nerdexam
Isaca

CISM · Question #576

What is the BEST way to verify the effectiveness of a newly implemented firewall?

The correct answer is C. Penetration testing. Penetration testing is the best way to verify the effectiveness of a newly implemented firewall because it actively tests the firewall’s ability to block unauthorized access and identifies any exploitable weaknesses in a real-world scenario.

Submitted by luis.pe· Apr 18, 2026Information Security Program Development and Management

Question

What is the BEST way to verify the effectiveness of a newly implemented firewall?

Options

  • AConfiguration review
  • BVulnerability scanning
  • CPenetration testing
  • DAutomated access control list review

How the community answered

(19 responses)
  • A
    11% (2)
  • B
    5% (1)
  • C
    68% (13)
  • D
    16% (3)

Explanation

Penetration testing is the best way to verify the effectiveness of a newly implemented firewall because it actively tests the firewall’s ability to block unauthorized access and identifies any exploitable weaknesses in a real-world scenario.

Topics

#Firewall#Security Testing#Penetration Testing#Control Effectiveness

Community Discussion

No community discussion yet for this question.

Full CISM Practice