Exam IT-Risk-Fundamentals Topic 4 Question 54 Discussion
Actual exam question for ISACA's IT-Risk-Fundamentals exam
Question #: 54
Topic #: 4
Question #: 54
Topic #: 4
When evaluating the current state of controls, which of the following will provide the MOST comprehensive analysis of enterprise processes, incidents, logs, and the threat environment?
Suggested Answer: B Vote an answer
An IT operations and management evaluation provides the most comprehensive analysis of the areas listed. It would typically include a review of enterprise processes, incident response procedures, system logs, and the threat environment to assess the effectiveness of existing controls.
An EA assessment (A) focuses on the IT architecture, not necessarily the operational aspects. A third-party assurance review (C) can be valuable, but its scope may be more limited.
An EA assessment (A) focuses on the IT architecture, not necessarily the operational aspects. A third-party assurance review (C) can be valuable, but its scope may be more limited.
by Afra at Apr 11, 2025, 05:57 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).