Discuss Isaca Cybersecurity-Audit-Certificate Exam Topic 3 Question 48

What would be an IS auditor's BEST response to an IT managers statement that the risk associated with the use of mobile devices in an organizational setting is the same as for any other device?

AReplication of privileged access and the greater likelihood of physical loss increases risk levels.

BThe risk associated with mobile devices is less than that of other devices and systems.

CThe risk associated with mobile devices cannot be mitigated with similar controls for workstations.

DThe ability to wipe mobile devices and disable connectivity adequately mitigates additional

Suggested Answer: A

The BEST response to an IT manager's statement that the risk associated with the use of mobile devices in an organizational setting is the same as for any other device is thatreplication of privileged access and the greater likelihood of physical loss increases risk levels. Mobile devices pose unique risks to an organization due to their portability, connectivity, and functionality. Mobile devices may store or access sensitive data or systems that require privileged access, which can be compromised if the device is lost, stolen, or hacked. Mobile devices also have a higher chance of being misplaced or taken by unauthorized parties than other devices.

Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

31 comments · newest first

Roxanne 6 months ago

I lean towards A too. Physical loss is a big deal with mobiles.

Alberta 6 months ago

C makes sense. Different controls are needed for mobile devices.

Delmy 6 months ago

B seems too optimistic. Mobile devices have higher risks, not lower.

Sharee 6 months ago

I agree, A highlights the unique risks of mobile devices.

Carma 6 months ago

I think A is the best choice. Mobile devices are more prone to loss.

Tamera 7 months ago

D) sounds good, but can we really rely on that?

Andrew 7 months ago

Wow, I didn't realize mobile risks were that high!

Kanisha 7 months ago

C) is spot on, different controls are needed for mobile.

Jose 8 months ago

I disagree, B) seems too optimistic about mobile risks.

German 8 months ago

Option A is the way to go. Mobile devices are like a digital Swiss Army knife - they can do a lot, but that also means a lot of risk.

Alpha 8 months ago

Haha, the IT manager must be living in a fantasy world if they think the risk is the same. Mobile devices are a security nightmare!

Felicidad 8 months ago

B? Really? Mobile devices are a hacker's dream come true. The risk is definitely higher than other devices.

Jackie 8 months ago

C is also a valid point. The controls for mobile devices may not be as effective as those for workstations.

Maurine 8 months ago

I agree with A. The increased mobility and access privileges of mobile devices make them a prime target for cyber attacks.

Wynell 9 months ago

I thought option D sounded good because of the ability to wipe devices, but I’m not convinced it fully addresses all the risks involved.

Lilli 9 months ago

I feel like we had a practice question about mobile device risks, and I think the answer highlighted that they can't be treated the same as other devices.

Margurite 9 months ago

I’m not entirely sure, but I think the controls for mobile devices need to be different from those for workstations.

Charolette 9 months ago

I'm a bit confused by the wording of the options. I think A is the best choice, but I'm not 100% sure why the other options wouldn't be appropriate responses.

Rebecka 9 months ago

I'm pretty confident A is the best answer here. Mobile devices introduce additional attack vectors and risks that need to be specifically addressed, beyond just standard device controls.

France 9 months ago

I'm leaning towards A. Mobile devices do seem to have some heightened risks compared to other devices, even if they can be mitigated. The wording of the options makes me a bit unsure, though.

Orville 10 months ago

I remember discussing how mobile devices have unique risks, like physical loss, which can be more significant than traditional devices.

Charlesetta 10 months ago

Option A seems to be the best response. Mobile devices pose a higher risk due to the potential for data breaches and physical loss.

Buffy 10 months ago

A) makes total sense, mobile devices are way more vulnerable.

Holley 10 months ago

D is interesting, but wiping isn't always foolproof.

Ruby 11 months ago

Hmm, I think the key here is recognizing that mobile devices introduce some unique risks like replication of privileged access and physical loss. Option A seems to capture that well.

Hector 11 months ago

I'm not sure about this one. The IT manager's statement seems a bit oversimplified, but I'm not confident I fully understand the nuances of the risks associated with mobile devices.

Rashida 5 months ago

↳ replying to Hector

The controls for workstations won't work the same way.

Markus 5 months ago

↳ replying to Hector

Wiping them is good, but it doesn't cover everything.

Lili 5 months ago

↳ replying to Hector

I agree, they can't be treated like regular devices.

Keneth 6 months ago

↳ replying to Hector

I think mobile devices have unique risks.

Martha 10 months ago

↳ replying to Hector

Definitely, physical loss is a big concern.

Isaca Cybersecurity-Audit-Certificate Exam - Topic 3 Question 48 Discussion