying cause. ISACA explicitly notes that root cause analysis is essential for both incident and problem-related processes, particularly DSS02 Manage service requests and incidents and DSS03 Manage problems. Repeated issues are a classic sign that problem management is weak or absent.

Option A is not the best answer because incident management is about handling and restoring service for individual events. Even efficient incident response can coexist with recurring incidents if root causes are not addressed. That points more directly to weak problem management than to incident handling alone.

Option C could be relevant if the errors stem from poorly controlled changes, but the question does not mention recent changes. The strongest direct inference from recurring errors is failure to resolve the root cause, which is the purpose of problem management.

Option D is the weakest answer because project management is not the most direct operational control area implicated by recurring production processing errors.

Therefore, B is the best answer because recurring processing errors most strongly suggest that underlying root causes are not being identified and eliminated through effective problem management.

References (Official ISACA):

ISACA, Root Cause Analysis — root cause analysis is used in DSS02 Manage service requests and incidents and DSS03 Manage problems.

ISACA, Issue Management Confidential: Tools and Best Practices for Improving IT Issue Management — issue management prioritizes and resolves issues based on impact and likelihood.

ISACA, A Fresh Look at Modern Auditing — repeated cyber/operational issues can indicate missing accountability and issue tracking.

The correct answer is B. Multiple overwriting.

When storage media will be reused, the goal is to remove sensitive data while keeping the media physically usable. Multiple overwriting writes new patterns of data over existing data so the previous sensitive information is no longer practically recoverable. ISACA describes overwriting as placing an additional layer of information over existing material, with the purpose of protecting the information while not damaging the hard drive itself.

Option A is not correct because cross-cut shredding physically destroys the media. It may be appropriate when media will be disposed of, but not when the storage device must be reused. Option C is not correct because repartitioning changes the disk structure but does not securely erase the underlying data. Option D is not correct because reformatting may remove file system references but often does not securely eliminate recoverable data.

A useful CISA exam point is this:

For reuse, choose logical sanitization such as overwriting.

For disposal, choose physical destruction, degaussing, or shredding depending on the media type and sensitivity.

ISACA notes that common digital data destruction methods include overwriting, degaussing, and physical destruction. Since degaussing and physical destruction generally make media unsuitable for normal reuse, overwriting is the best answer in this question.

 Configuring each authentication server as belonging to a cluster of authentication servers is the best way to minimize performance degradation of servers used to authenticate users of an e- commerce website. A cluster is a group of servers that work together to provide high availability, load balancing, and fault tolerance. If one server fails or becomes overloaded, another server in the cluster can take over its workload without disrupting the service. A single server as a primary authentication server and a second server as a secondary authentication server is not as effective as a cluster, because the secondary server is only used when the primary server fails, which means it is idle most of the time and does not improve performance. Configuring each authentication server and ensuring that each disk of its RAID is attached to the primary controller does not address the issue of performance degradation, but rather the issue of data redundancy and reliability. RAID (redundant array of independent disks) is a technology that combines multiple disks into a logical unit that can tolerate disk failures and improve data access speed. Configuring each authentication server and ensuring that the disks of each server form part of a duplex does not address the issue of performance degradation, but rather the issue of data backup and recovery. A duplex is a pair of disks that store identical copies of data, so that if one disk fails, the other disk can be used to restore the data. References: ISACA CISA Review Manual 27th Edition, page 310