mediumMultiple ChoiceObjective-mapped
CRISC Practice Question: Refer to the exhibit
Exhibit
2025-03-15 14:23:45 ERROR [compliance.monitor] Control ID: CTRL-042 status: FAILURE. Expected: PASS. Action: Manual review required. 2025-03-15 14:25:10 INFO [compliance.monitor] Control ID: CTRL-042 status: PASS. Action: None. 2025-03-15 14:30:00 WARN [risk.engine] KRI: KR-007 value: 78.5 (Threshold: 50-75). Alert level: HIGH.
Refer to the exhibit. What is the most appropriate immediate action for the control failure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Investigate the root cause of the failure because it occurred before the pass.
The control failure requires investigation even though it later passed. The root cause of the failure must be understood to prevent recurrence. Option D is correct because investigating the root cause is the most appropriate immediate action. Option A ignores the failure without analysis, which is unacceptable. Option C accepts the risk without understanding why the failure occurred. Option B escalates to the board prematurely before investigation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ignore as it was followed by a pass.
Why it's wrong here
Ignoring could allow a systemic issue to remain undetected.
- ✗
Escalate to the board.
Why it's wrong here
Escalation is premature without knowing the root cause.
- ✗
Accept the control failure due to subsequent pass.
Why it's wrong here
The failure may indicate a recurring issue even if it later passes.
- ✓
Investigate the root cause of the failure because it occurred before the pass.
Why this is correct
Root cause analysis is needed to determine why the control failed.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.