Exam CISA All QuestionsBrowse all questions from this exam
Question 720

Which of the following should an IS auditor ensure is classified at the HIGHEST level of sensitivity?

    Correct Answer: B

    Penetration test results should be classified at the highest level of sensitivity because they contain detailed information about vulnerabilities and weaknesses in an organization's systems, networks, and applications. This information is extremely valuable to malicious actors who could exploit these vulnerabilities to compromise the organization's security. Therefore, it is crucial to protect penetration test results to prevent unauthorized access and potential security breaches.

Discussion
SwallowsOption: B

Penetration test results typically contain detailed information about vulnerabilities and weaknesses in an organization's systems, networks, and applications. This information is highly sensitive as it could potentially be exploited by malicious actors to compromise the organization's security. Therefore, penetration test results should be classified at the highest level of sensitivity to ensure proper protection and restricted access to authorized personnel only.