Which of the following findings would be of GREATEST concern to an IS auditor reviewing firewall security for an organization ' s corporate network?
The production configuration does not conform to corporate policy.
Responsibility for the firewall administration rests with two different divisions.
Industry hardening guidance has not been considered.
The firewall configuration file is extremely long and complex.
Submit