CISA Protection of Information Assets Practice Question
During a review of firewall rule sets, an IS auditor identifies a rule that allows 'any-any' traffic from an internal subnet to the DMZ. The rule was implemented six months ago based on a business request that has since been completed. The firewall administrator explains that the rule was kept for convenience. Which of the following is the BEST audit recommendation?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Remove the rule immediately and verify no impact
Keeping a rule after the business need has ended violates the principle of least privilege. The best recommendation is to remove the rule immediately, as retaining it increases risk without justification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Conduct a penetration test to assess the risk
Why it's wrong here
Penetration testing is not necessary; the rule is no longer needed and should be removed.
- ✓
Remove the rule immediately and verify no impact
Why this is correct
Since the business request is completed, the rule should be removed to reduce risk.
- ✗
Document the rule with a risk acceptance signed by management
Why it's wrong here
Risk acceptance is not appropriate because the business need no longer exists; the rule should be removed.
- ✗
Modify the rule to allow only specific ports and protocols
Why it's wrong here
Modifying the rule is unnecessary because the business need has ended; the rule should be removed.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISA question from scratch — 995 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.