Certified Information Systems Auditor (CISA) — Question 921

Which of the following presents the GREATEST threat to an organization's entire virtual infrastructure?

Answer options

• A. Change management processes are inefficient.
• B. Changes are pushed to production during business hours.
• C. Local authentication is used for guest systems.
• D. The virtual machine image has not been standardized.

Correct answer: D

Explanation

The correct answer is D because a non-standardized virtual machine image can lead to inconsistencies, vulnerabilities, and difficulties in management across the infrastructure. Options A, B, and C, while potentially problematic, do not pose the same level of systemic risk to the entire virtual environment as the lack of standardization does.