最近、システム管理者が情報システム監査人に、組織外からの侵入試行が数回発生したことを報告しました。このような侵入を検出するのに最も効果的なのは次のうちどれですか。
正解:B
Periodically reviewing log files is the most effective way to detect intrusion attempts from outside the organization, as they can provide evidence of unauthorized access attempts, source IP addresses, timestamps and other relevant information. Using smart cards with one-time passwords or installing biometrics-based authentication can prevent unauthorized access, but not detect it. Configuring the router as a firewall can block unwanted traffic, but not log it. References: ISACA, CISA Review Manual, 27th Edition, 2018, page 361