easyMultiple ChoiceObjective-mapped
CRISC Practice Question: A financial institution monitors the number of…
A financial institution monitors the number of unauthorized access attempts to its core banking system. The risk owner recommends increasing the monitoring frequency from daily to hourly because a recent attack exploited a delayed detection. Which of the following is the PRIMARY benefit of this change?
⚠ Common exam trap
Watch out — candidates often confuse 'increased monitoring frequency' with 'improved system performance' or 'reduced false positives,' when in reality the primary benefit is always faster detection of anomalies, not cost savings or performance gains.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Faster detection of anomalies
Increasing monitoring frequency from daily to hourly reduces the time between an unauthorized access attempt and its detection. This faster detection enables the security team to respond more quickly to anomalies, minimizing the potential impact of an attack that exploits delayed detection, such as a brute-force or credential-stuffing campaign.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Faster detection of anomalies
Why this is correct
Hourly monitoring detects anomalies sooner than daily, reducing the attack window.
- ✗
Lower cost of monitoring
Why it's wrong here
Increased frequency typically raises costs (e.g., more storage, processing).
- ✗
Increased system performance
Why it's wrong here
More frequent monitoring may degrade performance due to higher resource usage.
- ✗
Reduced false positive rate
Why it's wrong here
Increasing frequency often increases false positives, not reduces.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.