Discuss Isaca CISA Exam Topic 4 Question 34

Which of the following provides the MOST comprehensive understanding of an organizations information security posture?

ARisk management metrics

BExternal audit findings

CResults of vulnerability assessments

DThe organizations security incident trends

Suggested Answer: A

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Franklyn 11 months ago

Wait, are we really saying risk metrics are the best?

Jerry 12 months ago

Security incident trends are super important too!

Luke 12 months ago

Vulnerability assessments show current weaknesses.

Winifred 12 months ago

I think external audit findings are more reliable.

Chaya 1 year ago

Risk management metrics give a full picture.

Karan 1 year ago

Security incident trends could be really telling, but I’m torn between that and risk management metrics. They both seem important!

Elin 1 year ago

Vulnerability assessments seem crucial, but I feel like they only show part of the security posture. What about ongoing incidents?

Yesenia 1 year ago

I remember a practice question where external audit findings were highlighted as important, but I wonder if they really capture the whole picture.

Margurite 1 year ago

I think risk management metrics might give a broad view, but I'm not entirely sure if they cover everything.

Dorothy 1 year ago

I think I've got a handle on this. The key is understanding how the WLAN signal is layered across the 10 floors. If it's 5,6 layered, then the answer is True. Let me double-check my work, but I feel confident about this one.

Solange 1 year ago

Hmm, this looks like a tricky one. I'll need to carefully review the summarization configuration and the more specific routes received by R1.

Lino 1 year ago

Option D sounds like the most logical answer to me. The internal audit plan should focus on engagements that can add value to the organization.

Earnestine 1 year ago

Hmm, I'm a bit confused on this. I thought selfdestruct always sent ether to the address specified, regardless of the fallback function. I'll have to think this through more carefully.

Jannette 1 year ago

I feel like this question was on a practice exam. Didn't we discuss how the Change Initiator usually suggests changes?

Isaca CISA Exam - Topic 4 Question 34 Discussion