Isaca Updated CISA Exam Questions and Answers by ozzy

The best way to provide assurance of the integrity of a firewall log is to ensure that the log cannot be modified. A firewall log is a record of the traffic and events that occur at the firewall, which is a device or software that controls and filters the incoming and outgoing network traffic based on predefined rules and policies. The integrity of a firewall log means that the log is accurate, complete, consistent, and valid, and that it has not been altered, deleted, or corrupted by unauthorized or malicious parties. The IS auditor should verify that the firewall log has adequate controls to prevent or detect any modification of the log, such as encryption, hashing, digital signatures, write-once media, or tamper-evident seals. The other options are not as effective as ensuring that the log cannot be modified, because they either do not address the integrity of the log data, or they are monitoring or retention measures rather than preventive or detective controls. References: CISA Review Manual (Digital Version)1, Chapter 5, Section 5.2.4

A Disaster Recovery as a Service (DRaaS) provider is responsible for system recovery procedures, including restoring systems and services in a disaster scenario. This is the core functionality of DRaaS.

Stakeholder Communications (Option B):This is typically managed internally by the organization to ensure alignment with its crisis management plan.

Validation of Recovered Data (Option C):The organization must verify data integrity to meet business requirements.

Maintaining Currency of Data (Option D):While DRaaS may handle data backups, the organization retains responsibility for ensuring the relevance of the data being backed up.

The most important thing for the company to verify when outsourcing the printing of customer statements is whether the provider’s information security controls are aligned with the company’s. This isbecause customer statements contain sensitive personal and financial information that need to be protected from unauthorized access, disclosure, modification or destruction. The provider’s information security controls should be consistent with the company’s policies, standards and regulations, and should be audited periodically to ensure compliance. The other options are also relevant, but not as critical as information security. References: CISA Review Manual (Digital Version)1, Chapter 3, Section 3.2.2

Comprehensive and Detailed Explanation:

In Zero Trust architecture (ZTA), the principle is “never trust, always verify.” The most important aspect for an IS auditor to evaluate is whether access control policies are properly designed, aligned with industry standards, and consistently enforced. These policies define how identities, devices, and contexts are authenticated and authorized before gaining access.

Option A: Perimeter firewalls are less relevant in Zero Trust, which minimizes reliance on network boundaries.

Option C: Access reviews are important but are periodic, not continuous enforcement.

Option D: Secure remote protocols are necessary but part of broader access policy enforcement.

Option B: Correct — policies are the foundation of Zero Trust security.

???? ISACA Reference: ISACA’s “Zero Trust and Audit Considerations” guidance; CISA Review Manual 27th Edition, Domain 5, section on identity, access, and authentication controls.