Exam CISA topic 1 question 1637 discussion

network activity monitoring is more about network activities. Option A can be detected with a system log.

Given the focus on network administration activity, the PRIMARY reason an IS auditor would recommend an automated management review process on a daily basis is: A. To identify system changes Daily reviews of network administration activities help ensure that any changes to the system are monitored closely. This is crucial for maintaining the integrity and security of the network, as it allows for the prompt detection and review of changes that could impact the system's stability or security.

A. To identify system changes Explanation: A. To identify system changes The primary reason for recommending a daily automated management review process instead of a quarterly review is to identify system changes in a more timely manner. D. To detect network intrusions Detecting network intrusions is certainly a valid reason for frequent management reviews, but it is not the PRIMARY reason in this case. Identifying system changes is the most critical factor that drives the recommendation for a daily automated review process. In summary, the IS auditor's primary recommendation for a daily automated management review process is to enable the timely identification of any changes made to the network, which is crucial for maintaining the overall security and stability of the IT environment.