ExpertMedium1 markMultiple Choice
CPA · Question 49 · Area II: Security
Which CIS Control is typically prioritized as Control #1 because you cannot protect what you do not know you have?
Which CIS Control is typically prioritized as Control #1 because you cannot protect what you do not know you have?
Answer options:
A.
Inventory and Control of Enterprise Assets
B.
Data Protection
C.
Account Management
D.
Incident Response Management
How to approach this question
Recall the foundational CIS Control.
Full Answer
A.Inventory and Control of Enterprise Assets✓ Correct
A
CIS Control 1 is 'Inventory and Control of Enterprise Assets'. You cannot secure devices if you don't know they exist on your network.
Common mistakes
Thinking Data Protection comes before Hardware Inventory.
Practice the full CPA ISC Practice Exam 3
82 questions · hints · full answers · grading
More questions from this exam
Q01A CPA is advising a client who is migrating their legacy on-premise ERP system to a cloud-based s...MediumQ02During a review of a client's cloud governance structure, an auditor notes that the client uses a...MediumQ03An auditor is evaluating the 'Processing Integrity' principle for a financial institution's loan ...HardQ04A company uses a batch processing system to update inventory records overnight. The 'Grandfather-...HardQ05During a walkthrough of the change management process, an auditor observes that the 'Developer' r...Medium