Exam CISA topic 1 question 625 discussion

Actual exam question from Isaca's CISA

Question #: 625
Topic #: 1

An IS auditor has been asked to perform an assurance review of an organization's mobile computing security. To ensure the organization is able to centrally manage mobile devices to protect against data disclosure, it is MOST important for the auditor to determine whether:

A. lost devices can be located remotely.
B. procedures for lost devices include remote wiping of data.
C. a mobile security awareness training program exists.
D. a security policy exists for mobile devices.

Show Suggested Answer

Suggested Answer: D 🗳️

by MunaM at Sept. 7, 2022, 6:32 p.m.

Comments

Submit Cancel

Swallows

3 months, 3 weeks ago

Selected Answer: D

While procedures for lost devices that include remote wiping of data (option B) are important for mitigating risks associated with lost or stolen devices, having a security policy in place provides the overarching framework and guidance for implementing such procedures effectively.

upvoted 1 times

...

a84n

4 months, 2 weeks ago

Selected Answer: D

Answer: D A comprehensive security policy outlines the organization's requirements, controls, and procedures for managing mobile devices securely.

upvoted 1 times

...

Rachy

7 months, 3 weeks ago

Selected Answer: B

b. Procedure for data wiping

upvoted 2 times

...

JONESKA

1 year, 2 months ago

I believe B should be the answer

upvoted 2 times

...

Deeplaxmi

1 year, 12 months ago

As per me D is right bcos Policy should be first of all there in place to centrally manage mobile computing security.

upvoted 4 times

...

MunaM

2 years ago

I think answer should be B