Section: Protection of Information Assets

Any person with wrongful intentions can connect a laptop to the network. The insecure connecting points make unauthorized access possible if the individual has knowledge of a valid user ID and password. The other choices are controls for preventing unauthorized network access. If system passwords are not readily available for intruders to use, they must guess, introducing an additional factor and requires time. System passwords provide protection against unauthorized use of terminals located in insecure locations. Supervision is a very effective control when used to monitor access to a small operating unit or production resources.

Section: Protection of Information Assets
Explanation:
Time stamps are an effective control for detecting duplicate transactions such as payments made or
received.

This allows the hypervisor to take full control of the hardware and provide direct access to the underlying hardware, which allows for efficient use of resources and more direct control over the virtual environment. The CISA Study Manual recommends that organizations use best practices when setting up virtualized environments to ensure that the underlying hardware and software are configured correctly and securely.