Isaca CISA Exam - Topic 8 Question 69 Discussion

Actual exam question for Isaca's CISA exam

Question #: 69
Topic #: 8

[All CISA Questions]

When auditing the security architecture of an online application, an IS auditor should FIRST review the:

Afirewall standards.

Bconfiguration of the firewall

Cfirmware version of the firewall

Dlocation of the firewall within the network

Show Suggested Answer

Suggested Answer: A

This is according to the ISACA's IS Auditing Guideline G15 on Security Awareness Training, which states that security awareness training should include 'an understanding of the types of suspicious activity and the appropriate response to them'.

by Lorean at Dec 11, 2023, 02:35 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Twana

6 months ago

Surprised that people overlook firewall standards!

upvoted 0 times

...

Nelida

6 months ago

Wait, isn’t the location of the firewall super important too?

upvoted 0 times

...

Kenneth

7 months ago

Agreed, configuration is key to security!

upvoted 0 times

...

Tiffiny

7 months ago

I think the firmware version is more critical first.

upvoted 0 times

...

Germaine

7 months ago

Definitely should start with the firewall configuration.

upvoted 0 times

...

Edelmira

7 months ago

The location of the firewall is definitely something we discussed, but I wonder if it really comes first in the audit process.

upvoted 0 times

...

Elenore

7 months ago

I feel like the firmware version could be important too, but I can't recall if it should be prioritized over the configuration.

upvoted 0 times

...

Josphine

7 months ago

I remember a practice question where we had to check the configuration first. It seems like that might be more critical than just looking at the standards.

upvoted 0 times

...

Pura

8 months ago

I think we should start with the firewall standards since they set the guidelines for security. But I'm not entirely sure if that's the first step.

upvoted 0 times

...

Brittni

8 months ago

Okay, I think I've got this. The key here is to focus on the fundamentals - the firewall standards would be the logical place to start, since that will set the baseline for how the firewall should be configured and deployed.

upvoted 0 times

...

Coral

8 months ago

Hmm, I'm a little unsure about this one. I know the firewall is important for security, but I'm not sure if the configuration or the standards would be the first thing to look at. Maybe the location of the firewall in the network would give me a better overall picture?

upvoted 0 times

...

Keith

8 months ago

This seems like a pretty straightforward question about auditing a firewall. I'd start by reviewing the firewall configuration to see how it's set up and what rules are in place.

upvoted 0 times

...

Ming

8 months ago

I'm a bit confused by this question. Is it asking about the firewall itself, or the overall security architecture of the application? I'd want to make sure I understand the scope before diving in.

upvoted 0 times

...

Brice

8 months ago

I'm a bit confused by this question. The image and options don't seem to align with what I've learned about confederation configurations. I'll need to review my notes and try to make sense of this.

upvoted 0 times

...

Ernest

8 months ago

I'm pretty confident the answer is C. Cloning a running VM to a new VM is the standard way to create a copy in the vSphere Client. The other options don't seem to match the specifics of the question.

upvoted 0 times

...

James

8 months ago

I'm pretty sure it's the smart card option, but I'll double-check my notes just to be sure.

upvoted 0 times

...

Kenneth

8 months ago

This is a good test of our OPSEC knowledge. I'm feeling confident I can identify the three correct answers from the options provided.

upvoted 0 times

...

Marge

8 months ago

Okay, I think I've got this. In a multi-echelon network, having safety stock at the central and field warehouses would provide the highest customer service levels. The central warehouse can buffer against variability in demand, while the field warehouses can respond quickly to local customer needs. I'm confident this is the right answer.

upvoted 0 times

...

Mollie

8 months ago

Okay, let me think this through. We want to know when all the instances are unhealthy, so the condition should be when the UnhealthyHostCount is greater than or equal to 1. That's option B.

upvoted 0 times

...