Exam CISA topic 1 question 1653 discussion

Actual exam question from Isaca's CISA

Question #: 1653
Topic #: 1

[All CISA Questions]

An IS auditor detects the presence of known ransomware indicators. What should the auditor do NEXT?

A. Research the type of ransomware to determine the associated risk.
B. Recommend a tool to remove the ransomware from the server.
C. Notify the parties responsible for the server.
D. Determine whether documented procedures exist for ransomware removal.

Show Suggested Answer

Suggested Answer: C 🗳️

by Pokekai90 at Oct. 24, 2024, 4:53 a.m.

Comments

Submit Cancel

46080f2

2 weeks, 2 days ago

Selected Answer: C

The CISA manual 28th ed strongly suggest immediate notification in case of significant security issues or potential threats: "If the IS auditor encounters material irregularities or illegal acts, they should report any matter of material irregularities or illegal acts to management." Ransomware activity would likely be considered a material irregularity or an illegal act.

upvoted 1 times

...