Exam CISA All QuestionsBrowse all questions from this exam
Question 681

What is MOST important to verify during an external assessment of network vulnerability?

    Correct Answer: D

    The completeness of the network asset inventory is crucial to verify during an external assessment of network vulnerability because it ensures all devices and systems are properly identified and accounted for. Without an accurate and comprehensive inventory, it is challenging to evaluate the network's security posture effectively, as unidentified or missing assets can introduce vulnerabilities and potential entry points for attackers.

Discussion
ItsBananassOption: D

Step 1, what do you have. Inventory

cybervdsOption: D

During an external assessment of network vulnerability, the most important aspect to verify would be: D. Completeness of network asset inventory Verifying the completeness of the network asset inventory is crucial because it ensures that all network devices and systems are properly identified and accounted for. Without an accurate and comprehensive inventory, it would be challenging to assess the security posture of the network effectively. Missing or unaccounted assets can introduce vulnerabilities and potential entry points for attackers. While the other options mentioned are also important considerations, they are not as fundamental as having a complete network asset inventory. Regular review of the network security policy helps ensure that security measures are up to date and aligned with the organization's requirements, but without a proper inventory, it may be difficult to implement those policies consistently.

SwallowsOption: D

While regular review of the network security policy (option A) is important for ensuring that policies align with current security requirements, it is secondary to having a complete network asset inventory. The inventory provides the concrete basis upon which security policies and practices can be effectively applied and assessed.