CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 552


Which of the following would be of MOST concern during an audit of an end-user computing (EUC) system containing sensitive information?

Show Answer
Correct Answer: AB

The most concerning issue during an audit of an end-user computing system containing sensitive information is if the system data is not protected. Ensuring that sensitive data is secure from unauthorized access, modification, or destruction is critical. Lack of protection for sensitive data can lead to data breaches, compliance violations, and significant reputational damage. While audit logging, anti-virus software, and SLAs are also important, the protection of sensitive information is the highest priority.

Discussion

4 comments
Sign in to comment
MunaMOption: B
Sep 7, 2022

I think answer is B

EBTURKOption: B
May 30, 2023

Sensitive information must be protected from unauthorized access, modification, or destruction. If system data is not protected, it may be vulnerable to unauthorized access or modification. Audit logging is important but does not directly relate to the protection of sensitive information.

hohoOption: B
Jun 6, 2023

Agree in B, ECU tools like excel prioritize be protect

SwallowsOption: B
Jun 9, 2024

While the absence of audit logging (option A) is indeed a concern for monitoring and tracing activities on the system, the lack of protection for sensitive data poses a more immediate and severe risk. Without adequate protection measures, sensitive information stored within the EUC system could be vulnerable to unauthorized access, modification, or disclosure, leading to data breaches, compliance violations, and reputational damage.

RS66
Jul 9, 2024

B is not about sensitive data, it is about system data like operating system and drivers... A is the answer.