Certified Information Systems Auditor (CISA) — Question 222

Which of the following BEST enables an IS auditor to combine and compare access control lists from various applications and devices?

Answer options

• A. Audit hooks
• B. Integrated test facility (ITF)
• C. Snapshots
• D. Data analytics

Correct answer: D

Explanation

Data analytics is the best choice as it enables the auditor to aggregate and analyze data from multiple sources, making it easier to compare access control lists. Audit hooks, Integrated test facilities, and Snapshots do not provide the same level of comparative analysis across diverse applications and devices.