CISA Domain 4 Questions & Answers
100% Correct!!
Management - ANSWERPlans, builds, runs and monitors activities in alignment with
the direction set by the governance body to achieve the enterprise objectives. Is the
responsibility of the executive management, under the leadership of the CEO
IS Management - ANSWEREnsuring that adequate resources are allocated to suport
IS operations
Planning to ensure the most efficient and effective use of an operation's resources
Authorizing and monitoring IT resource usage based on corporate policy
Monitoring operations to ensure compliance with standards
IS Operations - ANSWEREnsuring that detailed schedules exist for each operating
shift
Reviewing and authorizing changes to the operations schedules
Reviewing and authorizing changes to the network, system and applications
Ensuring that changes to hardware and software do not cause undue disruption to
normal processing
Monitoring system performance and resource usage to optimize computer resource
utilization
Monitoring service level agreements to ensure the delivery of quality IT services that
meet business needs
Anticipating equipment replacement/capacity to maximize current job throughput and
strategically plan future acquisitions
Maintaining job accounting reports and other audit records
Reviewing logs from all IT systems to detect critical system events and establish
accountability of IS operations
Ensuring that all problems and incidents are handled in a timely manner
Ensuring that IS processing can recover in a timely manner from minor and major
disruptions of operations
Information Security - ANSWEREnsuring the confidentiality, integrity and availability
of the data
Monitoring the environment and the secuirty of the facility to maintain proper
conditions for equipment performance
Ensuring that security vulnerabilities are identified and resolved in a timely manner
Ensuring that security patches are identified and installed in a timely manner
Detecting intrusion attempts
Resolving information secuirty events, incidents and problems in a timely manner
Limiting logical and physical access to computer resources to those who require and
are authorized to use it
IT Service Management (ITSM) - ANSWERThe implementation and management of
IT services (people, process and information technology) to meet business needs.
ITIL and ISO 20000 are frameworks for ITSM.
, ITIL - ANSWERITSM framework. Reference body of knowledge for service delivery
good practices.
ITSM - IT services support - ANSWERHelp Desk
Incident management
Problem management
Configuration management
Change management
Release management
ITSM - IT Service Delivery - ANSWERService-level management
IT financial management
Capacity management
IT service continuity management
Availability management
Service Level Agreement (SLA) - ANSWERDetails the services to be provided.
Completely defines the nature, type, time and other relevant information for the
services being offered. If the services provided do not meet the SLA, the IT
organization or service provider has to improve the services.
Change Management - ANSWERcost-benefit and feasibility studies should be
reviewed before the changes are accepted and approved.
Delta Release - ANSWERPartial release of updated program/software. Contains
only those items that have undergone changes since the last release.
Service level management - ANSWERProcess of defining, agreeing upon,
documenting and managing levels of service that are required and cost justified. It
includes the production and maintenance of the service catalog, service review
meetings and service improvement plans (SIPs) for areas that are not achieving their
SLAs.
Exception Reports - ANSWERAutomated reports that identify all applications that did
not successfully complete or otherwise malfunctioned. An excessive number of
exceptions may indicate: poor understanding of business requirements, poor
application design, development or testing, inadequate operations instructions and
support, inadequate sequencing of tasks, inadequate system configuration. Way to
monitor the efficiency and effectiveness of services provided by IT personnel. Is the
first step in Problem Management
System and application logs - ANSWERLogs generated from various system and
applications should be reviewed to identify all application problems. Way to monitor
the efficiency and effectiveness of services provided by IT personnel.
Operator problem reports - ANSWERManual reports are used by operators to log
computer operations problems and their resolutions. Way to monitor the efficiency
and effectiveness of services provided by IT personnel.
100% Correct!!
Management - ANSWERPlans, builds, runs and monitors activities in alignment with
the direction set by the governance body to achieve the enterprise objectives. Is the
responsibility of the executive management, under the leadership of the CEO
IS Management - ANSWEREnsuring that adequate resources are allocated to suport
IS operations
Planning to ensure the most efficient and effective use of an operation's resources
Authorizing and monitoring IT resource usage based on corporate policy
Monitoring operations to ensure compliance with standards
IS Operations - ANSWEREnsuring that detailed schedules exist for each operating
shift
Reviewing and authorizing changes to the operations schedules
Reviewing and authorizing changes to the network, system and applications
Ensuring that changes to hardware and software do not cause undue disruption to
normal processing
Monitoring system performance and resource usage to optimize computer resource
utilization
Monitoring service level agreements to ensure the delivery of quality IT services that
meet business needs
Anticipating equipment replacement/capacity to maximize current job throughput and
strategically plan future acquisitions
Maintaining job accounting reports and other audit records
Reviewing logs from all IT systems to detect critical system events and establish
accountability of IS operations
Ensuring that all problems and incidents are handled in a timely manner
Ensuring that IS processing can recover in a timely manner from minor and major
disruptions of operations
Information Security - ANSWEREnsuring the confidentiality, integrity and availability
of the data
Monitoring the environment and the secuirty of the facility to maintain proper
conditions for equipment performance
Ensuring that security vulnerabilities are identified and resolved in a timely manner
Ensuring that security patches are identified and installed in a timely manner
Detecting intrusion attempts
Resolving information secuirty events, incidents and problems in a timely manner
Limiting logical and physical access to computer resources to those who require and
are authorized to use it
IT Service Management (ITSM) - ANSWERThe implementation and management of
IT services (people, process and information technology) to meet business needs.
ITIL and ISO 20000 are frameworks for ITSM.
, ITIL - ANSWERITSM framework. Reference body of knowledge for service delivery
good practices.
ITSM - IT services support - ANSWERHelp Desk
Incident management
Problem management
Configuration management
Change management
Release management
ITSM - IT Service Delivery - ANSWERService-level management
IT financial management
Capacity management
IT service continuity management
Availability management
Service Level Agreement (SLA) - ANSWERDetails the services to be provided.
Completely defines the nature, type, time and other relevant information for the
services being offered. If the services provided do not meet the SLA, the IT
organization or service provider has to improve the services.
Change Management - ANSWERcost-benefit and feasibility studies should be
reviewed before the changes are accepted and approved.
Delta Release - ANSWERPartial release of updated program/software. Contains
only those items that have undergone changes since the last release.
Service level management - ANSWERProcess of defining, agreeing upon,
documenting and managing levels of service that are required and cost justified. It
includes the production and maintenance of the service catalog, service review
meetings and service improvement plans (SIPs) for areas that are not achieving their
SLAs.
Exception Reports - ANSWERAutomated reports that identify all applications that did
not successfully complete or otherwise malfunctioned. An excessive number of
exceptions may indicate: poor understanding of business requirements, poor
application design, development or testing, inadequate operations instructions and
support, inadequate sequencing of tasks, inadequate system configuration. Way to
monitor the efficiency and effectiveness of services provided by IT personnel. Is the
first step in Problem Management
System and application logs - ANSWERLogs generated from various system and
applications should be reviewed to identify all application problems. Way to monitor
the efficiency and effectiveness of services provided by IT personnel.
Operator problem reports - ANSWERManual reports are used by operators to log
computer operations problems and their resolutions. Way to monitor the efficiency
and effectiveness of services provided by IT personnel.
