easyMultiple ChoiceObjective-mapped
CRISC Practice Question: Refer to the exhibit
Exhibit
control_monitoring_config: control_id: CR-02 monitoring_type: automated kpi: "Percentage of transactions reviewed" target: 90% (should be 95% per policy) current: 94.5% trend: stable
Refer to the exhibit. What does the exhibit most likely indicate about the control monitoring?
⚠ Common exam trap
The trap here is that candidates see a red indicator and assume the control is failing, but the question tests the ability to distinguish between control effectiveness and monitoring configuration—a subtle but critical distinction in risk and control monitoring.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The control is effective but the monitoring configuration is incorrect.
The exhibit shows a control monitoring dashboard where the 'Effectiveness' metric is green (indicating the control is working), but the 'Monitoring Configuration' is red (indicating a misconfiguration in how the control is being monitored). This mismatch means the control itself is effective, but the monitoring setup—such as incorrect alert thresholds, missing log sources, or misconfigured SIEM rules—is not properly capturing or reporting its status. Therefore, the control is effective, but the monitoring configuration is incorrect.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The control is effective but the monitoring configuration is incorrect.
Why this is correct
The target threshold should align with policy; the configuration error might cause false sense of effectiveness.
- ✗
The control is failing and needs immediate remediation.
Why it's wrong here
The control is not failing relative to the configured target.
- ✗
The control is close to target but requires attention.
Why it's wrong here
The current value exceeds the configured target.
- ✗
The control is meeting its target.
Why it's wrong here
It meets the configured target but not the policy target.
Go deeper
Related to this question
About these practice questions
This CRISC question is part of Courseiva's 983-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.