CISA Question 84

Question

An IS auditor follows up on a recent security incident and finds the incident response was not adequate. Which of the following findings should be considered MOST critical?
A. The attack could not be traced back to the originating person.
B. The attack was not automatically blocked by the intrusion detection system (IDS).
C. Appropriate response documentation was not maintained.
D. The security weakness facilitating the attack was not identified.

Accepted Answer

Marked answer: D. The security weakness facilitating the attack was not identified.

CISA Question 84

Community Discussion

Preparing Practice Exam…

CISA Question 84

Community Discussion