CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ145

Information System Auditing Process

Which of the following is the BEST audit procedure for determining whether a firewall is configured in accordance with the organization's security policy?

Explanation

Reviewing firewall parameter settings provides direct evidence of the active configuration, including rules, permitted services, access controls, and default actions, which can be compared against the organization’s security-policy requirements.

Community Discussion

No comments yet. Be the first to start the discussion!