CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 681


What is MOST important to verify during an external assessment of network vulnerability?

Show Answer
Correct Answer: D

The completeness of the network asset inventory is crucial to verify during an external assessment of network vulnerability because it ensures all devices and systems are properly identified and accounted for. Without an accurate and comprehensive inventory, it is challenging to evaluate the network's security posture effectively, as unidentified or missing assets can introduce vulnerabilities and potential entry points for attackers.

Discussion

3 comments
Sign in to comment
cybervdsOption: D
Jun 26, 2023

During an external assessment of network vulnerability, the most important aspect to verify would be: D. Completeness of network asset inventory Verifying the completeness of the network asset inventory is crucial because it ensures that all network devices and systems are properly identified and accounted for. Without an accurate and comprehensive inventory, it would be challenging to assess the security posture of the network effectively. Missing or unaccounted assets can introduce vulnerabilities and potential entry points for attackers. While the other options mentioned are also important considerations, they are not as fundamental as having a complete network asset inventory. Regular review of the network security policy helps ensure that security measures are up to date and aligned with the organization's requirements, but without a proper inventory, it may be difficult to implement those policies consistently.

ItsBananassOption: D
Jul 13, 2023

Step 1, what do you have. Inventory

SwallowsOption: D
Jul 7, 2024

While regular review of the network security policy (option A) is important for ensuring that policies align with current security requirements, it is secondary to having a complete network asset inventory. The inventory provides the concrete basis upon which security policies and practices can be effectively applied and assessed.