mediumMultiple ChoiceObjective-mapped
CRISC Practice Question: A manufacturing company uses Internet of Things…
A manufacturing company uses Internet of Things (IoT) sensors to monitor equipment temperature and vibration on the production floor. The sensor data is automatically sent to a central system, but there is a manual log maintained by operators that records their visual inspections. Recently, there have been instances where the sensor data indicated abnormal readings, but the operator logs showed normal conditions, leading to delayed maintenance actions and two equipment breakdowns. The risk manager investigates and finds that operators sometimes forget to update logs or misinterpret sensor alerts. The company wants to improve the reliability of the monitoring process. What should be the primary action?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement automated reconciliation between sensor data and operator logs, flagging discrepancies in real time.
Automated reconciliation between sensor data and operator logs would highlight discrepancies immediately, allowing quick investigation. Reducing reliance on IoT sensors (A) would eliminate the benefits of automated alerts and is a step backward. Replacing all sensors (B) is costly and does not address the human error in log keeping. Training operators (C) may help but alone it does not guarantee consistent compliance and still leaves room for human error.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Reduce reliance on IoT sensors and increase manual inspections.
Why it's wrong here
This would reduce automation benefits and increase human error risk.
- ✗
Replace all IoT sensors with newer models that have better accuracy.
Why it's wrong here
Sensor accuracy is not the issue; the discrepancy is due to manual logs.
- ✗
Provide additional training to operators on how to accurately fill in logs and respond to sensor alerts.
Why it's wrong here
Training helps but does not eliminate human error or detect when logs are missed.
- ✓
Implement automated reconciliation between sensor data and operator logs, flagging discrepancies in real time.
Why this is correct
Directly addresses the inconsistency and enables timely corrective action.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on CRISC
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A retail company uses a manual control to verify that all credit card transactions are processed by authorized payment terminals. The control requires a store manager to compare a daily transaction log against a list of approved terminal IDs. The company processes an average of 10,000 transactions per day across 200 stores. During a recent internal audit, it was found that 15% of stores had not completed the reconciliation for the past month. The audit also revealed that several unauthorized terminals had been used to process transactions, resulting in a data breach of customer payment information. The company's risk appetite for payment card data security is very low. The current monitoring approach includes a quarterly review of control performance by the internal audit team. The risk manager needs to recommend improvements to the monitoring of this control. Which of the following is the BEST recommendation?
medium- A.Increase internal audit reviews of the control to monthly.
- B.Implement disciplinary actions for store managers who skip reconciliations.
- ✓ C.Automate the reconciliation by integrating the transaction log with the approved terminal list.
- D.Provide refresher training to all store managers on the procedure.
Why C: Automating the reconciliation process ensures it is performed consistently and promptly, eliminating the manual gaps. Option A is wrong because increasing audit frequency does not prevent the control from being skipped. Option B is wrong because disciplinary actions may motivate compliance but do not address the process inefficiency. Option D is wrong because additional training may help but does not guarantee consistent performance.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.