Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Isaca Cybersecurity-Audit-Certificate Exam - Topic 4 Question 43 Discussion

Actual exam question for Isaca's Cybersecurity-Audit-Certificate exam

Question #: 43
Topic #: 4

[All Cybersecurity-Audit-Certificate Questions]

Which of the following is EASIEST for a malicious attacker to detect?

AUse of insufficient cryptography

BInsecure storage of sensitive data

CSusceptibility to reverse engineering

DAbility to tamper with mobile code

Show Suggested Answer

Suggested Answer: C

The EASIEST thing for a malicious attacker to detect is thesusceptibility to reverse engineering. Reverse engineering is the process of analyzing the code or functionality of an application to understand its structure, logic, or design. Reverse engineering can be used by attackers to discover vulnerabilities, bypass security mechanisms, or modify the application's behavior. Mobile applications are often susceptible to reverse engineering because they are distributed in binary form and can be easily decompiled or disassembled.

by Caprice at Jul 12, 2025, 03:58 AM

Limited Time Offer

25%

Off

Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lera

7 months ago

I’m surprised that people think B is the easiest. Isn’t it all risky?

upvoted 0 times

...

Winfred

7 months ago

I think C is easier to spot, reverse engineering is common.

upvoted 0 times

...

Lucia

7 months ago

Definitely B, insecure storage is a big red flag.

upvoted 0 times

...

Shanda

7 months ago

A is pretty obvious too, especially with weak encryption.

upvoted 0 times

...

Jarvis

7 months ago

Wait, are we really saying tampering with mobile code is easy?

upvoted 0 times

...

Malcom

8 months ago

I’m leaning towards A, but I’m not confident. Insufficient cryptography seems like it could be hard to identify without specific tools.

upvoted 0 times

...

Carma

8 months ago

I feel like tampering with mobile code (option D) could be pretty obvious too, especially if the attacker has access to the device.

upvoted 0 times

...

Bette

8 months ago

I'm not entirely sure, but I remember a practice question that mentioned reverse engineering being a common vulnerability. Could it be option C?

upvoted 0 times

...

Sonia

8 months ago

I think option B might be the easiest for an attacker to detect since insecure storage can often be spotted through simple scanning techniques.

upvoted 0 times

...

Portia

9 months ago

I think the insecure storage of sensitive data is probably the most obvious one for an attacker to find. That's a pretty common vulnerability.

upvoted 0 times

...

Norah

9 months ago

I'm a bit confused on this one. I'd have to review the material again to be sure, but I'm leaning towards susceptibility to reverse engineering as the easiest to detect.

upvoted 0 times

...

William

9 months ago

Definitely the use of insufficient cryptography. That's a classic security flaw that's pretty straightforward for an attacker to spot.

upvoted 0 times

...

Maira

9 months ago

Hmm, I'm not sure about this one. I'd have to think it through a bit more. Maybe the insecure storage of sensitive data could be the easiest to detect?

upvoted 0 times

...

William

9 months ago

I think the easiest one for a malicious attacker to detect would be the use of insufficient cryptography. That's usually pretty obvious if you know what to look for.

upvoted 0 times

...

Vincent

11 months ago

I think B) Insecure storage of sensitive data is the easiest to detect because attackers can easily access it.

upvoted 0 times

...

Edison

11 months ago

I believe C) Susceptibility to reverse engineering is also quite easy for attackers to detect.

upvoted 0 times

...

Izetta

11 months ago

Ah, the age-old question of 'What's the easiest way to get hacked?' I'm voting for B. Insecure storage. It's like leaving your house keys under the doormat.

upvoted 0 times

...

Wilda

11 months ago

I think A. Use of insufficient cryptography is the easiest one. Who doesn't love a good ol' crypto-cracking challenge?

upvoted 0 times

...

Adelina

12 months ago

Definitely D. Ability to tamper with mobile code. That's just begging to be exploited. Yikes!

upvoted 0 times

Jani

11 months ago

A) Use of insufficient cryptography

upvoted 0 times

...

...

Pedro

12 months ago

I agree with Edelmira, insufficient cryptography is a big red flag for attackers.

upvoted 0 times

...

Rosalind

12 months ago

Hmm, I'd go with C. Susceptibility to reverse engineering. Sounds like a juicy target for hackers.

upvoted 0 times

Azalee

11 months ago

C) Susceptibility to reverse engineering

upvoted 0 times

...

Gracia

11 months ago

B) Insecure storage of sensitive data

upvoted 0 times

...

Virgie

11 months ago

A) Use of insufficient cryptography

upvoted 0 times

...

...

Wilson

12 months ago

I'm pretty sure it's B. Insecure storage of sensitive data. That's just asking for trouble!

upvoted 0 times

Audrie

10 months ago

Definitely, it's like leaving the front door wide open for attackers.

upvoted 0 times

...

Loreta

10 months ago

I agree, storing sensitive data insecurely is a big risk.

upvoted 0 times

...

Nieves

11 months ago

D) Ability to tamper with mobile code

upvoted 0 times

...

Wilson

11 months ago

C) Susceptibility to reverse engineering

upvoted 0 times

...

Shalon

11 months ago

B) Insecure storage of sensitive data

upvoted 0 times

...

Carey

11 months ago

A) Use of insufficient cryptography

upvoted 0 times

...

...

Edelmira

12 months ago

I think the easiest for a malicious attacker to detect is A) Use of insufficient cryptography.

upvoted 0 times

...