The answer is to implement automated reconciliation between sensor data and operator logs, flagging discrepancies in real time. This approach directly addresses the root cause of the monitoring failure by automating manual controls, which eliminates the reliance on human memory and interpretation. By continuously comparing automated sensor readings against manual log entries, the system instantly highlights mismatches—such as abnormal sensor data paired with a “normal” operator log—triggering immediate investigation before equipment damage occurs. On the CRISC exam, this scenario tests your understanding of control automation as a risk response technique, specifically how to strengthen detective controls by reducing human error in monitoring processes. A common trap is choosing additional training, but the exam emphasizes that training alone cannot overcome systemic forgetfulness or alert fatigue; automated reconciliation provides a technical, real-time safeguard. Memory tip: think “match or mismatch”—if the sensor and the log don’t agree, the system must flag it, not the operator.
CRISC Risk and Control Monitoring and Reporting Practice Question
This CRISC practice question tests your understanding of risk and control monitoring and reporting. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A manufacturing company uses Internet of Things (IoT) sensors to monitor equipment temperature and vibration on the production floor. The sensor data is automatically sent to a central system, but there is a manual log maintained by operators that records their visual inspections. Recently, there have been instances where the sensor data indicated abnormal readings, but the operator logs showed normal conditions, leading to delayed maintenance actions and two equipment breakdowns. The risk manager investigates and finds that operators sometimes forget to update logs or misinterpret sensor alerts. The company wants to improve the reliability of the monitoring process. What should be the primary action?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "primary"
Why it matters: Asks for the main purpose or function, not a secondary benefit. Eliminate answers that describe side-effects or partial functions.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement automated reconciliation between sensor data and operator logs, flagging discrepancies in real time.
Automated reconciliation between sensor data and operator logs would highlight discrepancies immediately, allowing quick investigation. Replacing all sensors (A) is costly and not focused; training (C) alone may not overcome human error; reducing sensor reliance (D) ignores the value of automated alerts.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Reduce reliance on IoT sensors and increase manual inspections.
Why it's wrong here
This would reduce automation benefits and increase human error risk.
✗
Replace all IoT sensors with newer models that have better accuracy.
Why it's wrong here
Sensor accuracy is not the issue; the discrepancy is due to manual logs.
✗
Provide additional training to operators on how to accurately fill in logs and respond to sensor alerts.
Why it's wrong here
Training helps but does not eliminate human error or detect when logs are missed.
✓
Implement automated reconciliation between sensor data and operator logs, flagging discrepancies in real time.
Why this is correct
Directly addresses the inconsistency and enables timely corrective action.
Clue confirmation
The clue word "primary" in the question point toward this answer.
Related concept
Read the scenario before looking for a memorised answer.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Many certification questions include familiar terms but test a specific constraint. Read the exact wording before choosing an answer that is generally true but wrong for this case.
Detailed technical explanation
How to think about this question
This question should be treated as a scenario, not a definition check. Identify the problem, the constraint and the best action. Then compare each option against those facts.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
Use explanations to understand the rule behind the answer.
TExam Day Tips
→Underline the problem statement mentally.
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A practitioner preparing for the CRISC exam encounters this exact type of scenario on the job. The correct answer here is not the most general option — it is the best answer for the specific constraint described. Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option. Real exam questions reward reading the full scenario before eliminating options, because the constraint defines which answer fits.
What to study next
Got this wrong? Here's your next step.
Identify which CRISC exam domain this question belongs to, then review the specific concept being tested. Practise related questions in that domain and focus on understanding why each wrong answer is tempting — not just why the correct answer is right.
Risk and Control Monitoring and Reporting — This question tests Risk and Control Monitoring and Reporting — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Implement automated reconciliation between sensor data and operator logs, flagging discrepancies in real time. — Automated reconciliation between sensor data and operator logs would highlight discrepancies immediately, allowing quick investigation. Replacing all sensors (A) is costly and not focused; training (C) alone may not overcome human error; reducing sensor reliance (D) ignores the value of automated alerts.
What should I do if I get this CRISC question wrong?
Identify which CRISC exam domain this question belongs to, then review the specific concept being tested. Practise related questions in that domain and focus on understanding why each wrong answer is tempting — not just why the correct answer is right.
Are there clue words in this question I should notice?
Yes — watch for: "primary". Asks for the main purpose or function, not a secondary benefit. Eliminate answers that describe side-effects or partial functions.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A retail company uses a manual control to verify that all credit card transactions are processed by authorized payment terminals. The control requires a store manager to compare a daily transaction log against a list of approved terminal IDs. The company processes an average of 10,000 transactions per day across 200 stores. During a recent internal audit, it was found that 15% of stores had not completed the reconciliation for the past month. The audit also revealed that several unauthorized terminals had been used to process transactions, resulting in a data breach of customer payment information. The company's risk appetite for payment card data security is very low. The current monitoring approach includes a quarterly review of control performance by the internal audit team. The risk manager needs to recommend improvements to the monitoring of this control. Which of the following is the BEST recommendation?
medium
A.Increase internal audit reviews of the control to monthly.
B.Implement disciplinary actions for store managers who skip reconciliations.
✓ C.Automate the reconciliation by integrating the transaction log with the approved terminal list.
D.Provide refresher training to all store managers on the procedure.
Why C: Option D is correct because automating the reconciliation process ensures it is performed consistently and promptly, eliminating the manual gaps. Option A is wrong increasing audit frequency does not prevent the control from being skipped. Option B is wrong disciplinary actions may motivate compliance but do not address the process inefficiency. Option C is wrong additional training may help but does not guarantee consistent performance.
Last reviewed: Jun 24, 2026
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.