Certified Information Systems Auditor (CISA) — Question 1001

Which of the following software versions would an IS auditor MOST likely find in the production environment during a post-deployment review?

Answer options

• A. The version used in the test environment
• B. The version used in the staging environment
• C. The version used in the development environment
• D. The version used in the integration environment

Correct answer: B

Explanation

The correct answer is B because the staging environment is typically the last step before production, making it the most relevant version to be found in production. In contrast, the versions from the test, development, and integration environments are not typically deployed directly to production.