exam questions

Exam CISA All Questions

View all questions & answers for the CISA exam

Exam CISA topic 1 question 747 discussion

Actual exam question from Isaca's CISA
Question #: 747
Topic #: 1
[All CISA Questions]

An IS auditor is reviewing an organization's primary router access control list. Which of the following should result in a finding?

  • A. There are conflicting permit and deny rules for the IT group.
  • B. There is only one rule per group with access privileges.
  • C. Individual permissions are overriding group permissions.
  • D. The network security group can change network address translation (NAT).
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
NotJamesCharles
3 weeks, 4 days ago
Selected Answer: A
The reason is that conflicting permit and deny rules for the same group can lead to confusion and potential security issues. It is unclear which rules would take precedence.
upvoted 1 times
...
cybervds
6 months, 1 week ago
Selected Answer: A
A. There are conflicting permit and deny rules for the IT group. Conflicting permit and deny rules for the IT group in the primary router's access control list would be considered a finding during the IS auditor's review. Access control lists (ACLs) are used to control network traffic and determine which packets are allowed or denied based on specified criteria. Conflicting rules for the same group could lead to inconsistent and unpredictable access permissions, potentially resulting in unauthorized access or unintended restrictions. Option C, individual permissions overriding group permissions, might not be a finding in itself as it can be a deliberate configuration choice. However, it could be a concern if the individual permissions are not adequately controlled or documented.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago