Certified Information Systems Auditor (CISA) — Question 324

An IS auditor observes a system performance monitoring too that states that a server critical to the organization averages high CPU utilization across a cluster of four virtual servers throughout the audit period. To determine if further investigation is required an IS auditor should review:

Answer options

• A. system baselines.
• B. the system process activity log.
• C. the number of CPUs allocated to each virtual machine.
• D. organizational objectives.

Correct answer: A

Explanation

Reviewing system baselines is essential as it provides a reference point for normal performance levels, enabling the auditor to determine if the observed CPU utilization is indeed problematic. The system process activity log may offer insights into specific processes but won’t clarify what constitutes high utilization. The number of CPUs allocated to each virtual machine is relevant but does not address the performance comparison against baseline metrics. Organizational objectives are too broad and not directly related to performance monitoring.