easyMultiple ChoiceObjective-mapped
CISA Practice Question: During user acceptance testing, a user with the…
Exhibit
Refer to the exhibit.
```
{
"UserName": "jdoe",
"Role": "User",
"Permissions": [
{"Resource": "/finance/reports", "Access": "ReadOnly"},
{"Resource": "/finance/transfers", "Access": "ReadOnly"}
]
}
```During user acceptance testing, a user with the above permission set cannot execute a fund transfer. What is the MOST likely reason?
⚠ Common exam trap
Candidates often confuse authentication (username/password) with authorization (permissions), assuming any failure to execute a function must be a network or database issue, rather than recognizing that the user is already authenticated and the problem is a missing Write permission for the specific transaction.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Missing Write permission for transfers
The user can authenticate and access the system (since they are in user acceptance testing with the given permission set), but cannot execute a fund transfer. This indicates that the user lacks the necessary Write permission for the transfer operation, which is required to modify the database record or initiate the transaction. Without Write access, the application can read data but cannot commit the transfer, causing the operation to fail.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Incorrect username
Why it's wrong here
The username is part of the policy and matches the user; this is not the issue.
- ✓
Missing Write permission for transfers
Why this is correct
The policy grants ReadOnly on transfers, which is insufficient to execute a transfer.
- ✗
Network connectivity issue
Why it's wrong here
Network issues would likely affect multiple operations, not just transfers.
- ✗
Database connection error
Why it's wrong here
No database error is indicated in the exhibit, and permission issue is more specific.
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.