An IS auditor reviewing an information processing environment decides to conduct external penetration testing. Which of the following is MOST appropriate to include in the audit scope for the organization to distinguish between the auditor's penetration attacks and actual attacks?

Question

Dinuka Darshana · Accepted Answer

Source IP addresses of simulated attacks

Dinuka Darshana · Answer

Restricted host IP addresses of simulated attacks

Dinuka Darshana · Answer

Testing techniques of simulated attacks

Dinuka Darshana · Answer

Timing of simulated attacks

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 764 - CISA discussion

Suggested answer: C

0 comments