CISA Protection of Information Assets Practice Question
An IS auditor is reviewing the logical access controls for a critical financial application. Which of the following is the MOST important control to ensure that user access rights remain appropriate over time?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Conducting periodic access recertification
Periodic access recertification ensures that users' access rights are reviewed and confirmed by managers, reducing the risk of excessive or inappropriate access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Conducting periodic access recertification
Why this is correct
Access recertification is a key control to verify that users still need their assigned access.
- ✗
Implementing single sign-on (SSO)
Why it's wrong here
SSO improves user convenience but does not address the review of access rights.
- ✗
Enforcing password complexity rules
Why it's wrong here
Password complexity is important for authentication but does not ensure ongoing appropriateness of access rights.
- ✗
Using role-based access control (RBAC)
Why it's wrong here
RBAC helps structure access but does not replace the need for periodic recertification.
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.