Auditing

Question 1

What is auditing in security?

Answer 1

A technical assessment conducted on apps, systems, or networks.

Question 2

What type of control is auditing?

Answer 2

A detective control

Note: A detective control is looking to ensure that security measures were implemented correctly or see what went wrong.

Question 3

What are the two methods of auditing?

Answer 3

Manual and automatic

Question 4

In a manual audit, what will be reviewed?

Answer 4

Security logs
Access Control Lists (ACL's)
User Rights/Permissions
Group Policies (GPO's)
Vulnerability Scans
Written Organizational Policies
Interviewing Personnel

Note: For exam, consider logs to be apart of auditing because they are frequently tied together inside the auditing concept.

Question 5

What is automated auditing?

Answer 5

An automated audit is a computer-assisted audit using software tools.

Question 6

Note about auditing

Answer 6

Auditing is usually conducted with a combination of both automatic and manual auditing