Isaca Cybersecurity-Audit-Certificate Exam - Topic 1 Question 2 Discussion

Actual exam question for Isaca's Cybersecurity-Audit-Certificate exam

Question #: 2
Topic #: 1

[All Cybersecurity-Audit-Certificate Questions]

An IS auditor has learned that a cloud service provider has not adequately secured its application programming interface (API). Which of the following is MOST important for the auditor to consider in an assessment of the potential risk factors?

AResource contention

BIdentity spoofing and phishing

CConfidentiality, integrity, and availability

DDenial of service

Show Suggested Answer

Suggested Answer: C

The MOST important thing for an IS auditor to consider in an assessment of the potential risk factors when a cloud service provider has not adequately secured its application programming interface (API) is the impact on theconfidentiality, integrity, and availabilityof the cloud service. An API is a set of rules and protocols that allows communication and interaction between different software components or systems. An API is often used by cloud service providers to enable customers to access and manage their cloud resources and services. However, if an API is not adequately secured, it can expose the cloud service provider and its customers to various threats, such as unauthorized access, data breaches, tampering, denial-of-service attacks, or malicious code injection.

by Twana at Oct 05, 2023, 12:04 AM

Limited Time Offer

25%

Off

Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Elise

3 months ago

Not sure if A is even a factor here, seems off to me.

upvoted 0 times

...

Blair

3 months ago

C covers everything, can't go wrong with confidentiality and integrity!

upvoted 0 times

...

Arlette

4 months ago

A little surprised that people aren't mentioning D, DoS attacks can be serious.

upvoted 0 times

...

Tommy

4 months ago

I think B is more relevant, identity issues are a big deal.

upvoted 0 times

...

Tresa

4 months ago

Definitely C, those are the core principles of security!

upvoted 0 times

...

Deeann

4 months ago

Denial of service attacks can be serious, but I feel like the focus should really be on identity spoofing and phishing in this context.

upvoted 0 times

...

Candida

4 months ago

I'm a bit confused about resource contention. I don't recall it being a major risk in API security assessments.

upvoted 0 times

...

Filiberto

4 months ago

I think we had a practice question about cloud security risks, and confidentiality, integrity, and availability were highlighted as key concerns.

upvoted 0 times

...

Yan

5 months ago

I remember we discussed the importance of API security in class, but I'm not sure if identity spoofing is the most critical risk factor here.

upvoted 0 times

...

Marjory

5 months ago

Resource contention? I'm not sure that's the most relevant risk factor in this scenario. I'll have to think this through carefully.

upvoted 0 times

...

Latonia

5 months ago

Denial of service could be a major issue if the API is vulnerable. That's probably the most important thing to consider.

upvoted 0 times

...

Avery

5 months ago

I'm a bit confused. Is identity spoofing and phishing the biggest risk here? I'll need to review my notes on cloud security.

upvoted 0 times

...

Justine

5 months ago

Okay, I've got this. The most important factor is confidentiality, integrity, and availability - that's the core of information security.

upvoted 0 times

...

Thaddeus

5 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the potential risks of an unsecured API.

upvoted 0 times

...

Lashanda

5 months ago

I'm confident the answer is A - Assumption. The question clearly states that the project team had an "incorrect belief" about the software's compatibility, which is a classic example of an assumption gone wrong in project management.

upvoted 0 times

...

Harley

5 months ago

Okay, let's see. The error message seems to indicate a problem with the package name or installation. I'll need to double-check the correct package and make sure it's installed properly.

upvoted 0 times

...

Janine

5 months ago

Ah, I remember learning about RuleApps. I'll apply the strategies we discussed in class to narrow down the options and select the correct answer.

upvoted 0 times

...