A key aspect ofbackup managementis ensuring backups are performed on time and without manual intervention to avoid human error.
Option A (Incorrect):While separation of duties is important, the concern here is not aconflict of interestbut rather the reliability of backup execution.
Option B (Incorrect):Load balancer configuration relates tonetwork traffic management, which is not directly relevant to backup reliability.
Option C (Incorrect):Cloud-based backups can be a good option, but the immediate priority is toverify if backups are consistently executedbefore suggesting alternative solutions.
Option D (Correct):Reviewing backup logs provides concreteevidenceof whether backups are performed on schedule and if they weremisseddue to peak usage periods. If issues are found, automation or scheduling adjustments may be recommended.
Reference:ISACA CISA Review Manual -Domain 4: Information Systems Operations and Business Resilience- Covers backup procedures, performance monitoring, and audit approaches.

The primary benefit of automating application testing is to provide test consistency. Automated testing can ensure that the same test cases are executed in the same manner and order every time, which can improve the reliability and accuracy of the test results. Providing more flexibility, replacing all manual test processes, and reducing the time to review code are possible benefits of automating application testing, but they are not the primary benefit. References:
ISACA, CISA Review Manual, 27th Edition, 2020, p. 3091
ISACA, CISA Review Questions, Answers and Explanations Database - 12 Month Subscription

DLP (Data Loss Prevention) toolsare designed toprevent unauthorized access, transfer, or leakage of sensitive data, especially byinsider threatsorunauthorized downloads.
Preventing Unauthorized Downloads (Correct Answer - C)
DLP solutionsblock or log attemptsto transfer sensitive files.
Example:A DLP tool detects andblocks an employee from copying confidential data to a USB drive.
Preventing Malware Installation (Incorrect - A, B)
Antivirus and endpoint protection tools, not DLP, handle malware threats.
Preventing Corrupt Data Transmission (Incorrect - D)
DLP focuses ondata protection, not detecting corrupt files.
References:
ISACA CISA Review Manual
NIST 800-53 (Data Protection Controls)
CIS (Center for Internet Security) DLP Best Practices