An IS auditor finds that a key Internet-facing system is vulnerable to attack and that patches are not available. What should the auditor recommend be done FIRST?
A.
Implement additional firewalls to protect the system.
Deploying a new firewall will require cost and will not address vulnerability issues on the server. It is always safe to conduct a risk assessment and the results will guide your remediation plan
Practically, I dont think we should implement a firewall to protect the server just because it is not patching.
upvoted 1 times
...
...
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
5b56aae
7 months, 2 weeks agoMoruf
10 months, 3 weeks agoPakawat
1 year, 6 months agoEric0223
1 year, 11 months agoBaggio13
1 year, 1 month agoMichaelHoang
1 year, 10 months ago