CISA Practice Question: Information Systems Operations and Business Resilience
An IS auditor is reviewing the capacity management process for a server hosting a critical application. The server's CPU utilization has been consistently above 90% for the past three months, and memory usage is at 85%. There are no threshold alerts configured. The capacity plan shows that additional resources are scheduled to be added in six months. What should the auditor most recommend?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Request immediate addition of resources to meet current demand.
The high utilization indicates a need for immediate capacity expansion. The existing plan is too far in the future, risking performance degradation or outages. The auditor should recommend expediting the addition of resources.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Review the capacity plan and adjust the forecast.
Why it's wrong here
The plan needs revision, but the immediate risk requires prompt action.
- ✗
Accept the risk as the server has not failed yet.
Why it's wrong here
Accepting risk without mitigation is not advisable.
- ✓
Request immediate addition of resources to meet current demand.
Why this is correct
Given sustained high utilization, immediate action is needed.
- ✗
Implement threshold alerts to monitor the situation.
Why it's wrong here
Monitoring is good but does not address the lack of capacity.
Go deeper
Related to this question
About these practice questions
This CISA question is part of Courseiva's 995-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.