MENU
What should be an IS auditor's GREATEST concern when an organization's virtual private network (VPN) is implemented on employees' personal mobile devices?
Suggested Answer: B
Get Premium Cybersecurity-Audit-Certificate Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
When employees use personal mobile devices to access a VPN, the greatest concern for an IS auditor is the potential for sensitive data to be stored in an unsecured manner. If data is stored in plain text, it could be easily accessed by unauthorized parties if the device is lost, stolen, or compromised. This risk is heightened when the devices are not managed by the organization's IT department, which would typically enforce security policies such as encryption.
22 comments · newest first
GE
Genevive
10 months ago
What about network resource issues? That's a concern too!
NO
Noel
11 months ago
Totally agree, unauthorized access is a nightmare!
WE
Wendell
11 months ago
Wait, people actually store sensitive info in plain text?
KA
Kasandra
11 months ago
I think unauthorized devices are a bigger concern.
VI
Vicky
11 months ago
Users storing data in plain text is a huge risk!
MO
Mozelle
12 months ago
I vaguely recall that resource-intensive services could slow down the VPN, but I’m not sure if that’s the biggest risk compared to unauthorized access.
LA
Lawrence
12 months ago
I practiced a similar question where data security was emphasized, so I feel like option B is definitely something to consider.
FE
Felicitas
12 months ago
I’m not entirely sure, but I think unauthorized devices accessing the network could lead to major security issues, which makes option C a contender.
MA
Man
1 year ago
I remember we discussed the risks of data being stored on personal devices, so option B seems like a strong concern.
GL
Glory
1 year ago
Accessing unsupported services over the VPN could be a major problem. I'll make sure to consider that possibility in my answer.
MO
Mozelle
1 year ago
Hmm, I'm not sure about this one. I'll need to think through the potential risks of using personal devices for the VPN.
RA
Ramonita
1 year ago
This question seems straightforward. I'll focus on the key concern of unauthorized device access to the corporate network.
RO
Rosalyn
1 year ago
The biggest issue I see is data security - users storing sensitive data in plain text on their personal devices. I'll make sure to highlight that.
SU
Susy
1 year ago
I'm pretty sure this is under Initial Access, since exploiting public-facing applications is a common way for attackers to gain initial access to a system.
CI
Ciara
1 year ago
Okay, let's see. Datastore could work, but I'm not sure if it can handle the complex analytics requirement. BigQuery might be a better fit for that.
SA
Salina
1 year ago
Hmm, I'm not sure a sign-in sheet is the best solution. With a lot of non-employees, that could get messy and unreliable. Maybe using smart cards or biometric access would be a cleaner way to monitor who is in the building.
VI
Viva
1 year ago
I think the file we're looking for is the Bill of Materials, but I'm not completely sure. There were so many terms to remember!
MI
Mignon
2 years ago
Users accessing services not supported by the VPN could also pose a threat. It could bypass security measures in place.
KI
Kimberely
2 years ago
That's true, Virgie. It could lead to data breaches if the devices are lost or stolen.
VI
Virgie
2 years ago
But what about users storing data in plain text on their mobile devices? Wouldn't that be a big concern too?
MI
Mignon
2 years ago
I agree with Kimberely. That would definitely be a major security risk.
KI
Kimberely
2 years ago
I think an IS auditor's biggest concern should be users accessing the corporate network from unauthorized devices.