Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Possible noncompliant activities that lead to data disclosure Continuous monitoring of access controls is crucial in detecting activities that may be noncompliant with organizational policies and could potentially lead to unauthorized access or disclosure of sensitive data. This kind of monitoring helps in identifying instances where access privileges may be misused or where there are attempts to access resources in violation of established security protocols. By detecting these activities in real-time or near real-time, organizations can respond quickly to mitigate the risks associated with data breaches or unauthorized data disclosure.
A. possible noncompliant activities that lead to data disclosure Continuous monitoring of access controls allows organizations to detect any unusual activity or violations in real time. It can spot unauthorized access or noncompliant activities that could potentially lead to data disclosure, hence preventing data breaches or any other types of unauthorized information access. Other options are beneficial aspects of a comprehensive security program, but they are not the primary benefits of monitoring access controls specifically.
Tricky question. Going with "A". I believe the keyword here "which option has the greatest impact if access controls failed !". Sensitive data disclosure would lead to significant impact more than other options. Option "D" makes sense but most of the organizations concerns about data leakage /disclosure.