Isaca CISA Exam - Topic 1 Question 45 Discussion

Actual exam question for Isaca's CISA exam

Question #: 45
Topic #: 1

[All CISA Questions]

An organization that has suffered a cyber attack is performing a forensic analysis of the affected users' computers Which of the following should be of GREATEST concern for the IS editor reviewing this process?

AAudit was only involved during extraction of the information.

BThe legal department has not been engaged.

CThe chain of custody has not been documented

DAn imaging process was used to obtain a copy of the data from each computer.

Show Suggested Answer

Suggested Answer: C

by Theodora at May 08, 2022, 08:08 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

An

4 months ago

Agree, the legal team needs to be involved from the start!

upvoted 0 times

...

Cristal

4 months ago

An imaging process is standard, so not worried about that part.

upvoted 0 times

...

Almeta

4 months ago

Surprised that they didn't document the chain of custody! How can they prove anything?

upvoted 0 times

...

Salina

4 months ago

I think the legal department should be a top priority too.

upvoted 0 times

...

Alaine

5 months ago

Definitely the chain of custody! That's crucial.

upvoted 0 times

...

Ligia

5 months ago

I thought the imaging process was supposed to be standard practice, so I’m not sure why that would be a concern. Maybe it’s more about how the evidence is handled after?

upvoted 0 times

...

Myrtie

5 months ago

I feel like we practiced a question similar to this where the chain of custody was a major point of concern. It seems like it would be the top priority here as well.

upvoted 0 times

...

Ashanti

5 months ago

I’m not entirely sure, but I think engaging the legal department is crucial too. Without them, there might be issues with how the evidence is handled later on.

upvoted 0 times

...

Felix

5 months ago

I remember discussing the importance of chain of custody in our last class. If that's not documented, it could really undermine the whole forensic process.

upvoted 0 times

...

Cristal

5 months ago

Hmm, this looks like a tricky one. I'll need to think carefully about the different types of mail activities and their outputs.

upvoted 0 times

...

Rosina

5 months ago

I remember we talked about the auditor's responsibilities in class, but I'm a bit unsure if determining the implementation of controls is necessary.

upvoted 0 times

...

Erick

5 months ago

For some reason, I'm confused about how supplemental benefits work. I feel like they might not be included, but I really can't recall the guidelines clearly.

upvoted 0 times

...

Dexter

5 months ago

Okay, let me see. I think the multiple VIC support was introduced in 3.5.1, not the original 3.5 release. I'll double-check the details, but that's my best guess for now.

upvoted 0 times

...

Anisha

5 months ago

I think option B sounds right, but I'm not entirely sure if just disclosing my interest is enough to avoid any ethical concerns.

upvoted 0 times

...

Graham

5 months ago

Okay, let me think this through step-by-step. Leker exchanged a van with a $20,000 basis for a new van worth $10,000 and $3,000 in cash. The key is figuring out the basis of the new van.

upvoted 0 times

...