CISA Question 349

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  I think it’s actually A - improving the change management process. The question says “recommendation,” which means the auditor already found the issue and now needs to suggest how to prevent it from happening again. Doing another config review (B) would just re-check the problem, but it wouldn’t fix the root cause - which is usually weak change control or no baseline enforcement.

• Chose B1

  Option B proposes performing a configuration review. A configuration review involves identifying and documenting the current configuration of the application servers, comparing it to a known secure baseline, and identifying any deviations. This process can help identify vulnerabilities and provide guidance on how to remediate them. Therefore, option B is a valid recommendation and could be considered the BEST option.

• Chose B1

  As an IS auditor, the best recommendation to address the issue of inconsistent security settings on application servers would be to standardize and centralize the security configurations of these servers. This can be achieved through the use of security configuration management tools and/or policies and procedures that ensure all application servers are configured consistently and securely. Additionally, the IS auditor could recommend implementing security monitoring and continuous audit processes to detect and remediate any future deviations from the standardized security configuration. Regular security assessments and penetration testing can also help identify and address potential vulnerabilities in a timely manner. Overall, the goal should be to ensure that all application servers have consistent and secure security configurations, and that any deviations from the standard are quickly identified and remediated to reduce the risk of potential vulnerabilities.