Exam (elaborations)
CISA - Domain 5 Questions (1)
- Course
- CISA - Chapter 1
- Institution
- CISA - Chapter 1
CISA - Domain 5 Questions (1)
[Show more]
Seller
Follow
Content preview
CISA - Domain 5 QuestionsAn IS auditor is reviewing a manufacturing company and finds that mainframe users at a remote
site connect to the mainframe at headquarters over the Internet via Telnet. Which of the
following offers the STRONGEST security?
Use of a point-to-point leased line
Use of a firewall rule to allow only the Internet Protocol address of the remote site
Use of two-factor authentication
Use of a nonstandard port for Telnet - ANS-Use of a point-to-point leased line is correct. A
leased line will effectively extend the local area network of the headquarters to the remote site,
and the mainframe Telnet connection would travel over the private line, which would be less of a
security risk when using an insecure protocol such as Telnet.
Use of a firewall rule to allow only the Internet Protocol address of the remote site is incorrect. A
firewall rule at the headquarters network to only allow Telnet connections from the Internet
Protocol (IP) address assigned to the remote site would make the connection more secure than
the current arrangement, but a dedicated leased line is the most secure option of those listed.
Use of two-factor authentication is incorrect. While two-factor authentication would enhance the
login security, it would not secure the transmission channel against eavesdropping, and,
therefore, a leased line would be a better option.
Use of a nonstandard port for Telnet is incorrect. Attacks on network services start with the
assumption that network services use the standard Transmission Control Protocol/IP port
number assigned for the service, which is port 23 for Telnet. By reconfiguring the host and
client, a different port can be used. Assigning a nonstandard port for services is a good general
security practice because it makes it more difficult to determine what service is using the port;
however, in this case, creating a leased-line connection to the remote site would be a better
solution.
Which of the following controls would be the MOST comprehensive in a remote access network
with multiple and diverse subsystems?
Proxy server
Firewall installation
Demilitarized zone
Virtual private network - ANS-Virtual private network (VPN) is correct. The best way to secure
remote access is through the use of encrypted VPNs. This would allow remote users a secure
connection to the main systems.
Proxy server is incorrect. This is a type of firewall installation used as an intermediary to filter
and control traffic between internal and external parties.
Firewall installation is incorrect. While firewall installations are the primary line of defense, they
would need to have encryption and a VPN to secure remote access traffic.
Demilitarized zone (DMZ) is incorrect. This an isolated network used to permit outsiders to
access certain corporate information in a semi-trusted environment. The DMZ may host a web
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller lydiaomutho. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for CA$11.53. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
79202 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now