Certified Information Systems Auditor (CISA) — Question 408

When evaluating the design of controls related to network monitoring, which of the following is MOST important for an IS auditor to review?

Answer options

• A. Network topology diagrams
• B. Reports of network traffic analysis
• C. The ISP service level agreement
• D. Incident monitoring logs

Correct answer: A

Explanation

The correct answer is A, as network topology diagrams provide a comprehensive view of the network's structure and layout, which is crucial for understanding how monitoring controls should be designed. Options B, C, and D, while important, focus on specific aspects of network performance and agreements rather than the overall design of monitoring controls.