CISA Practice Question: Information Systems Operations and Business Resilience
An IS auditor is evaluating the capacity management process. The auditor notices that CPU utilization has been consistently above 90% for the past three months. The IT manager states that no proactive capacity planning has been performed. What is the primary risk?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Potential service degradation or unplanned outages.
Consistently high utilization without planning risks performance degradation and outages. The organization may not be able to handle peak loads.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Potential service degradation or unplanned outages.
Why this is correct
High utilization can lead to slowdowns and crashes.
- ✗
Increased licensing costs for software.
Why it's wrong here
Licensing costs are not directly tied to CPU utilization.
- ✗
Inability to meet backup windows.
Why it's wrong here
Backup windows are related to job scheduling, not directly to CPU utilization.
- ✗
Increased energy costs for cooling.
Why it's wrong here
While true, it is not the primary risk.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISA question from scratch — 995 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.