hardMultiple ChoiceObjective-mapped
CRISC Practice Question: A financial institution is redesigning its…
A financial institution is redesigning its control monitoring program to comply with a new regulatory requirement that mandates near-real-time monitoring of high-risk transactions. The current system performs batch processing daily. Which approach BEST meets the requirement while minimizing operational impact?
⚠ Common exam trap
Watch out — candidates often assume any increase in frequency (Option D) or full automation (Option C) is sufficient, failing to recognize that near-real-time requires sub-minute latency and that targeted processing minimizes operational disruption.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement a real-time monitoring solution that only processes transactions flagged as high-risk based on predefined criteria.
It directly satisfies the near-real-time monitoring requirement by processing only high-risk transactions as they occur, using predefined criteria to minimize latency and operational overhead. This targeted approach avoids the cost and complexity of converting all transaction processing to real-time, while still meeting regulatory demands for immediate detection of high-risk activity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use manual reviews of high-risk transactions by compliance officers within 24 hours.
Why it's wrong here
Not near-real-time.
- ✓
Implement a real-time monitoring solution that only processes transactions flagged as high-risk based on predefined criteria.
Why this is correct
Targeted real-time monitoring meets requirement efficiently.
- ✗
Replace batch processing with a fully real-time system for all transactions.
Why it's wrong here
Overly complex and costly.
- ✗
Increase batch processing frequency from daily to hourly.
Why it's wrong here
Not real-time; regulatory may require near-real-time.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CRISC question from scratch — 983 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.