When auditing the security architecture of an online application, an IS auditor should FIRST review the:
Suggested Answer: A
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
This is according to the ISACA's IS Auditing Guideline G15 on Security Awareness Training, which states that security awareness training should include 'an understanding of the types of suspicious activity and the appropriate response to them'.
41 comments · newest first
TW
Twana
11 months ago
Surprised that people overlook firewall standards!
NE
Nelida
11 months ago
Wait, isn’t the location of the firewall super important too?
KE
Kenneth
11 months ago
Agreed, configuration is key to security!
TI
Tiffiny
11 months ago
I think the firmware version is more critical first.
GE
Germaine
11 months ago
Definitely should start with the firewall configuration.
ED
Edelmira
12 months ago
The location of the firewall is definitely something we discussed, but I wonder if it really comes first in the audit process.
EL
Elenore
12 months ago
I feel like the firmware version could be important too, but I can't recall if it should be prioritized over the configuration.
JO
Josphine
12 months ago
I remember a practice question where we had to check the configuration first. It seems like that might be more critical than just looking at the standards.
PU
Pura
1 year ago
I think we should start with the firewall standards since they set the guidelines for security. But I'm not entirely sure if that's the first step.
BR
Brittni
1 year ago
Okay, I think I've got this. The key here is to focus on the fundamentals - the firewall standards would be the logical place to start, since that will set the baseline for how the firewall should be configured and deployed.
CO
Coral
1 year ago
Hmm, I'm a little unsure about this one. I know the firewall is important for security, but I'm not sure if the configuration or the standards would be the first thing to look at. Maybe the location of the firewall in the network would give me a better overall picture?
KE
Keith
1 year ago
This seems like a pretty straightforward question about auditing a firewall. I'd start by reviewing the firewall configuration to see how it's set up and what rules are in place.
MI
Ming
1 year ago
I'm a bit confused by this question. Is it asking about the firewall itself, or the overall security architecture of the application? I'd want to make sure I understand the scope before diving in.
BR
Brice
1 year ago
I'm a bit confused by this question. The image and options don't seem to align with what I've learned about confederation configurations. I'll need to review my notes and try to make sense of this.
ER
Ernest
1 year ago
I'm pretty confident the answer is C. Cloning a running VM to a new VM is the standard way to create a copy in the vSphere Client. The other options don't seem to match the specifics of the question.
JA
James
1 year ago
I'm pretty sure it's the smart card option, but I'll double-check my notes just to be sure.
KE
Kenneth
1 year ago
This is a good test of our OPSEC knowledge. I'm feeling confident I can identify the three correct answers from the options provided.
MA
Marge
1 year ago
Okay, I think I've got this. In a multi-echelon network, having safety stock at the central and field warehouses would provide the highest customer service levels. The central warehouse can buffer against variability in demand, while the field warehouses can respond quickly to local customer needs. I'm confident this is the right answer.
MO
Mollie
1 year ago
Okay, let me think this through. We want to know when all the instances are unhealthy, so the condition should be when the UnhealthyHostCount is greater than or equal to 1. That's option B.
AL
Almeta
1 year ago
Hmm, I'd say the answer is 'All of the above'... and a pack of donuts for the auditor. Gotta keep 'em happy, right?
AL
Allene
1 year ago
C) firmware version of the firewall
WE
Weldon
1 year ago
B) configuration of the firewall
RO
Ronnie
1 year ago
A) firewall standards.
DO
Dominque
1 year ago
Firewall standards, all the way! Gotta make sure it's playing by the rules, otherwise it's like trying to drive with a flat tire.
DO
Dorothy
1 year ago
Location, location, location! The firewall's gotta be in the right spot to do its job. Just like a good real estate agent!
KR
Kris
1 year ago
D) location of the firewall within the network
DE
Deangelo
1 year ago
B) configuration of the firewall
KA
Karima
1 year ago
A) firewall standards.
CA
Caitlin
1 year ago
Ooh, the firmware version! That's like checking the engine before you drive, right? Gotta make sure it's running smooth.
ER
Erick
1 year ago
It's like checking the locks on your doors before leaving the house.
GL
Glendora
1 year ago
Definitely, you want to ensure that the firewall is up-to-date and secure.
KI
Kimbery
1 year ago
I agree, it's like making sure the foundation is strong before building on top of it.
RE
Remona
1 year ago
Yes, checking the firmware version is crucial for security.
JA
James
2 years ago
Hmm, I'd say the firewall configuration is the way to go. That's where the rubber meets the road, you know?
PA
Paulina
1 year ago
D) location of the firewall within the network
TO
Tori
1 year ago
C) firmware version of the firewall
TE
Teddy
1 year ago
B) configuration of the firewall
AR
Artie
1 year ago
A) firewall standards.
HE
Henriette
2 years ago
But if the firewall standards are not up to date, it could lead to vulnerabilities. That's why I think it should be reviewed first.
PE
Penney
2 years ago
I disagree, I believe the configuration of the firewall is more important to review first.
HE
Henriette
2 years ago
I think the first thing to review should be the firewall standards.