Exam CISA topic 1 question 1492 discussion

C If implement = D, it is only proposed therefore Risk assessment, C

Those who are saying D can you explain how do you check logs of a system that doesn't exist yet? This system is proposed by the vendor, not implemented yet. Answer is C.

C. is only to confuse. The question of what is best for a narrowly described area. A typical ISACA question and typically the answer specific to the narrowed area is the correct one. For example, C. is far too general, whereas D. is very specific in relation to the limited context of the question. So D. is the correct answer from my ISACA experience.

D is only to confuse. I think is C the right answer

Hypervisor logs provide detailed information about the activities and events occurring within the virtualized environment. By analyzing these logs, an organization can identify potential security threats associated with a virtualization technique proposed by the vendor of a popular virtual machine (VM) system. Hypervisor logs record various activities such as virtual machine creation, deletion, resource allocation, network traffic, and system configuration changes. Analyzing these logs allows organizations to detect unauthorized access, unusual behaviors, and potential security vulnerabilities within the virtualized environment, enabling them to take proactive measures to mitigate security risks. While risk assessment (option C) is important for identifying and prioritizing security threats, hypervisor logs provide real-time data that directly relates to the operation of the virtualization technique and can reveal specific security issues within the VM system.

Correct Answer is C option D may not proactively identify potential security threats associated with a proposed virtualization technique.

For ISACA's logic about the questions, D should be the answer because C is not only for VM environments.