CISA Protection of Information Assets Practice Question
An IS auditor is reviewing logical access controls for a critical application. Which of the following is the MOST important control to detect unauthorized access?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Audit logging of access attempts
Audit logs of successful and failed access attempts provide the evidence needed to detect unauthorized access. Other controls prevent or limit access but do not detect it after the fact.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Strong password policy
Why it's wrong here
Strong passwords help prevent unauthorized access but do not detect it.
- ✓
Audit logging of access attempts
Why this is correct
Logs provide a record that can be reviewed to identify unauthorized access.
- ✗
Monthly access recertification
Why it's wrong here
Recertification reviews access rights periodically but does not detect real-time unauthorized access.
- ✗
Role-based access control (RBAC)
Why it's wrong here
RBAC limits access but does not detect unauthorized access.
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.