Exam CISA topic 1 question 1252 discussion

Given that the primary function of DLP systems is to prevent data loss rather than monitor incoming traffic, the correct focus should be on other network security issues when it comes to preventing system breaches. In this context, the GREATEST concern would be: C. Help desk personnel are able to remote into other external systems.

It is C. C. Help desk personnel are able to remote into other external systems. This is the greatest concern because it presents a significant security risk. If help desk personnel can remotely access external systems, it could lead to unauthorized access, data breaches, and potential insider threats. Such access could be exploited by malicious actors or could result in inadvertent security lapses, especially if proper controls, logging, and monitoring are not in place. It is NOT D because monitoring incoming malicious traffic is typically the role of other systems like IDS/IPS, firewalls, or antivirus solutions. The primary role of DLP is to prevent data leaks and not to monitor incoming malicious traffic.

Having computer names publicly available poses a security risk by aiding attackers in targeting specific systems, which is a major concern as it provides a potential entry point for system compromise.

Monitoring incoming traffic is crucial for detecting and preventing potential malicious activity, unauthorized access attempts, and data exfiltration. A lack of monitoring in the DLP system increases the risk of system breaches and can leave the network vulnerable to various security threats.