Which Network Access Poses the Highest Risk in a CISA Review?

CISA By islever Editorial Last updated

Short answer

B Direct network access from PCs to the Internet bypasses critical security controls like firewalls and proxies, creating the highest risk.

Question

A network review is being undertaken to evaluate security risks. Which of the following would be of MOST concern if identified during the review?
  1. Router access to the Internet from the internal network
  2. Direct network access from PCs to the Internet Correct Answer
  3. Firewall access to the internal network from the Internet
  4. Remote access to the internal network from internal PCs

Key Takeaways

Tests risk prioritization by distinguishing between standard architectural components and uncontrolled endpoint exposure that lacks egress filtering.

This CISA question tests your ability to prioritize network security risks based on control maturity. Community consensus confirms that direct PC-to-internet access bypasses critical defenses, making it the most significant vulnerability.

Common mistake: Candidates often select C, mistakenly believing any external firewall connection is inherently dangerous, while overlooking that firewalls are standard protective layers designed precisely for this traffic.

Expert Analysis

Why the Answer Is Correct

Direct network access from PCs to the Internet (Option B) represents the highest risk because it completely bypasses essential security controls such as firewalls, proxies, and intrusion detection systems. Without intermediary filters, endpoints are immediately exposed to malware, phishing campaigns, and data exfiltration attempts. ISACA prioritizes uncontrolled outbound and inbound traffic because it eliminates audit trails and enforcement policies.

Why the Other Options Are Wrong

Router access (A) and remote access (D) are standard, managed functions that typically operate within defined security perimeters. Option C describes a normal architectural component; firewalls are explicitly designed to handle internet-to-internal traffic, and the option lacks negative qualifiers like 'unrestricted' or 'misconfigured.' Therefore, they pose lower immediate risks compared to unfiltered endpoint exposure.

Community Comment Notes

Several users correctly identified B, noting that 'direct access means no controls' [Comment 2]. While a minority argued for C based on inbound/outbound logic [Comment 6], experienced auditors recognize that unmonitored egress traffic often causes greater enterprise damage than filtered ingress. Comment 1 accurately highlights that direct PC connectivity removes all network-level governance.

Exam Strategy

Focus on identifying missing security controls rather than assuming standard infrastructure components are problematic. When evaluating risk, prioritize scenarios where traffic bypasses firewalls, proxies, or logging mechanisms.

Frequently Asked Questions

Why is firewall access not the highest risk?

Firewalls are standard protective layers designed to filter internet traffic. Without qualifiers like 'unrestricted,' they represent normal architecture, not a vulnerability.

Does router access pose a greater threat than direct PC access?

No. Routers manage traffic routing and typically sit behind firewalls. Direct PC access bypasses all intermediate controls, enabling malware spread and data exfiltration.

More CISA FAQ →

Community Votes

C
67%
B
33%

67% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 6 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 6

  1. marc4354345 👍 2
    My understanding is that B implies that there is no firewall nor proxy between the PC and the internet ("direct access"), which would indeed be the biggest problem. The formulation of C is unclear. What does "Firewall access" mean? It does not sound like direct external access.
  2. Sibsankar 👍 1
    Firewalls act as a barrier between internal networks and external networks like the Internet. Allowing unrestricted or unauthorized access through the firewall from the Internet to the internal network poses a significant security risk. The correct answer should be C
  3. MJORGER 👍 1
    Agree C is correct. Options A, B, and D also represent security concerns, but they are typically less severe compared to direct firewall access from the Internet to the internal network.
  4. MIMIBAK 👍 1 Answered B
    the question say "of concern" direct access means no controls
  5. RS66 👍 1 Answered C
    C. Firewall access to the internal network from the Internet
Show 1 more comment
  1. joehong 👍 1 Answered C
    Yes is C. Incoming > outgoing

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Greatest Fraud Risk: Mandatory Leave vs Access Reviews

S-grade

Environmental Detector Placement Risks in Data Centers

S-grade

Next Step When Periodic Access Reviews Are Missing | CISA

S-grade

Best Backup Scheme for Rapid Data Restoration?

S-grade

Practice All CISA Questions

Access 400 questions with complete answers and detailed explanations.

View Full CISA Practice Test →

← Back to CISA Study Guide