Exam CISM topic 1 question 319 discussion

Actual exam question from Isaca's CISM

Question #: 319
Topic #: 1

Which of the following is the BEST method for determining whether a firewall has been configured to provide a comprehensive perimeter defense?

A. A port scan of the firewall from an internal source
B. A simulated denial of service (DoS) attack against the firewall
C. A validation of the current firewall rule set
D. A ping test from an external source

Show Suggested Answer

Suggested Answer: C 🗳️

by richck102 at June 6, 2023, 8:10 a.m.

Comments

Submit Cancel

Hugo1717

10 months, 1 week ago

Selected Answer: C

The correct answer is C. A validation of the current firewall rule set. Explanation: Among the options provided, validating the current firewall rule set is the best method for determining whether a firewall has been configured to provide a comprehensive perimeter defense. Here's why this option is the best method: C. A validation of the current firewall rule set: This involves reviewing and analyzing the existing firewall rules to ensure they align with the organization's security policies and objectives. By validating the rule set, you can identify any misconfigurations, unnecessary rules, or potential security gaps. This method directly assesses the effectiveness of the firewall's configuration in providing comprehensive perimeter defense.

upvoted 3 times

...

[Removed]

11 months, 3 weeks ago

Selected Answer: C

validate the rules one by one

upvoted 1 times

...

richck102

1 year ago

Selected Answer: C

C. A validation of the current firewall rule set

upvoted 2 times

...