Exam CISA topic 1 question 1413 discussion

Actual exam question from Isaca's CISA

Question #: 1413
Topic #: 1

A secure server room has a badge reader system that records name, date, and time information whenever a staff member uses a badge to enter or exit. When reviewing the system logs, an IS auditor notices records for some employees entering, but not exiting, the room. Which of the following would be the MOST effective compensating control to recommend?

A. Installing security cameras at the doors
B. Implementing a monitored mantrap at entrance and exit points
C. Changing to a biometric access control system
D. Requiring two-factor authentication at entrance and exit points

Show Suggested Answer

Suggested Answer: A 🗳️

by Izzeddin at July 25, 2024, 6:51 p.m.

Comments

Submit Cancel

Izzeddin

7 months, 3 weeks ago

Selected Answer: A

It's A, A man trap is not a compensating control but a preventive one.

upvoted 3 times

choboanon

3 months, 3 weeks ago

I dont understand your reasoning, that's also like saying it can't be cameras, because a camera is a detective control, not a compensating one... Like youre not wrong, but in this scenario a mantrap IS a compensating control to the fact that people are tailgating at your doors.

upvoted 1 times

...

choboanon

3 months, 3 weeks ago

Right...but in this case the concern is people are tailgating at entries where you need to key card in. A camera does nothing to prevent this from reoccurring. A mantrap does.

upvoted 1 times

...

Exam CISA All Questions

View all questions & answers for the CISA exam

Exam CISA topic 1 question 1413 discussion

Comments

Izzeddin

choboanon

choboanon

SY0-701