Discuss Isaca Cybersecurity-Audit-Certificate Exam Topic 1 Question 2

An IS auditor has learned that a cloud service provider has not adequately secured its application programming interface (API). Which of the following is MOST important for the auditor to consider in an assessment of the potential risk factors?

AResource contention

BIdentity spoofing and phishing

CConfidentiality, integrity, and availability

DDenial of service

Suggested Answer: C

The MOST important thing for an IS auditor to consider in an assessment of the potential risk factors when a cloud service provider has not adequately secured its application programming interface (API) is the impact on theconfidentiality, integrity, and availabilityof the cloud service. An API is a set of rules and protocols that allows communication and interaction between different software components or systems. An API is often used by cloud service providers to enable customers to access and manage their cloud resources and services. However, if an API is not adequately secured, it can expose the cloud service provider and its customers to various threats, such as unauthorized access, data breaches, tampering, denial-of-service attacks, or malicious code injection.

Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

Elise 11 months ago

Not sure if A is even a factor here, seems off to me.

Blair 11 months ago

C covers everything, can't go wrong with confidentiality and integrity!

Arlette 11 months ago

A little surprised that people aren't mentioning D, DoS attacks can be serious.

Tommy 11 months ago

I think B is more relevant, identity issues are a big deal.

Tresa 11 months ago

Definitely C, those are the core principles of security!

Deeann 12 months ago

Denial of service attacks can be serious, but I feel like the focus should really be on identity spoofing and phishing in this context.

Candida 12 months ago

I'm a bit confused about resource contention. I don't recall it being a major risk in API security assessments.

Filiberto 12 months ago

I think we had a practice question about cloud security risks, and confidentiality, integrity, and availability were highlighted as key concerns.

Yan 1 year ago

I remember we discussed the importance of API security in class, but I'm not sure if identity spoofing is the most critical risk factor here.

Marjory 1 year ago

Resource contention? I'm not sure that's the most relevant risk factor in this scenario. I'll have to think this through carefully.

Latonia 1 year ago

Denial of service could be a major issue if the API is vulnerable. That's probably the most important thing to consider.

Avery 1 year ago

I'm a bit confused. Is identity spoofing and phishing the biggest risk here? I'll need to review my notes on cloud security.

Justine 1 year ago

Okay, I've got this. The most important factor is confidentiality, integrity, and availability - that's the core of information security.

Thaddeus 1 year ago

Hmm, this seems like a tricky one. I'll need to think carefully about the potential risks of an unsecured API.

Lashanda 1 year ago

I'm confident the answer is A - Assumption. The question clearly states that the project team had an "incorrect belief" about the software's compatibility, which is a classic example of an assumption gone wrong in project management.

Harley 1 year ago

Okay, let's see. The error message seems to indicate a problem with the package name or installation. I'll need to double-check the correct package and make sure it's installed properly.

Janine 1 year ago

Ah, I remember learning about RuleApps. I'll apply the strategies we discussed in class to narrow down the options and select the correct answer.

Isaca Cybersecurity-Audit-Certificate Exam - Topic 1 Question 2 Discussion