easyMultiple ChoiceObjective-mapped
CRISC Practice Question: A company has implemented a new control to detect…
A company has implemented a new control to detect unauthorized access attempts. What is the PRIMARY purpose of monitoring this control?
⚠ Common exam trap
Candidates often confuse the purpose of monitoring a control (verifying its effectiveness) with the purpose of the control itself (detecting or preventing incidents), leading candidates to choose a benefit like audit evidence or risk calculation instead.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To confirm the control is working effectively.
The primary purpose of monitoring a detective control, such as one that detects unauthorized access attempts, is to confirm that the control is operating effectively as designed. Monitoring provides ongoing assurance that the control is correctly identifying and logging unauthorized access events, which is essential for maintaining the security posture and for timely incident response.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To provide evidence for regulatory audits.
Why it's wrong here
Documentation is a byproduct, not primary purpose.
- ✗
To reduce the number of unauthorized access attempts.
Why it's wrong here
Monitoring does not directly reduce attempts.
- ✓
To confirm the control is working effectively.
Why this is correct
Ensures the control functions as designed.
- ✗
To calculate the residual risk level.
Why it's wrong here
Risk calculation uses monitoring data but is not the primary purpose.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.