CISA Network and Infrastructure Security 2

Question 1

Which of the following BEST reduces the risk of unauthorized wireless network access?

Accepted Answer

Using WPA3 with strong pre-shared keys and 802.1X authentication

Answer

WPA3 with 802.1X provides enterprise-grade authentication and strong encryption, making unauthorized access significantly harder.

Question 2

When auditing a VPN implementation, an IS auditor should FIRST verify that:

Accepted Answer

Strong encryption algorithms and multi-factor authentication are enforced

Answer

Strong encryption and MFA are the foundational controls that protect VPN tunnels from interception and unauthorized access.

Question 3

A penetration test differs from a vulnerability assessment primarily because a penetration test:

Accepted Answer

Actively attempts to exploit discovered vulnerabilities

Answer

Penetration testing goes beyond identifying vulnerabilities by actually attempting to exploit them to determine real-world impact.

Question 4

Which firewall rule principle states that anything not explicitly permitted should be denied?

Accepted Answer

Default deny (implicit deny)

Answer

An implicit deny rule drops all traffic not explicitly allowed, minimizing exposure to unknown or unauthorized connections.

Question 5

An IS auditor reviewing network diagrams notices that production and development environments share the same network segment. The MAIN risk is:

Accepted Answer

Potential for development activity to compromise production systems

Answer

Mixing production and development on the same segment can allow vulnerabilities or misconfigurations in dev to impact live systems.

CISA - Certified Information Systems Auditor Practice Test