Question 1441 · 1459 in bank
An IS auditor reviewing an information processing environment decides to conduct external penetration testing. Which of the following is MOST appropriate to include in the audit scope for the organization to distinguish between the auditor's penetration attacks and actual attacks?
Show answer
Answer: C
Explanation
The correct answer is C, Source IP addresses of simulated attacks. External penetration testing is a type of security testing that involves simulating an attack on an organization's systems and infrastructure from outside the organization's network. To distinguish between the auditor's penetration attacks and actual attacks, the IS auditor should include the source IP addresses of the simulated attacks in the audit scope for the organization. This will enable the organization to identify the source of any suspicious activity or attempted attacks and determine whether they are coming from the auditor or from an external threat actor.
Source: Adapted from community discussion — Staanlee