Book Image

CISA – Certified Information Systems Auditor Study Guide - Second Edition

By : Hemang Doshi
5 (3)
Book Image

CISA – Certified Information Systems Auditor Study Guide - Second Edition

5 (3)
By: Hemang Doshi

Overview of this book

With the latest updates and revised study material, this second edition of the Certified Information Systems Auditor Study Guide provides an excellent starting point for your CISA certification preparation. The book strengthens your grip on the core concepts through a three-step approach. First, it presents the fundamentals with easy-to-understand theoretical explanations. Next, it provides a list of key aspects that are crucial from the CISA exam perspective, ensuring you focus on important pointers for the exam. Finally, the book makes you an expert in specific topics by engaging you with self-assessment questions designed to align with the exam format, challenging you to apply your knowledge and sharpen your understanding. Moreover, the book comes with lifetime access to supplementary resources on an online platform, including CISA flashcards, practice questions, and valuable exam tips. With unlimited access to the website, you’ll have the flexibility to practice as many times as you desire, maximizing your exam readiness. By the end of this book, you’ll have developed the proficiency to successfully obtain the CISA certification and significantly upgrade your auditing career.
Table of Contents (14 chapters)

Summary

In this chapter, you learned about the identification of network-related risks and pertinent controls. You explored different components of the network, including repeaters, hubs, switches, routers, and firewalls. You also learned about the basic structure of OSI layers and network physical media.

The following are some important topics you covered in this chapter:

  • Optical fiber is a thin and flexible piece of fiber made of glass or plastic. Fiber-optic cables are considered to be more secure than copper wire. Fiber optics is the preferred choice for managing long-distance networks and handling high volumes of data. They are not impacted or affected by EMI and have very marginal transmission loss.
  • The most stringent and robust configuration setting in firewall rules is “deny all traffic and allow specific traffic” (as opposed to “allow all traffic and deny specific traffic”). This restricts unknown traffic from entering critical systems...