MENU
It is important that an organization is able to prove compliance with information standards and legislation. One of the most important areas is documentation concerning access management. This process contains a
number of activities including granting rights, monitoring identity status, logging, tracking access and removing rights. Part of these controls are audit trail records which may be used as evidence for both internal and
external audits.
What component of the audit trail is the most important for an external auditor?
Suggested Answer: A
Get Premium ISMP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
TE
Tegan
11 months ago
Not sure about that, I feel like all components are equally important.
DE
Delsie
11 months ago
C is crucial too, policies guide everything!
CA
Carylon
11 months ago
Surprised this is even a question, isn't it obvious?
GA
Gaynell
11 months ago
I think A is more important, access criteria matter most.
TR
Trina
12 months ago
Definitely B, log review is key for audits.
AN
Anthony
12 months ago
I feel like system-specific policies could be important too, but I can't recall if they hold as much weight as the logs in an audit context.
LY
Lynette
12 months ago
I practiced a similar question where we had to identify the most critical part of audit trails, and I leaned towards log management.
LA
Lachelle
1 year ago
I think access criteria and control mechanisms might be key for external auditors since they need to see how access is managed overall.
JU
Julian
1 year ago
I remember we discussed how log reviews are crucial for audits, but I'm not sure if they're the most important component.
SH
Shaun
1 year ago
Okay, I remember learning about the different audit types in class. I think the key is to identify the one that focuses on reviewing an entity's operations and procedures, rather than just the financial statements or compliance. Let me think this through.
LU
Luisa
1 year ago
I've got a strategy here. I'll start by counting the initial 10 objects created in the array. Then I'll think through the vector and deque copies to see how that affects the total. Finally, I'll consider the static variable and how that gets incremented and decremented.
LE
Lettie
1 year ago
This seems like a straightforward question about finding the latest quote on an opportunity. I think I'll start by reviewing the options and seeing which one makes the most sense.
LI
Lilli
1 year ago
A distribution group seems like it would be more for managing email distribution, not accessing resources in another forest. I'm leaning towards trust or child domain as the best options.