Certified Information Systems Auditor (CISA) — Question 289

An IS auditor observes that a bank's web page address is prefixed "https://". The auditor would be correct to conclude that:

Answer options

• A. the bank has established a virtual private network (VPN).
• B. transactions are encrypted.
• C. the bank has a restricted Internet protocol (IP) address.
• D. the customer is connected to the bank's intranet.

Correct answer: B

Explanation

The 'https://' prefix indicates that the data transmitted between the user's browser and the bank's server is encrypted, ensuring secure transactions. The other options do not accurately reflect the implications of 'https://', as it does not indicate the establishment of a VPN, a restricted IP address, or a connection to an intranet.