Which of the following is the BEST audit procedure to determine if a firewall is configured in compliance with an organization’s security policy?
A.
Review the parameter settings.
B.
Interview the firewall administrator.
C.
Review the actual procedures.
D.
Review the device’s log file for recent attacks.
Explanation:
A review of the parameter settings will provide a good basis for comparison of the actual configuration to the security policy and will provide audit evidence documentation. The other choices do not provide audit evidence as strong as choice A.