Isaca CISA Exam - Topic 3 Question 99 Discussion

Actual exam question for Isaca's CISA exam

Question #: 99
Topic #: 3

[All CISA Questions]

Which of the following user actions poses the GREATEST risk for inadvertently introducing malware into a local network?

AUploading a file onto an internal server

BViewing a hypertext markup language (HTML) document

CDownloading a file from an enterprise file share

DOpening an email attachment from an external account

Show Suggested Answer

Suggested Answer: D

by Paris at Apr 07, 2025, 03:51 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

An

2 months ago

B seems pretty safe, HTML can't do much on its own.

upvoted 0 times

...

Detra

2 months ago

Surprised that people still open attachments without checking!

upvoted 0 times

...

Kathryn

3 months ago

A lot of malware comes from email, so I agree with D.

upvoted 0 times

...

German

3 months ago

I think C is riskier, especially if the source isn't verified.

upvoted 0 times

...

Kami

3 months ago

Definitely D, those email attachments are sketchy!

upvoted 0 times

...

Demetra

3 months ago

Opening email attachments seems like the most obvious risk to me. I recall a case study where that led to a major breach.

upvoted 0 times

...

Melissa

4 months ago

I think uploading files to an internal server is generally safe, but I’m not confident about that. We had a practice question on this, and I’m still a bit confused.

upvoted 0 times

...

Sina

4 months ago

I’m not entirely sure, but I feel like downloading files from an enterprise share could also introduce malware if the files are compromised.

upvoted 0 times

...

Launa

4 months ago

I remember we discussed how opening email attachments can be risky, especially from unknown sources. I think that might be the answer.

upvoted 0 times

...

Tresa

4 months ago

D has got to be the right answer. Email attachments from outside the organization are a classic way for malware to get in. Gotta be really careful with those.

upvoted 0 times

...

Karima

4 months ago

I'm leaning towards A. Uploading a file to an internal server seems like it could easily spread malware across the network if the file is compromised.

upvoted 0 times

...

Janine

5 months ago

Hmm, I'm not sure. Uploading a file to an internal server could also be risky if it's infected. I'll have to think this through carefully.

upvoted 0 times

...

Alease

5 months ago

I think the answer is D. Opening an email attachment from an external account seems like the biggest risk for malware, since you don't know what's in that attachment.

upvoted 0 times

...

Lajuana

10 months ago

Gotta be option D. Opening email attachments is like playing Russian roulette with your network security. I'd rather wrestle a hungry lion than click on one of those things.

upvoted 0 times

Ressie

8 months ago

Always better to be safe than sorry when it comes to those.

upvoted 0 times

...

Dortha

8 months ago

Yeah, email attachments can be so dangerous.

upvoted 0 times

...

Jolene

8 months ago

I agree, option D is definitely the riskiest.

upvoted 0 times

...

Laticia

8 months ago

D) Opening an email attachment from an external account

upvoted 0 times

...

Pansy

8 months ago

C) Downloading a file from an enterprise file share

upvoted 0 times

...

Polly

9 months ago

B) Viewing a hypertext markup language (HTML) document

upvoted 0 times

...

Donette

9 months ago

A) Uploading a file onto an internal server

upvoted 0 times

...

Pilar

10 months ago

Option D all the way! Those email attachments are like the digital equivalent of that suspicious-looking package your neighbor left on your doorstep. Hard pass!

upvoted 0 times

Lynsey

9 months ago

C) Downloading a file from an enterprise file share

upvoted 0 times

...

Katie

9 months ago

B) Viewing a hypertext markup language (HTML) document

upvoted 0 times

...

Meaghan

9 months ago

A) Uploading a file onto an internal server

upvoted 0 times

...

Mike

10 months ago

Hmm, I'm torn between B and D. Viewing HTML docs can be risky, but those email attachments are just begging to unleash a virus. Maybe I should start using a hazmat suit for my daily email check.

upvoted 0 times

...