CISA Certified Information Systems Auditor – Question1402

An organization uses a web server hosting critical applications. Which of the following would represent the HIGHEST risk regarding the availability and integrity of the web server?

A.
Inadequate rotation of backups
B. Not disabling the server's external drives
C. Not applying program fixes on a regular basis
D. Placing the web server in the DMZ

Correct Answer: C