Courseiva
← CISA
Full test
easyMultiple ChoiceObjective-mapped

CISA Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.

Exhibit:
```
[ROUTER1] show version
Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 15.1(4)M6, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 27-Aug-13 23:32 by prod_rel_team
ROM: System Bootstrap, Version 15.0(1r)M14, RELEASE SOFTWARE (fc1)

Router uptime is 2 years, 3 months, 1 week, 4 days
System returned to ROM by power-on
System image file is "flash:c880data-universalk9-mz.151-4.M6.bin"
```

Refer to the exhibit. The IS auditor reviews the router's version output during an audit. What is the MOST significant finding?

⚠ Common exam trap

The trap here is that candidates focus on operational details like uptime or boot process (options A and B) instead of recognizing that an outdated IOS version is a direct security risk, which is the most significant finding in an audit context.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The IOS version is outdated and may contain security vulnerabilities.

The most significant finding is that the IOS version is outdated and may contain security vulnerabilities. An outdated IOS version can have known exploits that compromise the router's security, which is a critical risk for the organization. While other options describe operational states, they do not present the same level of immediate security threat as running unsupported or vulnerable firmware.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    The router was returned to ROM by power-on.

    Why it's wrong here

    Normal startup.

  • ✗

    The router has been running for over two years without a reboot.

    Why it's wrong here

    Long uptime may indicate stability but is not a major issue.

  • ✗

    The system image is stored in flash memory.

    Why it's wrong here

    This is standard.

  • ✓

    The IOS version is outdated and may contain security vulnerabilities.

    Why this is correct

    Outdated software is a critical finding.

About these practice questions

Courseiva writes every CISA question from scratch — 995 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.