Home

Home / Isaca / CISA

Question list

List of questions

Question 1

(0)

What would be an IS auditor's BEST recommendation upon finding that a third-party IT service provider hosts the organization's human resources (HR) system in a foreign country?

Question 2

(0)

Which of the following is the BEST way to enforce the principle of least privilege on a server containing data with different security classifications?

Question 3

(0)

The PRIMARY benefit of automating application testing is to:

Question 4

(0)

Which of the following BEST addresses the availability of an online store?

Question 5

(0)

Which of the following is the BEST way to prevent social engineering incidents?

Question 6

(0)

The PRIMARY purpose of a configuration management system is to:

Question 7

(0)

Which of the following is the MOST important consideration when evaluating the data retention policy for a global organization with regional offices in multiple countries?

Question 8

(0)

Which of the following BEST enables alignment of IT with business objectives?

Question 9

(0)

Which of the following are used in a firewall to protect the entity's internal resources?

Question 10

(0)

Which of the following would be MOST impacted if an IS auditor were to assist with the implementation of recommended control enhancements?

Open VPLUS File

Convert VPLUS to PDF

Related questions

Which of the following is the BEST indicator of the effectiveness of an organization's incident response program?

Which of the following is the BEST way to ensure that an application is performing according to its specifications?

An IS auditor is reviewing a client's outsourced payroll system to assess whether the financial audit team can rely on the application. Which of the following findings would be the auditor's GREATEST concern?

The FIRST step in an incident response plan is to:

Which of the following poses the GREATEST risk to the use of active RFID tags?

An IS auditor is reviewing a contract for the outsourcing of IT facilities. If missing, which of the following should present the GREATEST concern to the auditor?

Which of the following is the BEST control lo mitigate attacks that redirect Internet traffic to an unauthorized website?

An IS audit manager was temporarily tasked with supervising a project manager assigned to the organization's payroll application upgrade. Upon returning to the audit department, the audit manager has been asked to perform an audit to validate the implementation of the payroll application. The audit manager is the only one in the audit department with IT project management experience. What is the BEST course of action?

An IS auditor is reviewing the backup procedures in an organization that has high volumes of data with frequent changes to transactions. Which of the following is the BEST backup scheme to recommend given the need for a shorter restoration time in the event of a disruption?

Which of the following is the BEST way for an IS auditor to assess the design of an automated application control?

Question 618 - CISA discussion

Report

A web proxy server for corporate connections to external resources reduces organizational risk by:

A.

anonymizing users through changed IP addresses.

B.

providing multi-factor authentication for additional security.

C.

providing faster response than direct access.

D.

load balancing traffic to optimize data pathways.

Suggested answer: A

Explanation:

A web proxy server for corporate connections to external resources reduces organizational risk by anonymizing users through changed IP addresses.A web proxy server is an intermediary between the web and client devices, that can provide proxy services to a client or a group of clients1.One of the main benefits of using a web proxy server is that it allows users to change their IP address and location, circumventing geoblocking and hiding their identity from the target website2.

Anonymizing internal IP addresses is important for online security, as it helps protect the organization from several threats. If an attacker controls a server that employees connect to, the outgoing IP address of the organization's router is logged on the server.This IP address can be used by the attacker to launch a denial-of-service (DoS) attack or to create more targeted attacks such as phishing2.With a web proxy server, the IP shown in web logs is the web proxy's, which means an attacker would not have access to the organization's router outgoing IP address2.

Anonymizing outgoing IP addresses is also important when carrying out sensitive actions online, such as law enforcement investigations or competitive intelligence.A web proxy server can help users avoid exposing their internal IP address that leads back to their organization, and instead use a third-party web proxy that provides more anonymity2.

The other options are not directly related to reducing organizational risk by using a web proxy server.Providing multi-factor authentication for additional security (option B) is a benefit of some web proxy servers, but it is not the main purpose of using a web proxy server3.Providing faster response than direct access (option C) is a benefit of some web proxy servers that cache content for better data transfer speeds and less bandwidth usage, but it is not directly related to reducing organizational risk1.Load balancing traffic to optimize data pathways (option D) is a benefit of some web proxy servers that distribute traffic across multiple servers, but it is not directly related to reducing organizational risk4.

Show Answer

asked 18/09/2024

walterio mendez

32 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first