Which of the following should be of GREATEST concern to an IS auditor analyzing the results of a network discovery scan?

The correct answer is B. The scan detected systems that are not in the asset inventory. The greatest concern for an IS auditor is when the network discovery scan detects systems that are not in the asset inventory. This indicates that there may be unauthorized or untracked devices on the network, which could pose security risks. These systems might not have proper…

Submitted by paula_co· Apr 18, 2026Governance and Management of IT

Question

Options

AScan results contain Internet of Things (IoT) systems
BThe scan detected systems that are not in the asset inventory
CThe scan was performed during office hours
DScan results did not list all systems that are in the asset inventory

How the community answered

(52 responses)

A
10% (5)
B
44% (23)
C
15% (8)
D
31% (16)

Explanation

The greatest concern for an IS auditor is when the network discovery scan detects systems that are not in the asset inventory. This indicates that there may be unauthorized or untracked devices on the network, which could pose security risks. These systems might not have proper security controls or monitoring in place, making them potential entry points for attacks or vulnerabilities.

Topics

#Asset Inventory#Network Scanning#IT Governance#Risk Management

Community Discussion

No community discussion yet for this question.

Full CISA Practice