Exam CISA All QuestionsBrowse all questions from this exam
Question 313

Due to a high volume of customer orders, an organization plans to implement a new application for customers to use for online ordering. Which type of testing is

MOST important to ensure the security of the application prior to go-live?

    Correct Answer: C

    To ensure the security of the application before it goes live, vulnerability testing is the most crucial. Vulnerability testing identifies security flaws and weaknesses that could be exploited by attackers. This ensures that the application is secure and can protect sensitive customer information. Other types of testing, like stress testing, focus on performance under load but do not directly address security concerns.

Discussion
DavoleeOption: A

Stress testing is one of the most useful software testing procedures since it helps the team to assure the product's performance. Furthermore, it verifies the software's security, dependability, and error-handling capabilities, further enhancing its quality

MunaMOption: C

Answer should be C as it's talking about security of the application

Zephaniah

A is the answer.. security also addresses system availability. the issue here is if the system will handle the voluminous orders

46080f2Option: C

C. Vulnerability testing is to ensure the security of the application. It can't be A. Searching on CISA ISACA Ref. Manual 27th ed. we find two occurences of the term "stress testing". 1) "3.5.1 Testing Classifications" - Stress Testing: Studying the impact on the application by testing with an incremental number of concurrent users/services on the application to determine the maximum number of concurrent users/services the application can process 2) Glossary C - Capacity stress testing: Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing. Also searching the ISACA site on google ( search operator site:isaca.org ) doesn't give any indication that stress testing could have something to do with security.

JustCisaOption: C

CCCCCCCCCCCCCCCC if they ask for "ensure the security of the application" it has to be vulnerability testing stress testing has nothing to do with security

JulianleehkOption: C

should be c

RS66Option: C

The question says ensure SECURITY. Vulnerability testing ensures security while stress testing ensures performance and availability.

analuisamoreiraOption: C

The question is about to "ensure security", how come Stess testing will address that?

topikalOption: C

Stress testing is not directly related to security

SwallowsOption: A

Software stress tests are designed and performed to identify vulnerabilities, weaknesses, and potential failures that may occur when a system is subjected to intense loads and adverse conditions.

SibsankarOption: C

Vulnerability testing is specifically designed to identify weaknesses and security flaws in the application that could be exploited by attackers. So , right answer is C

RachyOption: A

A is the answer as the keyword in this question is high volume… so they need to ensure that the product can take many performance at once

oldmagicOption: C

Correct answer is C. The question specifically asks "ensure the security of the application" so this rules out A

3008Option: C

security is important of this question , c is answer